Domain names are being transfered without consent! This is Big trouble.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Blaze
    Confirmed User
    • Oct 2001
    • 298

    #1

    Domain names are being transfered without consent! This is Big trouble.

    It happened to sleazydream and it happened to me. One of my high traffic gallery domains was transfered to anouther registrar without so much as a email to me.

    This domain was on directnic and it still shows up in my account, but whois lookups show someone else, and all the traffic is being redircted to spyware virus hell. I have tried contacting both registrars but I doubt I will hear anything till monday.

    How is this possible? How can domains be stolen like this?
  • Darkystar
    Confirmed User
    • Jan 2002
    • 273

    #2
    holy fucking shit, i feel sorry for you
    was your domain locked? it should't be transferred anyway without you confirming the transfer, but still?

    Comment

    • DarkJedi
      No Refunds Issued.
      • Feb 2001
      • 28301

      #3
      Jews strike again

      Comment

      • Vox
        Confirmed User
        • Mar 2002
        • 2710

        #4
        Originally posted by DarkJedi
        Jews strike again
        You mean russians.
        Social profile assassination for hire

        Comment

        • brand0n
          been very busy
          • Nov 2002
          • 26983

          #5
          What domains?
          want to buy this spot for cheap? it is of course for sale. long term deals are always the best bet. brand0n/ at/ a o l dot commies.

          Comment

          • Relish XXX
            Confirmed User
            • Dec 2004
            • 4904

            #6
            I have well over 100 domains at directnic, anyone could take one of my small typo based domains and I doubt I would notice.

            Comment

            • arg
              Confirmed User
              • Feb 2003
              • 1164

              #7
              Blaze, there are a lot of ways it can be done. Stolen password to your directnic account or to your email, or another way to intercept your email (packet-sniffing on an intermediary network), spyware/remote control on your computer, using a corrupt "receiving" registrar, using an inept "receiving" registrar (one that doesn't verify domain ownership carefully), and so on. Was the domain name "locked" on directnic? If so, then the thief probably had to get into your directnic account somehow...lots of ways to do it, just like breaking into any computer account. Is the "created" date on the domain the same as when you first registered it, or is it now a recent date?

              Comment

              • Blaze
                Confirmed User
                • Oct 2001
                • 298

                #8
                The creation date is the same as when I registared it.

                The registrar he transfered it to is www.qnic.com
                Anyone know if they are crooked?

                Comment

                • David!
                  By the wrath of Agamemnon
                  • Apr 2004
                  • 6501

                  #9
                  Originally posted by DarkJedi
                  Jews strike again
                  Your stupidity seems to be bottomless
                  .

                  Comment

                  • Tipsy
                    Confirmed User
                    • Jul 2001
                    • 6989

                    #10
                    Originally posted by arg
                    Was the domain name "locked" on directnic? If so, then the thief probably had to get into your directnic account somehow...
                    I've been wondering much the same.
                    Ignorance is never bliss.

                    Comment

                    • Vox
                      Confirmed User
                      • Mar 2002
                      • 2710

                      #11
                      Originally posted by Blaze
                      The creation date is the same as when I registared it.

                      The registrar he transfered it to is www.qnic.com
                      Anyone know if they are crooked?
                      It's a russian company, does that answer your question?
                      Social profile assassination for hire

                      Comment

                      • Dirty F
                        Too lazy to set a custom title
                        • Jul 2001
                        • 59204

                        #12
                        Originally posted by Vox
                        It's a russian company, does that answer your question?
                        What a fucking suprise.

                        Honestly, the internet would be a better place if these fuck faces were cut off from the rest of the world. Let them hack their own servers.

                        Comment

                        • Illicit
                          wtf ?
                          • Dec 2003
                          • 11895

                          #13
                          People gots to learn to Lock their Domains
                          Insert Sig Here

                          Comment

                          • directfiesta
                            Too lazy to set a custom title
                            • Oct 2002
                            • 30177

                            #14
                            Originally posted by ajpiii
                            People gots to learn to Lock their Domains
                            The transfer is also affected by the Transfer Security setting of your directNIC account:

                            Normal Security: This will allow the transfer once you respond to the notification email. If you do not respond, your domain will still be transferred away within 5 days.


