All domains hijackable at my registrar!

elenad · 12-07-2003, 07:33 PM

Ok. This is really upsetting. I got the name from pool.com, and it happened to be registered by some shithole registrar - sory I have no other name for them, see for yourself why..

I went to change my record - to get my dns transferred, and I was pretty amazed when I got on their site...

Site looked pretty crappy with a lots of 404s, they threw some pages together, with probably 5 lines of perl script, there 5 ugly links, that require you to enter your email address /password and domain name each time! you want to change any *part* of the record! ( re-assuring security - what a joke - read on !)

Now... I know these kind of scripts when I see one, and my guts just told me to try out changing my record without providing email/password.

Sure enough - it took no effort!! I copied the source of one of the "confirm before submit" pages, which contained hidden fields with all my info ( including handle) - I've "adjusted" my password to some other arbitrary password ( w/o providing old one ) and posted this off my local disk without much trouble - the bastards took it!!!! Next time I was "logging in", it asked for new password... Now, I dont get it - how such idiots get to be the registrars??? I am surprised they were able to "catch" the name all together.

Not only I can't transfer my domains - as registry denies any transfers if domain registered for less than 60 days, I have very little hope they will even fix it - they probably don't even have anyone to fix it! I email them with no reply so far!
????: NamePros.com http://www.namepros.com/domain-name-discussion/12807-all-domains-hijackable-at-my-registrar.html

This is terrible for ANYONE they are the registrars' for!

Seriously, ANY domain sitting with them is hijackable at ANY time!

Can't wait to get out. I will probably email ICANN if I don't hear from them with the fix!

Beware of careless registrars!

-elena

Riceman · 12-07-2003, 07:45 PM

Which registrar if you do not mind me asking?

Kodeking · 12-07-2003, 07:46 PM

What registrar is it? It is probably a reseller not a registrar.

Webtwink · 12-07-2003, 07:46 PM

it be better if you don't make rogistry name public, you can expect some realy hijacks.

elenad · 12-07-2003, 07:52 PM

Quote:

Originally posted by Webtwink
it be better if you don't make rogistry name public, you can expect some realy hijacks.

Well, yes - this is the reason I did't not post the name... And beleive it or not, it is ICANN accredited registrar

-elena

Delete · 12-07-2003, 07:53 PM

probably one of the korean or chinese ones. I had the same prob. Looks worst then something I would code

PokerGuide.com · 12-08-2003, 01:27 AM

Have you made a report to Ican or something ?

Tippy · 12-08-2003, 04:02 AM

You paid Pool to catch the name, I would contact them and have them fix it or at least let them know about what happened, if any one is able to get things straight with this register they should.

Mike

jj2ii3344 · 12-08-2003, 07:49 AM

Agreed with Mike, good luck!

elenad · 12-10-2003, 06:45 PM

Emailed pool, will let you know when I hear back from them.

Thanks for suggestions!
-elena

redhippo · 12-10-2003, 07:15 PM

Quote:

Originally posted by Tippy
????: NamePros.com http://www.namepros.com/showthread.php?t=12807
You paid Pool to catch the name, I would contact them and have them fix it or at least let them know about what happened, if any one is able to get things straight with this register they should.

Mike

ditto....pools should have some responsibities to this matter...
elena,.... can you PM me the said registrar...

got to watch out for them thanks

12-07-2003, 07:33 PM	THREAD STARTER #1 (permalink)
elenad New Member Join Date: Nov 2003 Posts: 24	All domains hijackable at my registrar! Ok. This is really upsetting. I got the name from pool.com, and it happened to be registered by some shithole registrar - sory I have no other name for them, see for yourself why.. I went to change my record - to get my dns transferred, and I was pretty amazed when I got on their site... Site looked pretty crappy with a lots of 404s, they threw some pages together, with probably 5 lines of perl script, there 5 ugly links, that require you to enter your email address /password and domain name each time! you want to change any part of the record! ( re-assuring security - what a joke - read on !) Now... I know these kind of scripts when I see one, and my guts just told me to try out changing my record without providing email/password. Sure enough - it took no effort!! I copied the source of one of the "confirm before submit" pages, which contained hidden fields with all my info ( including handle) - I've "adjusted" my password to some other arbitrary password ( w/o providing old one ) and posted this off my local disk without much trouble - the bastards took it!!!! Next time I was "logging in", it asked for new password... Now, I dont get it - how such idiots get to be the registrars??? I am surprised they were able to "catch" the name all together. Not only I can't transfer my domains - as registry denies any transfers if domain registered for less than 60 days, I have very little hope they will even fix it - they probably don't even have anyone to fix it! I email them with no reply so far! ????: NamePros.com http://www.namepros.com/domain-name-discussion/12807-all-domains-hijackable-at-my-registrar.html This is terrible for ANYONE they are the registrars' for! Seriously, ANY domain sitting with them is hijackable at ANY time! Can't wait to get out. I will probably email ICANN if I don't hear from them with the fix! Beware of careless registrars! -elena

12-07-2003, 07:45 PM	#2 (permalink)
Riceman Senior Member Join Date: Sep 2003 Posts: 1,015	Which registrar if you do not mind me asking? __________________ :gl:

12-08-2003, 07:49 AM	#9 (permalink)
jj2ii3344 Senior Member Join Date: Jun 2003 Location: Markham, Ontario, Canada Posts: 3,370	Agreed with Mike, good luck! __________________ www.canonlens.ws Updated daily - Get Canon lens reviews and good deals on new/used Canon lens from CanonLens.ws![/SIZE]

	LeadRefs	Forum Sponsorship
	Want to sell your domain? LeadRefs.com finds multiple potential buyers to contact instantly!

12-07-2003, 07:46 PM	#4 (permalink)
Webtwink Senior Member Join Date: Jul 2003 Location: United States of America Posts: 1,158	it be better if you don't make rogistry name public, you can expect some realy hijacks.

12-07-2003, 07:53 PM	#6 (permalink)
Delete Account Suspended Join Date: Oct 2003 Location: Seattle, WA Posts: 1,104	probably one of the korean or chinese ones. I had the same prob. Looks worst then something I would code

12-08-2003, 01:27 AM	#7 (permalink)
PokerGuide.com Internet Entrepreneur Join Date: Oct 2003 Posts: 2,855	Have you made a report to Ican or something ?

12-08-2003, 04:02 AM	#8 (permalink)
Tippy NamePros Expert Join Date: May 2003 Location: Montreal Posts: 7,099	You paid Pool to catch the name, I would contact them and have them fix it or at least let them know about what happened, if any one is able to get things straight with this register they should. Mike

12-10-2003, 06:45 PM	THREAD STARTER #10 (permalink)
elenad New Member Join Date: Nov 2003 Posts: 24	Emailed pool, will let you know when I hear back from them. Thanks for suggestions! -elena

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)