Erdy

Method 1:
Open this page and spend a minute to check what you see:

https://supportcenter.godaddy.com/Do...rog_id=GoDaddy

What you see is a form to change your account email or to push your domain from your account to another. All they ask is a screenshot of a photoshop file where the scammer has typed your name in one of those documents:

• State issued driver's license
• State issued photo identification card
• Passport
• Military photo identification

Yes, you read it correct. A scammer can take any image file of any photo ID and open it in photoshop and type your name. Then save the image file and upload it using that form. Godaddy will change your account email to any email address the scammer submits in the form. On that page there is a button that says "chose file". The scammer would click this button to upload a fake image file.

You might think that's not possible. Think again. Late 2009 a 3 letter domain PDN dot com was stolen with this method. You can check it here.


Method 2:
Except that method you see above, there is another method which involves email forwarding your whois or account email address to scammers mail address. The simply asks your domain registrar to set email forwarding. You might think the support staff wouldn't do it. Think again.
????: NamePros.com http://www.namepros.com/warnings-and-alerts/708522-incredible-security-holes-at-godaddy.html

Check out how sweet.com and direction.com was stolen:
http://preventdomaintheft.com/2008/0...steal-domains/
This article was written by the original owner of direction.com who had this domain stolen but recovered it later.
Method 3:
The scammer will just email godaddy directly from his own email address and ask them to change your account email to his. Surprisingly godaddy will do this if they get any of the following:

your four-digit Shopper PIN or,
your 4 digit Paypal Billing ID or,
the last 6 digits of the credit card on file

Especially, if you have used your credit card on any website where you bought a domain related service, for instance if you bought domains at another registrar, if you bought domainer software at another site they would know that you are a domainer and they would know the last 6 numbers of your credit card. This is the only information needed:
????: NamePros.com http://www.namepros.com/showthread.php?t=708522

http://www.warriorforum.com/main-int...rity-hole.html