1. The Money Shot & Trigger (Client -> WHMCS)
The client pays the invoice. Your billing system (WHMCS) receives the successful payment callback from Stripe/PayPal. Immediately, the automation module kicks in and fires an API call to your upstream domain registrar.
Monitor WHMCS Registrar API Calls:
If a domain fails to provision, this is where you catch API limits or insufficient funds.
tail -f /var/www/html/megabre_whmcs/modules/registrars/modulelog.txt
2. Speaking EPP (WHMCS -> Registrar)
The registrar's system translates your API call into an EPP (Extensible Provisioning Protocol) <domain:create> XML payload. It packs the WHOIS contact IDs and the default Name Servers configured in your WHMCS settings, then ships it to the Registry.
RDAP/Whois Check:
Verify the freshly created domain status directly via RDAP instead of legacy WHOIS.
curl -s https://rdap.verisign.com/com/v1/domain/megabre.com | jq .status
3. The Registry Lock-In (Registrar -> Registry)
The registrar hits the central Registry (Verisign for .com, PIR for .org). The Registry checks for availability. If clear, it deducts the wholesale registration fee directly from your registrar's prepaid balance. The domain object is created and locked to your registrar. It is now your property.
4. TLD Zone Injection (Registry -> TLD Root Servers)
The Registry takes the Name Servers (e.g., ns1.megabre.com) and injects them into the authoritative TLD zone file. This delegation tells the global root servers where to route traffic for your newly minted domain.
Bypass Caches & Check TLD Servers:
Query the specific gTLD servers directly to ensure the Registry has published your NS records, ignoring local ISP caches.
dig @a.gtld-servers.net megabre.com NS +short
5. The ICANN Trap: RAA Verification
The domain is live, but ICANN demands contact verification. The registrar automatically sends a mandatory RAA Verification email to the registrant's address. If the client ignores this email for 15 days, the registrar forcibly suspends the domain, killing DNS resolution.
Catching Suspended Domains:
When a client opens a ticket saying their new site is down, look for the clientHold EPP status. It means they ignored the ICANN email.
whois example.com | grep -i "clientHold"
Was this answer helpful?
Görüşünüz bizim için değerli!