How to steal a domain name.... - DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

**GeorgeK** · 11-05-2002, 04:37 AM

Today's lesson is on how to steal a domain name.....

Step 1. Find a high value domain name with an invalid administrative email address, preferably one that is not actively being used so that it won't be noticed.

Example: nigger.com, nigger.net, nigger.org (owned by NAACP)

Step 2. Note in the WHOIS that the admin email is thawley@BAWAVE.COM, which until yesterday was on a domain (BAWAVE.com) that had long expired and been deleted.

Step 3. Register the aforesaid domain name in Step #2. Oh my, some folks have caught on, as you can see the WHOIS for BAWAVE.com, freshly registered yesterday:

Registrant:
Nigger Inc spring888@hotmail.com +62.3189598
Hendra Gunawan
JL. Bengawan 56
Surabaya,Jawa Timur,Indonesia 60000

Domain Name:bawave.com
Record last updated at 2002-11-04 20:31:57
Record created on 2002/11/4

Step 3a: Ideally, make the registrant in step 3 very obscure, like in a far away land.

Step 4: Activate the domain in Step #3 so that email is working, namely the email address in Step 2.

Step 5: Initiate a transfer request, and accept using the email in step 4.

Step 6: Enjoy

Given the NAACP's inability to fix the problem (I emailed them about this months ago), I acquired a SnapBack, in case someone tried to take the name. I imagine now that the process is unveiled, someone at Verisign (Chuck?) or at ICANN will do something.....(maybe someone in Washington, DC can give the NAACP a call, or something....

uncle · 11-05-2002, 05:07 AM

it's a well known method and it's pretty annoying that the owners of the stolen domains often don't care..

maybe it should be legalized..

**James Names** · 11-05-2002, 05:38 AM

George, I guess I'm wondering why you'd pay $69 for a snap but not $8 to register BAWave.com yourself?

**GeorgeK** · 11-05-2002, 05:55 AM

Honour.

**GeorgeK** · 11-05-2002, 05:58 AM

(I had already paid for some SnapBacks previously, so the actual cost was zero; if NAACP reads their email, they could have avoided making it such a tempting target, as I warned them months ago, to no avail)

**James Names** · 11-05-2002, 06:27 AM

You might want to notify Verisign, although they could probably care less too.

**WildCard** · 11-05-2002, 11:54 AM

Yes, verisign will need you to fax all that info to them - unless you want priority processing, which will cost $30. ;-)

Yes, I hate the way they move. Interesting post though. I didn't realize this type of action was available.

-WC-

**GeorgeK** · 11-05-2002, 01:28 PM

I posted it on the DNSO GA mailing list (cc'd to Verisign and ICANN), and also to ICANNWatch.com, so somebody should get the message.

NAACP will get the name back, if it's stolen, that's for sure. Those thieves give the rest of us a bad name, though. Would be nice to nail one of them.

**jberryhill** · 11-05-2002, 04:01 PM

You know, you can do this with IP address blocks as well.

Check out the IP address block in which cubaweb.cu, along with a bunch of Cuban government websites, is located.

Then, check out the whois for the domain name registration corresponding to the contact email address for that IP address block.

Cigars, anyone?

**GeorgeK** · 11-05-2002, 04:44 PM

Update -- admin emails now fixed

Kudos to Richard Lau of MyDomain.com, for helping to get this fixed. The NAACP has updated the admin email of the domains at risk, so that they can't be hijacked the 'easy' way.

Hopefully this is a lesson ICANN and others can learn from, in formulating policy regarding accurate WHOIS (scrubbed to fix data errors, to protect innocent registrants) and transparent WHOIS (to make it harder to commit cybercrimes, the average person can identify a crime that might be about to happen).

**Fearless** · 11-07-2002, 08:58 AM

If I had detected this, I would have spent $6.95 and registered the deleted name. Then after I hijacked the names I would contact the NAACP and say, see I told you so. Maybe they would pay a reward. If not, I'm only out $6.95.

**mole** · 11-07-2002, 09:06 AM

Hahahahahaaaaa... that's not stealing, that's getting a name from someone who deserves to lose it.

**Nic** · 11-07-2002, 11:11 PM

Quote:

Originally posted by GeorgeK
Today's lesson is on how to steal a domain name.....

Step 1. Find a high value domain name with an invalid administrative email address, preferably one that is not actively being used so that it won't be noticed.

Example: nigger.com, nigger.net, nigger.org (owned by NAACP)

What are you doing checking those domains (nigger.com, nigger.net, nigger.org ) anyway:?

11-08-2002, 12:24 AM

Quote:

Today's lesson is on how to steal a domain name.....

I prefer the old fashioned way: Force the guy to change the registration at gunpoint, then shoot him.

11-08-2002, 12:25 AM

Never mind, what was I thinking?

(i'm giving away my best domain name strategy secrets)

**thinkaholic** · 11-08-2002, 02:58 AM

How to steal a domain name??

Get a job at NetSol...

Banned: ad-lib · 11-10-2002, 10:30 AM

Just transferred Yahoo.com to my account. Thanks for the advice George.