                            ///////
                            I know that Asspimple is stoopid ... As he says, it is a FACT !

                            But I can't figure out how he can breathe or type , at the same time ....

                            Comment

                            • SpaceAce
                              Confirmed User
                              • Jul 2002
                              • 6493

                              #15
                              Originally posted by Blaze
                              It happened to sleazydream and it happened to me. One of my high traffic gallery domains was transfered to anouther registrar without so much as a email to me.

                              This domain was on directnic and it still shows up in my account, but whois lookups show someone else, and all the traffic is being redircted to spyware virus hell. I have tried contacting both registrars but I doubt I will hear anything till monday.

                              How is this possible? How can domains be stolen like this?
                              I knew some serious shit was up when I hit the link and got the redirect. I just wish you'd woken up when I called so maybe you could have gotten a new link posted. Not only is the putz using Amateur Pages as a sponsor, he's still using Clickthrough Calvin code.

                              Time to move this thread back to the top. Watch your domains, guys! I encountered at least two hijacks last night, both going to xybererotica.com.

                              SpaceAce

                              Comment

                              • arg
                                Confirmed User
                                • Feb 2003
                                • 1164

                                #16
                                I haven't heard of qnic before, but qnic.com lists their authoritative whois server as whois.wildwestdomains.com, which I *think* is related (alias/subsidiary/sibling/partner) to godaddy. Qnic seems US-based to me. Maybe a reseller for wildwestdomains, rather than an ICANN-accredited registrar themselves.

                                If you haven't checked on the registration info in a while, it's possible that the domain was hijacked months ago. The hijackers could maintain most the same DNS servers for the domain, so that it would operate normally, while transferring the domain between one or more intermediary registrars, before it wound up at qnic. (ICANN limits transfers to I think once every 30 days, 60 days for a new registration). Multiple transfers can make it harder to resolve a hijacking.

                                Are you pretty sure your contact info (email address in particular) was correct in the whois info for the domain? Theoretically DirectNIC should have mailed that address when a transfer request was made, to let you know it was going to be done unless you canceled it.

                                It is not uncommon for registrars to list domains in your account even after legitimate transfers away from the registrar.

                                It sounds like you're going to need to rely on DirectNIC for some investigation and help on this. I would guess they'll be able to resolve the issue. A lot of people on GFY do a lot of business with DirectNIC, and if this goes unresolved, it would tarnish their reputation.

                                Comment

                                • SmokeyTheBear
                                  ►SouthOfHeaven
                                  • Jun 2004
                                  • 28609

                                  #17
                                  Im pretty sure if it was transferred recently you can login to directnic and reverse the transfer
                                  hatisblack at yahoo.com

                                  Comment

                                  • Dax
                                    Confirmed User
                                    • Apr 2002
                                    • 3161

                                    #18
                                    Lock Your Shit!!

                                    Comment

                                    • BlueWire
                                      Confirmed User
                                      • Nov 2004
                                      • 4628

                                      #19
                                      Well...did you make sure they were locked in the CP? if they were then i feel bad....if they weren't then i dont know what to tell ya man cuz god knows i got a reminder every 5 minutes about that new rule

                                      Comment

                                      • DEA - banned for life
                                        V.I.P.
                                        • Nov 2004
                                        • 7886

                                        #20
                                        Fuckin theives man..stealing from the rich and giving it to the richer!!

                                        Comment

                                        • DaddyHalbucks
                                          A freakin' legend!
                                          • Feb 2004
                                          • 18975

                                          #21
                                          ICANN rules changed recently.

                                          As I understand it, registrars now have to automatically approve ("ACK") all transfer requests. It is the responsibility of the receiving registrar to authenticate before initiating the request. All submitted requests are deemed valid.

                                          The only exception is if your domain is on LOCK status. So, lock your domains! And use a good registrar such as Moniker!

                                          This new policy is to prevent crappy registrars such as ItsYourDomain and TotalNIC from holding your domains hostage.

                                          However, it appears that the pendulum has now swung the other way.
                                          Boner Money

                                          Comment

                                          Working...