**Lensman** -- Lock Your Domains
 

If you check the WHOIS of adult.com, gfy.com, and gofuckyourself.com (and presumably your other domains too), they're ALL unlocked. Thus, they could be hijacked the exact same way Sleazydream experienced:

http://www.whois.sc/adult.com
http://www.whois.sc/gofuckyourself.com
http://www.whois.sc/gfy.com

The status of "ACTIVE" in the WHOIS means that the domain is unlocked. You'd want it to show a status of "Registrar-Lock", e.g. the WHOIS of sex.com

http://www.whois.sc/sex.com

Keeping your domain names unlocked means that you're hoping there aren't any rogue registrars or individuals that won't properly authenticate transfers. Those hopes would be shattered, in time....

At most registrars, locking the names is FREE.

I pointed this out a few months ago I think, but Sleazydream's experience might highlight that more folks should be taking better precautions on their own.

All my top domains are 1) locked, 2) renewed until past 2010 (no expiry risk), 3) kept at a trustworthy registrar (OpenSRS, but others are good too -- avoid NSI), 4) have up-to-date WHOIS, with full contact info, 5) cached WHOIS histories at www.whois.sc to demonstrate provenance to others, 6) strong passwords to the admin control panels that manage the domain names, and 7) multiple INDEPENDENT email addresses to prevent domain theft (i.e. it would not be enough to hack any single email address to hijack a domain -- there are multiple layers of protection; e.g. different email address to access password for unlocking domain, vs. authenticating an outgoing transfer).

Why didn't you just try to hijack them, what the fuck is wrong with you???????

hes looking for a COOKIE!

If it's a crime to covet honour, that's what's wrong with me. :)

Too late, GFY has already been hijacked by sigwhores :winkwink:

That was very nice of you. I hope he's reading this now because, now that you mentioned it on a public board, there are some dirty bastards trying to get it.

if this is true, no doubt heads will roll in Lensman's office

great idea, let everyone on gfy know instead of emailing him... genius.

I've emailed in the past -- goes into the junk folder, unfortunately. :( Posting it is the equivalent of flashing the bat signal.

It takes 5 or 6 days for a domain to get hijacked (i.e. for a transfer attempt that is not rejected to automatically go through), so there's no risk in publishing it on the board. If someone did attempt a transfer today, it would NOT go through immediately.

Better that he know this way, rather than having an email from me sit in the junk folder for a week, while the domain gets stolen by others with the same knowledge.

By the way, that means the thief for Sleazydream's domains had likely initiated the transfer last week (for it to automatically go through yesterday, after the 5/6 day waiting period).

How do you know?

What? What is this? Lock? Domain? Oh, what is this craziness all about??? I've never heard of such nonsense.

:1orglaugh

Love your sig!!! :winkwink: