Can anyone explain to me how a domain can be hijacked if... - GoFuckYourself.com

polish_aristocrat · 01-18-2005, 07:12 AM

if it is locked and noone hacks your registrar and email account?

Thanks, and only serious replies please

LasseKongos · 01-18-2005, 07:15 AM

Quote:

Originally Posted by polish_aristocrat

if it is locked and noone hacks your registrar and email account?

Thanks, and only serious replies please

I like to know to....

pimpimp

e-god · 01-18-2005, 07:16 AM

human factor

NickPapageorgio · 01-18-2005, 07:17 AM

Quote:

Originally Posted by e-god

human factor

Exactly. I know I have overlooked important email alerts before. It's only human when you are so used to deleting so much spam all the time. Other than that I would say that the thief has to be in cahoots with the registrar. I dunno...

DEA - banned for life · 01-18-2005, 07:18 AM

its happening all the time now...its the next big thing

Darth Vader · 01-18-2005, 07:19 AM

The ability to jack domains is insignificant against the power of GeorgeK

LasseKongos · 01-18-2005, 07:20 AM

Quote:

Originally Posted by DEA

its happening all the time now...its the next big thing

And that is funny????

Darth Vader · 01-18-2005, 07:21 AM

Quote:

Originally Posted by NickPapageorgio

Exactly. I know I have overlooked important email alerts before. It's only human when you are so used to deleting so much spam all the time. Other than that I would say that the thief has to be in cahoots with the registrar. I dunno...

He is most definetly in "cahoots" The registrar in Sleazy dreams case was directi, an Indian Registrar. I think you'll find this newest jack was transferred there too.

I find your lack of domains disturbing.

hydro · 01-18-2005, 07:23 AM

$50,000 and ill direct lycos.com to your paysite

xclusive · 01-18-2005, 07:29 AM

you can also call support on some registrars and talk your way into it i'm sure

DarkJedi · 01-18-2005, 07:42 AM

Quote:

Originally Posted by Darth Vader

.

A fellow sith ? Oh, capital !

Napolean · 01-18-2005, 07:44 AM

social engineering

Darth Vader · 01-18-2005, 07:47 AM

Quote:

Originally Posted by DarkJedi

A fellow sith ? Oh, capital !

You have a high post count, but you are not a Jedi yet.

arg · 01-18-2005, 09:05 AM

I'm not positive, but I was under the impression that under the new rules, an ICANN-accredited registrar can jack your names regardless of lock status..."locked" means "please don't jack this domain," but it's just a request, not enforced by ICANN. I can't find anything that confirms or refutes this on ICANN's site. They say the current registrar can deny a transfer based on lock status if the domain owner can turn the lock on and off, but I can't find where they go into the technical details. Any registrar gurus know how this works?

I like ICANN's answer in a FAQ for what to do if your name is jacked and the previous registrar won't do anything: "What happens if my registrar does not want to initiate a dispute for me? Registrars are not required to initiate disputes. If your chosen registrar is uninterested in helping you with your case, look for a new registrar who is. There are over 200 ICANN-accredited registrars. See the full list here." ICANN won't let domain holders dispute a domain hijacking; only registrars can.

EscortBiz · 01-18-2005, 09:07 AM

Quote:

Originally Posted by Napolean

social engineering

exactly

same way you can call almost any hosting company or billing company and get anything done if you know what your doing

people need to train their employees better

nofx · 01-18-2005, 09:08 AM

Quote:

Originally Posted by Napolean

social engineering

that is one way

NemesisEnforcer · 01-18-2005, 09:10 AM

Quote:

Originally Posted by polish_aristocrat

if it is locked and noone hacks your registrar and email account?

Thanks, and only serious replies please

It is very easy. You hijack the domain through the registrars customer service, not via e-mail.

Furious_Male · 01-18-2005, 09:12 AM

Quote:

Originally Posted by DEA

its happening all the time now...its the next big thing

Its not funny but yes it does seem to be the in thing.

fusionx · 01-18-2005, 09:13 AM

I registered a new domain last weekend at Registerfly. It was automatically locked. At least it was reported as being locked without having to lock it after registration.

When I read about Sleazy's problem, I went back and double-checked all my domains, which had all been locked. The new one was not locked, and a handful of others were also open.

This is really disturbing.

I'm guessing it's bugs in the lock updating code. It is very new and probably hasn't been tested enough in the real world (I'm talking about the routines to do the bulk locking at the registrar, not the locking of domains themselves).

