check: annotate owned domains in DoH-check output (non-blocking)

9f69a100b9e464524ac1a51c082b3ca3b06198f5 · 2026-05-12 18:42:11 -0700 · steve

check.js is read-only DoH (no leak channel), so blocking owned domains
adds no safety. But the user can mis-read 'TAKEN' as 'someone else
beat me to it' when in fact they already own it. Now the JSON output
includes owned: true|false and a clearer 'OWNED — this domain is in
data/owned.json' advice line when applicable.

Also recorded 5.07h slice 0-1 RECHECK#3 datapoint: 0/10. Cumulative
0/170 across 18 datapoints — curve unchanged across the 1h gap from
4.20h.

Files touched

M check.js

Diff

commit 9f69a100b9e464524ac1a51c082b3ca3b06198f5
Author: steve <steve@designerwallcoverings.com>
Date:   Tue May 12 18:42:11 2026 -0700

    check: annotate owned domains in DoH-check output (non-blocking)
    
    check.js is read-only DoH (no leak channel), so blocking owned domains
    adds no safety. But the user can mis-read 'TAKEN' as 'someone else
    beat me to it' when in fact they already own it. Now the JSON output
    includes owned: true|false and a clearer 'OWNED — this domain is in
    data/owned.json' advice line when applicable.
    
    Also recorded 5.07h slice 0-1 RECHECK#3 datapoint: 0/10. Cumulative
    0/170 across 18 datapoints — curve unchanged across the 1h gap from
    4.20h.
---
 check.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/check.js b/check.js
index 2cda34c..8e7a1fc 100644
--- a/check.js
+++ b/check.js
@@ -5,6 +5,7 @@
 // all known leak vectors after 3 confirmed snipes (callr.app, callr.co, butlr.app).
 
 const https = require('https');
+const { isOwned } = require('./owned-check');
 
 const target = (process.argv[2] || '').trim().toLowerCase();
 if (!target || !target.includes('.')) {
@@ -48,9 +49,11 @@ function doh(name, type = 'NS') {
   // Available if BOTH NS + SOA come back NXDOMAIN. Either NOERROR signals the TLD recognizes it.
   const available = nxNs && nxSoa;
 
+  const owned = isOwned(target);
   const result = {
     domain: target,
     available,
+    owned,
     confidence: available ? 'high' : hasNs || hasSoa ? 'high' : 'medium',
     signals: {
       ns_status: ns.Status,
@@ -62,7 +65,9 @@ function doh(name, type = 'NS') {
     method: 'cloudflare-doh-ns-soa',
     leak_minimal: true,
     timestamp: new Date().toISOString(),
-    advice: available
+    advice: owned
+      ? 'OWNED — this domain is in data/owned.json (you already have it). DoH still ran.'
+      : available
       ? 'AVAILABLE — register within minutes via API. Do not type into registrar search boxes.'
       : 'TAKEN — TLD recognizes the name. Move on to the next candidate.',
   };

← 46c5487 owned-check: extract shared module + extend safety to honeyp · back to Domain Sniper · register: fix Namecheap false-positive when API ok but regis 667159d →