**RMF** · 11-10-2002, 05:27 PM

I actually came across something like this the other day. I found a domain that had expired, and was used in the admin contact for a VERY large company. I sent them an email explaining what I found, and how they can fix it. I told them that they have a huge security problem that they should be aware of.

Sure, I could have registered that expired domain and stole their company domain from networksolutions, but I live in canada, doh. No, really though, I wouldn't want something like that to happen to me, and I would hope someone would contact me if I was in that situation ( However I doubt I would ever be in that situation

).

RMF

**morel** · 11-10-2002, 06:15 PM

Quote:

Originally posted by Nic

What are you doing checking those domains (nigger.com, nigger.net, nigger.org ) anyway:?

Didn't we all look up naughty words in the dictionary as a kid

?
I think it's human nature.

Banned: ad-lib · 11-11-2002, 01:32 AM

If I was to change a hijacked domains ownership, to my actual (non-fraudulent) personal info. And sold it. What's the worse thing that could happen?

11-05-2002, 04:37 AM	#1 (permalink)
GeorgeK TheBest.com Name: George Kirikos Last Online: Today 06:05 PM iTrader: (2) Join Date: May 2002 Posts: 2,206 DNF$: 866 Location: Toronto, Canada Country:	How to steal a domain name.... Today's lesson is on how to steal a domain name..... Step 1. Find a high value domain name with an invalid administrative email address, preferably one that is not actively being used so that it won't be noticed. Example: nigger.com, nigger.net, nigger.org (owned by NAACP) Step 2. Note in the WHOIS that the admin email is thawley@BAWAVE.COM, which until yesterday was on a domain (BAWAVE.com) that had long expired and been deleted. Step 3. Register the aforesaid domain name in Step #2. Oh my, some folks have caught on, as you can see the WHOIS for BAWAVE.com, freshly registered yesterday: Registrant: Nigger Inc spring888@hotmail.com +62.3189598 Hendra Gunawan JL. Bengawan 56 Surabaya,Jawa Timur,Indonesia 60000 Domain Name:bawave.com Record last updated at 2002-11-04 20:31:57 Record created on 2002/11/4 Step 3a: Ideally, make the registrant in step 3 very obscure, like in a far away land. Step 4: Activate the domain in Step #3 so that email is working, namely the email address in Step 2. Step 5: Initiate a transfer request, and accept using the email in step 4. Step 6: Enjoy Given the NAACP's inability to fix the problem (I emailed them about this months ago), I acquired a SnapBack, in case someone tried to take the name. I imagine now that the process is unveiled, someone at Verisign (Chuck?) or at ICANN will do something.....(maybe someone in Washington, DC can give the NAACP a call, or something.... __________________ George Kirikos Home Page

11-05-2002, 05:55 AM	#4 (permalink)
GeorgeK TheBest.com Name: George Kirikos Last Online: Today 06:05 PM iTrader: (2) Join Date: May 2002 Posts: 2,206 DNF$: 866 Location: Toronto, Canada Country:	Honour. __________________ George Kirikos Home Page

11-05-2002, 05:58 AM	#5 (permalink)
GeorgeK TheBest.com Name: George Kirikos Last Online: Today 06:05 PM iTrader: (2) Join Date: May 2002 Posts: 2,206 DNF$: 866 Location: Toronto, Canada Country:	(I had already paid for some SnapBacks previously, so the actual cost was zero; if NAACP reads their email, they could have avoided making it such a tempting target, as I warned them months ago, to no avail) __________________ George Kirikos Home Page

11-05-2002, 01:28 PM	#8 (permalink)
GeorgeK TheBest.com Name: George Kirikos Last Online: Today 06:05 PM iTrader: (2) Join Date: May 2002 Posts: 2,206 DNF$: 866 Location: Toronto, Canada Country:	I posted it on the DNSO GA mailing list (cc'd to Verisign and ICANN), and also to ICANNWatch.com, so somebody should get the message. NAACP will get the name back, if it's stolen, that's for sure. Those thieves give the rest of us a bad name, though. Would be nice to nail one of them. __________________ George Kirikos Home Page

11-05-2002, 04:01 PM	#9 (permalink)
jberryhill Philadelphia Lawyer Last Online: 09-18-2009 01:17 AM iTrader: (1) Join Date: Oct 2002 Posts: 2,987 DNF$: 6,350	You know, you can do this with IP address blocks as well. Check out the IP address block in which cubaweb.cu, along with a bunch of Cuban government websites, is located. Then, check out the whois for the domain name registration corresponding to the contact email address for that IP address block. Cigars, anyone? __________________ John Berryhill Ph.d., esq. John-AT-johnberryhill.com Please do not send private messages via dnforum.com, email me directly.

11-05-2002, 05:07 AM	#2 (permalink)
uncle Registered User - Must Upgrade To Post Last Online: 06-09-2003 07:04 AM iTrader: (0) Join Date: Mar 2002 Posts: 271 DNF$: 986	it's a well known method and it's pretty annoying that the owners of the stolen domains often don't care.. maybe it should be legalized..

