Hosting & Domaining Forum

Domain Lists => Reviews => Topic started by: lovtzova on Aug 02, 2022, 02:57 AM

Title: How my domain was stolen
Post by: lovtzova on Aug 02, 2022, 02:57 AM
I have some "good" news to share with you. If you have a domain on a certain registrar or its partners, then you may not have it for much longer.

(https://domain.me/wp-content/uploads/2019/04/lopov-domena-2.jpg)

This happened to me when someone forged my electronic signature and transferred my domain to another registrar without my knowledge or consent. The old registrar cannot help since the domain is no longer with them, and the new registrar only has information from the moment the domain was transferred to them. The loss is around $2K per month, and my website had to be transferred to a new domain.

To avoid having your domain name stolen, consider enabling 2FA for transactions and having the registrar send notifications for any operation with domains. You could also pause after changing the name of the owner of the domain and only allow transfers after a period of time. Additionally, if your domain name is valuable, consider treating it like a bank account and being cautious about transferring it.
Title: Re: How my domain name was stolen
Post by: alexfernando on Aug 02, 2022, 03:11 AM
It's imperative that you take legal action against the fraud, and this can be done remotely. You should report the incident to the police as well. Additionally, you may want to ask the CA for details about who they issued your digital signature to.

Based on my experience, there are many partners of prominent CAs who are willing to issue an EDS based on just a scan of dоcuments and send it to the customer by mail in a regular archive, even though the proper procedure requires the person to be physically present and issuance on a physical token.
Title: Re: How my domain was stolen
Post by: lehan on Sep 23, 2024, 11:42 AM
You're out a cool $2K per month, and your website has been forced to relocate to a new domain. That's a nasty little pill to swallow, my friend. And to think, it could have all been avoided with a simple 2FA (two-factor authentication) setup and some basic domain name security best practices.

But hey, at least you've learned a valuable lesson: treat your domain name like a high-stakes pоker game. You wouldn't leave your wallet unattended on a crowded street, would you? So, why would you leave your domain name vulnerable to theft? It's time to get serious about domain name security, my friend.

Now, I know what you're thinking: "What's the big deal? It's just a domain name." Well, let me tell you, my friend, a domain name is more than just a string of characters. It's your online identity, your brand, your reputation. And once it's gone, it's gone for good.

So, here's the deal. You've got two options: you can either roll over and accept your fate, or you can take action to prevent this from happening to someone else. The choice is yours. But if you're smart, you'll take the latter option and start implementing some serious domain name security measures.

And to all you domainers, web designers, and webmasters out there, let this be a warning: domain name theft is real, and it's a ticking time bomb waiting to strike. So, take heed of this cautionary tale and make sure you're doing everything in your power to protect your online assets.