question Afternic listing service

If you are having issues logging in with a secure connection you can contact [email protected] but I would suggest you clear your cookies and then try manually typing in the https and see if it works for you it will help narrow down what is happening when you go there so they can troubleshoot it.

-

As a curiosity, I checked real http headers for afternic.com typed without www, without httpS in a browser that did not visit afternic before.

The results /relevant part/ are the following:
(begin)
http://afternic.com/

GET / HTTP/1.1
Host: afternic.com

HTTP/1.1 301 Moved Permanently
Date: Fri, 16 Feb 2018 23:10:21 GMT
Server: Apache/2.2.27 (CentOS)
Location: http://www.afternic.com/
Content-Length: 310
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: AFTERNICSERVERID=www01; path=/
Cache-Control: private

(end)

Two issues are obvious:

The system forwarded my request to www.afternic.com (fine) but without httpS (the problem)

Of course one can manually type httpS and it will work. But it is not how the things are normally configured (or supposed to be configured).

Also, the server is using outdated software. Apache 2.2.x is already retired, and the latest version of this serie is 2.2.34 dated 2017-07-11. Current version is 2.4.29 !
The version used by afternic (2.2.27) is outdated.

Same here.
Afternic.com is redirecting to http://www.afternic.com/ and not https://www.afternic.com/
I think they have to just modify headers.

Joe Styler said:

I dont know what to say. I am not saying you don't know what you are talking about but we do have an active ssl on that site. Here's two screenshots of two different browsers showing the certificate is active.

Click to expand...

Joe, I stated that there is a SSL certificate for Afternic. That isn't the issue. The issue is that the HTTP protocol does NOT automatically redirect users to the HTTPS protocol site.

So my question is how safe are our personal information on Afternic? If there is no automatic redirection to https it means that our bank details, paypal accounts, passwords, domains etc are potentially at risk.

Or am I wrong? That to me is very concerning.

Also, if a simple tool like whynopadlock.com can work and point out what the issue is

https://www.whynopadlock.com/results/ec787747-a57f-4525-a210-c52e78a45399

it is seriously worrying that a supposed giant like godaddy and afternic are not even aware of wth is going on...talking about customer security.

It seems that i lost my domain. Its whois refers to another e-mail and name. I can't understand one thing. The sender's e-mail address was [email protected].
Check a post:


So, how the hell i receive an e-mail by their address and giving my epp as thinking it was an e-mail for afternic network, i lose my domain? The new owner have parked it in other company lol. It's absolutely hilarious!

Can anyone like @exa-Edward explain what is going on??????????????????

This is the e-mail i got:

I hide the domain name and the link.

NEVER I MEAN NEVER opt in for fast transfer.

I think no one cares about this. Thank you all.

THIS INDUSTRY IS A SCAM.

GOODBYE DOMAINING. I AM OUT.

I am sorry guys. I really feel angry and desperate. This was very painful.

Oh my God. The link seems to be legit. It was from ICAAN. I think that i understand now what is happening:
As i searched, the domain was still listed to Afternic by previous owner. Now the buyer bought the domain name via Afternic and asked me to transfer. But, how i can get paid if i didn't list it there? Can anyone from Afternic help? @Joe Styler can you help me about this situation?

I am pretty sure that finally it is not a scam because:

1. The e-mail address seems to be from Exabytes.
2. The link was from domainadmin.com and seems legit as searched for. See this
3. The domain name was listed in Afternic.

Well, what a mess. I need help!

Guys care out there, you don't know who is the sender of each e-mail. It seems finally i lost the domain name. Examine well before open this type of messages. My story must be our lesson (including me of course).

Still now, all case is under investigation. But i told you above what is happening. I suspect that's not a domain steal, but a big confusion. Having hundreds of names, how to know if it was listed on Afternic by previous owner? Currently i don't use afternic as selling place.

Yesterday the domain name it was listed on Afternic. As seeing now, the domain name is deleted from their marketplace.

THE BIG QUESTION IS: IF THE NAME WAS SOLD, IN WHAT PRICE? I CAN BE PAID OR JUST LOOKING THE DOMAIN NAME BE IN THE HANDS OF THE NEW OWNER WITHOUT TAKING EVEN A DOLLAR?

Havey ou reached out to Afternic support? ([email protected] )

Have you asked support what happened? If you reach out to [email protected] they can look into what happened.

Joe Styler said:

Have you asked support what happened? If you reach out to [email protected] they can look into what happened.

Click to expand...

Yes, I have sent 2 messages without reply.

They should reply soon. The support team does not work on Sunday and they are probably getting all caught up today.

Yesterday the domain was listed there. Today, it is not. This fact may means that we have a buyer(?) here. Will we see...

I didn't hear what happened to @Kuffy.

In my experience, every domain has to be approved by the admin eMail without exception, if the name expires, it's removed from the fast-transfer as fast as Donald Trump tweets about things that are getting on his nerves.

I told you. I got replies and yes, this is an extremely rare case. I will update soon.

Kuffy said:

I'm frightened to enable that fast transfer service, as it doesn't seem to be monitored very well. It seems to allow front-runners and scammers to list names they don't own.

Click to expand...

Anyone that does not own the name would not be able to opt in because it is only the owner could opt in from his registrar''s account where the name was registered.

kite26 said:

Thanks guys. I want to ask, it is a possible sale on the road or just it's a common practice? I ask because i accepted it for another name before some days.

Click to expand...

Godaddy is just asking your permission to list your name at Afternic. That is it. There is no guarantee that listed domain will be sold nor it has any enquiry for it.

Haroon Basha said:

Godaddy is just asking your permission to list your name at Afternic. That is it. There is no guarantee that listed domain will be sold nor it has any enquiry for it.

Click to expand...

Yes. In this case the domain was SOLD. But it was sold in Afternic as been listed by PREVIOUS owner, without having knowledge about it, because I DIDN'T HAVE LISTED it there.

Doing mistake by my side accepting the transfer request is of course another story. I was thinking that I accepted to LIST it there, not directly sell it.

CONFUSION!

anantj said:

Joe, I stated that there is a SSL certificate for Afternic. That isn't the issue. The issue is that the HTTP protocol does NOT automatically redirect users to the HTTPS protocol site.

Click to expand...

I kept looking into this and we were able to find a way to get it to not forward to the ssl automatically and sent up a ticket to the developers on it. Thanks everyone for all the screenshots and information you provided to help troubleshoot it. It certainly helped because I couldn't get it to do it on my end.