11-05-2002, 05:38 AM	#3 (permalink)
James Names DNF Addict Last Online: 11-20-2009 02:38 PM iTrader: (2) Join Date: Apr 2002 Posts: 1,452 DNF$: 138 Location: Cali	George, I guess I'm wondering why you'd pay $69 for a snap but not $8 to register BAWave.com yourself?

11-05-2002, 06:27 AM	#6 (permalink)
James Names DNF Addict Last Online: 11-20-2009 02:38 PM iTrader: (2) Join Date: Apr 2002 Posts: 1,452 DNF$: 138 Location: Cali	You might want to notify Verisign, although they could probably care less too.

11-05-2002, 11:54 AM	#7 (permalink)
WildCard Gold Lifetime Member Last Online: 11-09-2008 07:29 PM iTrader: (0) Join Date: Oct 2002 Posts: 344 DNF$: 459	Yes, verisign will need you to fax all that info to them - unless you want priority processing, which will cost $30. ;-) Yes, I hate the way they move. Interesting post though. I didn't realize this type of action was available. -WC-

11-05-2002, 04:44 PM	#10 (permalink)
GeorgeK TheBest.com Name: George Kirikos Last Online: Today 06:05 PM iTrader: (2) Join Date: May 2002 Posts: 2,206 DNF$: 866 Location: Toronto, Canada Country:	Update -- admin emails now fixed Kudos to Richard Lau of MyDomain.com, for helping to get this fixed. The NAACP has updated the admin email of the domains at risk, so that they can't be hijacked the 'easy' way. Hopefully this is a lesson ICANN and others can learn from, in formulating policy regarding accurate WHOIS (scrubbed to fix data errors, to protect innocent registrants) and transparent WHOIS (to make it harder to commit cybercrimes, the average person can identify a crime that might be about to happen). __________________ George Kirikos Home Page

11-07-2002, 08:58 AM	#11 (permalink)
Fearless Last Online: Today 04:49 PM iTrader: (26) Join Date: Jul 2002 Posts: 3,987 DNF$: 8,739 Location: Planet Earth Country:	If I had detected this, I would have spent $6.95 and registered the deleted name. Then after I hijacked the names I would contact the NAACP and say, see I told you so. Maybe they would pay a reward. If not, I'm only out $6.95. __________________ Hotshot Domain Name Sellers Wanted

11-07-2002, 09:06 AM	#12 (permalink)
mole DNF Addict Last Online: 03-03-2009 10:05 AM iTrader: (1) Join Date: May 2002 Posts: 6,721 DNF$: 978 Location: Tonga Country:	Hahahahahaaaaa... that's not stealing, that's getting a name from someone who deserves to lose it. __________________ If a man will begin with certainties, he shall end in doubts; but if he will be content to begin with doubts he shall end in certainties. Sir Francis Bacon

11-08-2002, 12:25 AM	#15 (permalink)
Silverwire Guest Last Online: 12-31-1969 07:00 PM Posts: n/a DNF$: 0 [Check]	Never mind, what was I thinking? (i'm giving away my best domain name strategy secrets)

11-08-2002, 02:58 AM	#16 (permalink)
thinkaholic Gold Lifetime Member Last Online: 11-30-2005 03:47 PM iTrader: (0) Join Date: Sep 2002 Posts: 217 DNF$: 1,715 Location: Orange County, Ca	How to steal a domain name?? Get a job at NetSol...

11-10-2002, 10:30 AM	#17 (permalink)
Banned: ad-lib Account Terminated Last Online: 07-02-2004 04:05 PM iTrader: (0) Join Date: Mar 2002 Posts: 658 DNF$: 1,473 Location: Deerfield Beach, Florida Country:	Just transferred Yahoo.com to my account. Thanks for the advice George.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

11-10-2002, 05:27 PM	#18 (permalink)
RMF Platinum Lifetime Member Last Online: 11-13-2009 03:20 AM iTrader: (0) Join Date: Sep 2002 Posts: 1,420 DNF$: 460 Location: BC Country:	I actually came across something like this the other day. I found a domain that had expired, and was used in the admin contact for a VERY large company. I sent them an email explaining what I found, and how they can fix it. I told them that they have a huge security problem that they should be aware of. Sure, I could have registered that expired domain and stole their company domain from networksolutions, but I live in canada, doh. No, really though, I wouldn't want something like that to happen to me, and I would hope someone would contact me if I was in that situation ( However I doubt I would ever be in that situation ). RMF

11-11-2002, 01:32 AM	#20 (permalink)
Banned: ad-lib Account Terminated Last Online: 07-02-2004 04:05 PM iTrader: (0) Join Date: Mar 2002 Posts: 658 DNF$: 1,473 Location: Deerfield Beach, Florida Country:	If I was to change a hijacked domains ownership, to my actual (non-fraudulent) personal info. And sold it. What's the worse thing that could happen?

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
need legal contracts for selling domains	eddie1278	Domain Name Legal Issues	35	12-05-2005 12:41 PM
Sort of a strange situation...	RMF	Domain Name Legal Issues	27	03-29-2004 03:21 PM