I'm going to check mine weekly from now on.

rebel23 · 01-18-2005, 09:31 AM

im more worried about rogue Registrars than anything else... I think there is trouble ahead but nothing will be done

vicki · 01-18-2005, 10:42 AM

I can tell you some things that the guys over at DomainNameSystems.com see ..

people call customer support and try to 'convince' them they are the owner and ask them to 'remind' them of login info (it doesn't work at his place as he requires faxed proof hehe)

People use the same password for their domains as they do with alot of affiliate programs or hosting sites. If you have an untrustworthy employee at a sponsor program they can give that info a shot at a registrar and get lucky. (do NOT use the same password on your registrar that you use ANYWHERE else!)

People use unscrupulous registrars or registrars with unscrupulous employees ... could be lots of palm greasing if its a good domain.

Best solutions is to use a registrar with a good solid reputation and use a totally unique password.

Manowar · 01-18-2005, 10:44 AM

Quote:

Originally Posted by Napolean

social engineering

Seconded

Gator · 01-18-2005, 11:45 AM

Quote:

Originally Posted by rebel23

im more worried about rogue Registrars than anything else... I think there is trouble ahead but nothing will be done

Yup and it seems like more and more are popping up to cash in on the expired domain auctions.

fl_prn_str · 01-18-2005, 11:46 AM

Quote:

Originally Posted by polish_aristocrat

if it is locked and noone hacks your registrar and email account?

Thanks, and only serious replies please

very good question.......if no one knows on this board....well

Napolean · 01-18-2005, 11:55 AM

Quote:

Originally Posted by fl_prn_str

very good question.......if no one knows on this board....well

theres 22 answers if you scroll up...

TheMob · 01-18-2005, 11:58 AM

it's leet stuff that goes on

nojob · 01-18-2005, 12:07 PM

when you have 100's of domains i am sure that you would not check them all the time, i do not check mine. another thing to worry about.

SmokeyTheBear · 01-18-2005, 12:31 PM

halcyon from flashcash simply called up a registrar and had them unlock the domain without giving his name or any information whatsoever.

Taboo · 01-19-2005, 09:12 AM

Quote:

Originally Posted by polish_aristocrat

if it is locked and noone hacks your registrar and email account?

Thanks, and only serious replies please

keep in mind... the more you discuss this topic, the more hijackers you create.

imho, it would be wise to keep these discussions private instead of creating "how to guides" for people.

there is no simple solution to combat this problem... if a hijacker wants your domain bad enough they will KEEP trying to steal it. keep rechecking your lock status and performing daily checkups on your domains. test your registrar's security... secret shop them trying to get info... if they fail, move out of there asap or get that person FIRED/reprimanded. it pays to be paranoid.

"Just because you're paranoid doesn't mean they aren't after you"

Ron Bennett · 01-19-2005, 10:07 AM

Via the WDPRS, one can even steal domains that are locked down tight; registrar-lock doesn't even matter!

http://wdprs.internic.net/

For more details on WDPRS do a search for it here (I've posted more details in previous posts) and/or on Google ... in a nutshell, the doors are still wide open -and, again to reiterate, registrar-lock, passwords, etc will NOT protect one's domains from exploitation via the WDPRS.

Ron

01-18-2005, 07:12 AM	#1
polish_aristocrat Too lazy to set a custom title Join Date: Jul 2002 Posts: 40,377	Can anyone explain to me how a domain can be hijacked if... if it is locked and noone hacks your registrar and email account? Thanks, and only serious replies please

01-18-2005, 07:16 AM	#3
e-god Confirmed User Join Date: Jan 2003 Location: BabeLand Posts: 1,736	human factor __________________

01-18-2005, 07:19 AM	#6
Darth Vader Confirmed User Join Date: Jan 2005 Location: A Galaxy Far Far Away... Posts: 144	The ability to jack domains is insignificant against the power of GeorgeK __________________ Everything is going according to plan.

01-18-2005, 07:29 AM	#10
xclusive Too lazy to set a custom title Join Date: Apr 2004 Location: Buffalo, NY Posts: 35,218	you can also call support on some registrars and talk your way into it i'm sure __________________ I support MediumPimpin.com / Shemp's Outlawtgp.com /

01-18-2005, 07:44 AM	#12
Napolean Old school Industry Role: Join Date: Nov 2002 Location: Kettering, OH Posts: 4,327	social engineering __________________ Need a programmer? (Desktop/Web Applications) --- Skype: napoleande

01-18-2005, 07:18 AM	#5
DEA - banned for life V.I.P. Join Date: Nov 2004 Location: InYour Head Posts: 7,886	its happening all the time now...its the next big thing

01-18-2005, 07:23 AM	#9
hydro Confirmed User Join Date: Dec 2003 Location: Dirty 3rd Posts: 4,216	$50,000 and ill direct lycos.com to your paysite

01-18-2005, 09:05 AM	#14
arg Confirmed User Join Date: Feb 2003 Posts: 1,164	I'm not positive, but I was under the impression that under the new rules, an ICANN-accredited registrar can jack your names regardless of lock status..."locked" means "please don't jack this domain," but it's just a request, not enforced by ICANN. I can't find anything that confirms or refutes this on ICANN's site. They say the current registrar can deny a transfer based on lock status if the domain owner can turn the lock on and off, but I can't find where they go into the technical details. Any registrar gurus know how this works? I like ICANN's answer in a FAQ for what to do if your name is jacked and the previous registrar won't do anything: "What happens if my registrar does not want to initiate a dispute for me? Registrars are not required to initiate disputes. If your chosen registrar is uninterested in helping you with your case, look for a new registrar who is. There are over 200 ICANN-accredited registrars. See the full list here." ICANN won't let domain holders dispute a domain hijacking; only registrars can.

01-18-2005, 09:13 AM	#19
fusionx Confirmed User Industry Role: Join Date: Nov 2003 Location: Olongapo City, Philippines Posts: 4,618	I registered a new domain last weekend at Registerfly. It was automatically locked. At least it was reported as being locked without having to lock it after registration. When I read about Sleazy's problem, I went back and double-checked all my domains, which had all been locked. The new one was not locked, and a handful of others were also open. This is really disturbing. I'm guessing it's bugs in the lock updating code. It is very new and probably hasn't been tested enough in the real world (I'm talking about the routines to do the bulk locking at the registrar, not the locking of domains themselves). I'm going to check mine weekly from now on.

01-18-2005, 09:31 AM	#20
rebel23 Confirmed User Join Date: Dec 2002 Posts: 817	im more worried about rogue Registrars than anything else... I think there is trouble ahead but nothing will be done __________________ ICQ: 37378183

01-18-2005, 10:42 AM	#21
vicki Confirmed User Industry Role: Join Date: Feb 2002 Location: Deep in the heart o' Texas Posts: 1,478	I can tell you some things that the guys over at DomainNameSystems.com see .. people call customer support and try to 'convince' them they are the owner and ask them to 'remind' them of login info (it doesn't work at his place as he requires faxed proof hehe) People use the same password for their domains as they do with alot of affiliate programs or hosting sites. If you have an untrustworthy employee at a sponsor program they can give that info a shot at a registrar and get lucky. (do NOT use the same password on your registrar that you use ANYWHERE else!) People use unscrupulous registrars or registrars with unscrupulous employees ... could be lots of palm greasing if its a good domain. Best solutions is to use a registrar with a good solid reputation and use a totally unique password. __________________ If at first you do succeed - try to hide your astonishment. HR merchant accounts from 3.45% solid biz since 98 victoriakozub AT gmail.com skype: victoria.kozub \| ICQ: 74296746

01-18-2005, 11:58 AM	#26
TheMob Confirmed User Join Date: Jan 2003 Location: 2006 Posts: 8,584	it's leet stuff that goes on

01-18-2005, 12:07 PM	#27
nojob The Original NoJob Join Date: Feb 2004 Location: Jerzzey Posts: 3,682	when you have 100's of domains i am sure that you would not check them all the time, i do not check mine. another thing to worry about.

01-18-2005, 12:31 PM	#28
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	halcyon from flashcash simply called up a registrar and had them unlock the domain without giving his name or any information whatsoever. __________________ hatisblack at yahoo.com

01-19-2005, 10:07 AM	#30
Ron Bennett Confirmed User Join Date: Oct 2003 Posts: 1,653	Via the WDPRS, one can even steal domains that are locked down tight; registrar-lock doesn't even matter! http://wdprs.internic.net/ For more details on WDPRS do a search for it here (I've posted more details in previous posts) and/or on Google ... in a nutshell, the doors are still wide open -and, again to reiterate, registrar-lock, passwords, etc will NOT protect one's domains from exploitation via the WDPRS. Ron __________________ Domagon - Website Management and Domain Name Sales