View Single Post
Old 01-18-2005, 08:45 PM  
arg
Confirmed User
 
Join Date: Feb 2003
Posts: 1,164
Weekend domain hijackings

Another high-traffic domain hijack this weekend was panix.com, an ISP.

http://news.netcraft.com/archives/20...jacking.h tml

On GFY, there were three domains reported, and KRL said he got private mail concerning three other hijacked domains. Panix.com was at Dotster hijacked to melbourneit, Sleazy's was at Dotster hijacked to Directi, KRL's other reported hijackings were at Dotster hijacked to unspecified registrars, Chris72's boobza.com was at Register.com hijacked to Directi, and Blaze's was at DirectNIC hijacked to qnic.

Dotster seems to be overly represented, and I'll be curious if they mention anything publicly about why this might be. Their failure to lock domains after ICANN's policy change seems like it might be a factor...some registrars locked all domains by default, so users have to unlock them to transfer them. Though Panix said their their domain was locked.

Of the receiving registrars, Directi is based in India, MelbourneIT in Australia, and QNic varyingly lists US contact info and illegally meaningless info on their domains. MelbourneIT said they had a loophole, now corrected, that allowed them to be used for the hijacking, though they didn't provide details.
arg is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote