Domains stolen from my Godaddy account

domainsusi · 01-31-2011, 08:50 AM

Last night someone stole 9 domain names from my Godaddy account including 4 3-char dot coms.

The thief also changed my account password so that I was unable to log in until a Godaddy rep helped me set up.

What are my chances of recovering these domains? Any suggestions as to what action I should take other than emailing Godaddy (no response so far)

susi

Keith · 01-31-2011, 08:53 AM

I would call godaddy right away! Good luck recovering your domains

the_poet · 01-31-2011, 09:54 AM

How did they manage to access your account? Perhaps did you receive a fake GoDaddy email or you had a weak password?

studio500 · 01-31-2011, 09:57 AM

What domains were stolen?
It would help in case they are being offered for sale elsewhere.

domainsusi · 01-31-2011, 10:13 AM

Thanks for the replies everyone.

I have no clue how the thief got my account info. I never give it out to ANYONE. This took place shortly after midnight last night or I would have caught it in time to refuse the transfer request. I monitor my email during the day, but got to sleep some time.

Spoke to Godaddy and they pretty well assured me they can get the names back but it will take some time.

***mis_chiff*** · 01-31-2011, 10:28 AM

Moved to Warnings and Alerts.

You should post the names so that people are aware
hopefully they don't get sold in the meantime.

biggie · 01-31-2011, 11:13 AM

those emails from Godadday with the ICANN UPDATE in the header are usually phishing emails

did you get one recently and click on the [http://dcc. godaddly .com] link?

notice the intentinal misspelling which you can only see in these emails if you "hover" over the link.

never click any links in godaddy emails

go directly to the site and log in

hope you get your domains back

domainsusi · 01-31-2011, 11:22 AM

Thank you biggie.
Yes I did get an ICANN notice and I am pretty sure I clicked the link.
Kept the email - this is the link:

To review/update your Account data, simply:
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987

My bad I did not look closely.

Can thieves get your login info this way?

the_poet · 01-31-2011, 11:29 AM

Originally Posted by domainsusi

Thank you biggie.
????: NamePros.com http://www.namepros.com/warnings-and-alerts/699697-domains-stolen-from-my-godaddy-account.html
Yes I did get an ICANN notice and I am pretty sure I clicked the link.
Kept the email - this is the link:

To review/update your Account data, simply:
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987

My bad I did not look closely.

Can thieves get your login info this way?

Is that just the url written in the email or the actual link you can see only when you hover over it with your mouse pointer? The latter is what matters.

***mis_chiff*** · 01-31-2011, 11:32 AM

Originally Posted by domainsusi

Thank you biggie.
Yes I did get an ICANN notice and I am pretty sure I clicked the link.
Kept the email - this is the link:

To review/update your Account data, simply:
????: NamePros.com http://www.namepros.com/showthread.php?t=699697
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987

My bad I did not look closely.

Can thieves get your login info this way?

That link looks legit though - and looks like the same
ones I click

domainsusi · 01-31-2011, 11:50 AM

Thank you the poet

I checked that and you're right - the actual destination link begins with:
http://dcc.godadbdy.com/login ......

CREEPS !!!

the_poet · 01-31-2011, 11:57 AM

Originally Posted by domainsusi

Thank you the poet
????: NamePros.com http://www.namepros.com/showthread.php?t=699697

I checked that and you're right - the actual destination link begins with:
http://dcc.godadbdy.com/login ......

CREEPS !!!

I was almost sure that was the problem.

biggie · 01-31-2011, 11:58 AM

Originally Posted by domainsusi

Thank you the poet

I checked that and you're right - the actual destination link begins with:
http://dcc.godadbdy.com/login ......

CREEPS !!!

yes, this is how they steal your login info

once you copy and paste those emails, then the link corrects itself to display correct gd url

you can only see the fake url within the actual email when you hover over it and look at the bottom of your screen
????: NamePros.com http://www.namepros.com/showthread.php?t=699697

the sad part about it that, most of these domains are regged at gd and they don't do anything about trying to stop it.

they could register and hold all those gd typos to discourage this practice, which is rampant at gd

domainsusi · 02-01-2011, 12:47 PM

Good News !

Got all my domains back.

I am very pleased with Godaddy and the way they handled the situation.

susi

***mis_chiff*** · 02-01-2011, 12:49 PM

Originally Posted by domainsusi

Good News !

Got all my domains back.

I am very pleased with Godaddy and the way they handled the situation.

susi

That's great news!

Erdy · 02-01-2011, 01:50 PM

If registrars would differentiate between account email and whois email the thief would have never known your account email to begin with. They display your account email to the world and then act as if it is only your fault your account is hacked.

With some registrars you can create default whois profiles. I couldn't find a way to do this at Godaddy. Their site is so complicated. It is very difficult if not impossible to avoid your account email from whois.

sdsinc · 02-01-2011, 01:53 PM

GODADBDY.COM is now owned by godaddy and redirects to their website.
Scammers must be dumb to register that name at godaddy in the first place

the_poet · 02-01-2011, 03:43 PM

Originally Posted by domainsusi

Good News !

Got all my domains back.

I am very pleased with Godaddy and the way they handled the situation.

susi

Great!

silentg · 02-01-2011, 03:48 PM

Glad that you got your domains back. They'll strike back again with another typo of GoDaddy.com

lothos · 02-01-2011, 04:19 PM

Originally Posted by sdsinc

GODADBDY.COM is now owned by godaddy and redirects to their website.
Scammers must be dumb to register that name at godaddy in the first place

***Corey*** · 02-01-2011, 04:21 PM

congrats

Cheers
Corey

stub · 02-18-2011, 05:04 PM

Originally Posted by Erdinc

With some registrars you can create default whois profiles. I couldn't find a way to do this at Godaddy. Their site is so complicated. It is very difficult if not impossible to avoid your account email from whois.

Preset Profiles is the way to do this at GoDaddy.

01-31-2011, 08:50 AM	THREAD STARTER #1 (permalink)
domainsusi Senior Member Join Date: May 2004 Posts: 2,917	Domains stolen from my Godaddy account Last night someone stole 9 domain names from my Godaddy account including 4 3-char dot coms. The thief also changed my account password so that I was unable to log in until a Godaddy rep helped me set up. What are my chances of recovering these domains? Any suggestions as to what action I should take other than emailing Godaddy (no response so far) susi

01-31-2011, 09:54 AM	#3 (permalink)
the_poet Senior Member Join Date: Apr 2009 Location: The Web Posts: 4,649 Follow @ThePoet82	How did they manage to access your account? Perhaps did you receive a fake GoDaddy email or you had a weak password? __________________ RunningShoes.in @ just $300 on Sedo auction (RunningShoes.com sold for $700,000 in 2011) Coater.com for sale - Premium industrial 1-worder.

01-31-2011, 09:57 AM	#4 (permalink)
studio500 NamePros Regular Join Date: Mar 2010 Location: Out In The Wild Posts: 276	What domains were stolen? It would help in case they are being offered for sale elsewhere. __________________ bisfhouse.com

01-31-2011, 11:13 AM	#7 (permalink)
biggie Senior Member Join Date: May 2003 Location: GreenFriendly.com Posts: 3,344	those emails from Godadday with the ICANN UPDATE in the header are usually phishing emails did you get one recently and click on the [http://dcc. godaddly .com] link? notice the intentinal misspelling which you can only see in these emails if you "hover" over the link. never click any links in godaddy emails go directly to the site and log in hope you get your domains back __________________ www.urlpick.com...Premium Domain Names PMM.org * UMM.org * 96.net * 150.org * WPD.net * OPV.net * MrQ.net * 455.info * QN1.com * QG1.com * IZ1.com * OVL.net * VJ4.com * SVC.net * MVN.org * SOP.net * SVH.org * OPO.net * QFM.net * WEW.org * MFP.org * NEV.org * UCE.org * SXE.org

02-01-2011, 01:53 PM	#17 (permalink)
sdsinc Domains my Dominion Join Date: Aug 2005 Location: Web 1.0 Posts: 9,963	GODADBDY.COM is now owned by godaddy and redirects to their website. Scammers must be dumb to register that name at godaddy in the first place __________________ NameNewsletter.com - free lists of available domain names ZoneFiles.net (beta) - ccTLD and gTLD droplists

01-31-2011, 08:53 AM	#2 (permalink)
Keith Senior Member Join Date: Jan 2007 Location: "D" town Posts: 3,617	I would call godaddy right away! Good luck recovering your domains

01-31-2011, 10:13 AM	THREAD STARTER #5 (permalink)
domainsusi Senior Member Join Date: May 2004 Posts: 2,917	Thanks for the replies everyone. I have no clue how the thief got my account info. I never give it out to ANYONE. This took place shortly after midnight last night or I would have caught it in time to refuse the transfer request. I monitor my email during the day, but got to sleep some time. Spoke to Godaddy and they pretty well assured me they can get the names back but it will take some time.

01-31-2011, 10:28 AM	#6 (permalink)
*mis_chiff* goof free! Join Date: Mar 2006 Location: Canada Posts: 9,364 Follow @mis_chiff	Moved to Warnings and Alerts. You should post the names so that people are aware hopefully they don't get sold in the meantime.

01-31-2011, 11:22 AM	THREAD STARTER #8 (permalink)
domainsusi Senior Member Join Date: May 2004 Posts: 2,917	Thank you biggie. Yes I did get an ICANN notice and I am pretty sure I clicked the link. Kept the email - this is the link: To review/update your Account data, simply: + Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987 My bad I did not look closely. Can thieves get your login info this way?

01-31-2011, 11:50 AM	THREAD STARTER #11 (permalink)
domainsusi Senior Member Join Date: May 2004 Posts: 2,917	Thank you the poet I checked that and you're right - the actual destination link begins with: http://dcc.godadbdy.com/login ...... CREEPS !!!

02-01-2011, 12:47 PM	THREAD STARTER #14 (permalink)
domainsusi Senior Member Join Date: May 2004 Posts: 2,917	Good News ! Got all my domains back. I am very pleased with Godaddy and the way they handled the situation. susi

02-01-2011, 01:50 PM	#16 (permalink)
Erdy Senior Member Join Date: Sep 2006 Location: London, UK Posts: 1,900	If registrars would differentiate between account email and whois email the thief would have never known your account email to begin with. They display your account email to the world and then act as if it is only your fault your account is hacked. With some registrars you can create default whois profiles. I couldn't find a way to do this at Godaddy. Their site is so complicated. It is very difficult if not impossible to avoid your account email from whois.

02-01-2011, 03:48 PM	#19 (permalink)
silentg Senior Member Join Date: Mar 2010 Location: ariyas.com Posts: 1,394 Follow @domainsg	Glad that you got your domains back. They'll strike back again with another typo of GoDaddy.com __________________ █ Makeup Games Funny Gags - Free Education Online- Cooking Games

02-01-2011, 04:21 PM	#21 (permalink)
*Corey* Business Member Join Date: Mar 2008 Location: Australia Posts: 4,214	congrats Cheers Corey __________________ ☆ Occupy.TV website/domain name for sale!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
OnlinePrices.org superstores.info Concertos.info evaluating.info typographer.info etc	refide46	Domains For Sale - Auctions	12	01-17-2011 07:53 PM
DailyPoker.org caribbeans.org precautions.info coalitions.info & much much more	refide46	Domains For Sale - Auctions	4	02-02-2010 06:17 AM
125+ Great Names. Just $19 each. ShinyNames.com, TravelingFever.com	YourIdealDomain	Domains For Sale - Fixed Price	0	10-12-2009 11:22 AM
a BIG BIG list of LLL + NNN various TLD domains $135,000 (088.net and more)	ingenuity1996	High Priced Domains	13	08-23-2006 12:04 AM