Wednesday, July 22, 2009

Domain Hijacking Alert !

Just read on DNJournal that over the last 2 weeks a number of domains have been stolen from Warren Weitzman Industry Pioneer domainer from his Enom account!

As of now the list of stolen premium domains include following:
  • Before.com
  • Even.com
  • Sou.com
  • Tysons.com
  • Speel.com
  • Procredito.com
  • Stickum.com
  • Nansi.com
  • Circut.com
  • Airwatch.com
  • Adios.com
  • Boxheads.com
  • Twiller.com
  • Greatglasses.com
Weitzman has been in the domain game since 1994 and oldtimers in the industry know him as one of the pioneers in the business. Weitzman is a quiet guy who has never been interested in the spotlight, but as the victim of a major domain hijacking he is speaking up now with the hope that the publicity will lead to the return of his domains and prevent problems for others who might unknowingly buy the stolen names and lose their investment. Weitzman is also trying to find out how the theft happened and he believes the break-in could have occurred as high as the registry level at Verisign.

Weitzman first learned something was wrong on Thursday when Rick Waters, who is developing Adios.com for Weitzman's company, called to tell him that suddenly Adios.com had stopped resolving at the assigned DNS. "I immediately went into my account at Enom and saw that Adios.com was there, still locked, with the same normal email for me, and everything appeared to be fine," Weitzman said. "But when I did a WhoIs lookup at DomainTools it showed a ‘John Thalacker’ as the registrant, 000domains as the registrar, and fastpark.net as the dns and lander, plus a phone number that didn’t work."

"I immediately called Enom, emailed them transfer-disputes and inquired how the domain could be in my account while showing another owner in the public record simultaneously. I alerted everyone I knew, but no one could understand how this could happen,' Weitzman said.

Warren Weitzman
domain hijacking victim

"After contacting Enom, we learned that all of the domains were still locked but Adios.com was no longer in Enom's database. It had been transferred out. How could this happen without a notifying email, EPP, without a hack at the Verisign level or some kind of cooperation from Enom? We also found that other domains had been transferred out to the same DNS (fastpark.net) and those names now showed various registrant information (mostly privacy WhoIs)," Weitzman said.

Meanwhile, some of the names that have already been taken from Weitzman's account continue to move (a common situation with stolen domains). "We noticed that Sou.com, the first of the hijacked domains, was transferred again, this time to NamesDirect as registrar and again, fastpark.net as the lander and another private Whois," Weitzman said. "I hope that by publicizing this, we can find out if anyone else has had this experience and what the resolution might be. It is also our hope that no one will purchase any of these names," Weitzman added.

If you have any information that could help Warren recover his stolen domains, you can send it to Warren at Warren.com. Read more on DNJournal for follow up on this story .

No comments: