IT.COM

[RESOLVED] - Domain Name Stolen...A Horrible Story and a Warning...

Spaceship Spaceship
Watch
Impact
346
Hi All. I've not been in here for a number of years, but a week ago I had my domain of 20 years (dustie.com) stolen and I have to tell the story. it looks like I'm out of luck here, and out a lot of money, but maybe my story can help prevent this happening to someone else. This happened at Godaddy, though I don't blame them, and i still have all of my domains with them, as well as my websites. I blame the no good slimy thief who stole my domain name!

Here's the story... First off, my name is Dustie, and I've owned Dustie.com since 1998.
Sometime in 2017 (I think) I decided to go ahead and list dustie.com as a premium domain for a high price. It being my name, I wasn't real keen on selling it, but, as they say, everything is for sale for the right price. I'd had someone offer me 5,000.00 for it, but after taxes (it would have put me in a higher tax bracket for the year) and commisison, it wasn't worth it wasn't worth it to sell it for that amount. However, I figured that if someone were willing to pay that for it, maybe someone would pay even more. So I listed it as a premium domain for 20,000.00. I seriously didn't think it would sell but it woudn't hurt to list it (or so I thought).

All was well, until a bit over a week ago. I had been out that evening and didn't get home till nearly 10:00 PM. It was 11:00 before I was able to get onto the computer. That's when I saw the 5 emails from Godaddy.... I'm sure you can imaging my reaction when I saw that, within 20 minutes, my domain name, dustie.com, which I have owned since 1998, sold and transferred for a mere 450.00? I was sick...simply sick. How could this happen! First off, I've never had a domain name sell and transfer inside of 21 minutes and then be paid for it a little over a day and a half later. That's unheard of!

Immediately after reading those 5 emails and realizing my domain name had sold for less then 5% of what I'd had it listed for on Premium Domains, I was online with Godaddy help. Though they were sympathetic, no one there could help. They said I'd have to wait till morning and call auctions help. Needless to say, I didn't sleep well and was on the phone as soon as they opened their office. Though I was on the phone for a good 30 or so minutes with them (a good part of that time on hold), I was ultimately told there was nothing they could do for me. My domain was bought, paid for, and transferred and that was that! (Oh, and this even though they found the price had been tampered with twice that same night, long before I got online). They said this had to be me because no one else had access to that account! That was proof to me that someone was in there messing with my account and screwed me over big time, but not to them.

So I've been sick all week...trying to forget that someone illegally reached into my pocket and stole a lot of money , as well as my NAME! Needless to say, even a week later, I'm just sick about the whole thing.

Today, on a lark I looked up dustie.com on godaddy and was sick all over again when I saw that it is now listed as a premium domain for 12,000.00 (by the person who stole it from me?). That's just wrong, in so many ways! How do I get over this? I want to know how this could have happened!!??

I am posting in here as a warning to you all, as well as wanting to go on record that this did happen, regardless that the guy at [email protected] said that dustie.com had always been listed at 450.00 and it was a legitimate sale! I know how to use GoDaddy. I'm a long time user and have over 50 domain names with GoDaddy, more the half listed as premium domains! Ever since Dustie.com was originally listed as a premium domain at 20,000.00 that was the price that showed up whenever I went to maintain my premium listings. It always stuck out like a sore thumb, because most my other domain names are listed below 1000.00. There is simply no way Dustie.com was ever listed for as little as 450.00. Even go daddy suggested a price of nearly $5,000 as a premium listing starting point for dustie.com.

Without a doubt, my godaddy account was hacked and my domain name of 20 years stolen from me and relisted for 27 times what they paid for it! That burns me to the core!!!

I'm sure that, since this happened to me it will surely happen again. If any of you hear about such a thing, could you please have them get in touch with me? If I can find others that this has happened to, maybe we can do something as a group?

In the meantime, if you have a valuable domain name on Godaddy Premium domains, then you might want to take screen shots of the listed prices. Also, I was told that if I had the original email when it was listed that would be proof that it was listed at 20,000.00. Alas, I did not have it...I had, not long ago, deleted emails that were more then a year and a half old. If you don't have emails for your most valuable domain names, then remove them from listing, then relist them to get a new email and save those emails just in case!!

And Thanks for listening to my very long rant!

Dustie
(was [email protected] for over 20 years...now I am [email protected] and my site is dustie.art ... cool name, but it's certainly not worth what I lost in dustie.com!)
 
33
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
If no one lying. I think something really wrong when OP was told by the CS that "dustie.com had always been listed at 450.00". It sounds like the BIN price history somehow got wipe out completely. it's more likely the price change is not happened on Godaddy directly.

Since OP claimed he never has an afternic account. I will suspect that it happened on Afternic. Someone found a loophole, add OP domain into their afternic account and set the price to $450. Would it be possible for them to override OP listing price at Godaddy to $450?

I decided to test out this scenario with my own domain. The testing domain was listed on Godaddy without a BIN price for weeks. I set the BIN price to $8K USD at Godaddy and after a few minutes I set the BIN price for the same domain to $3.8K USD at Afternic.

The Godaddy BIN price finally changed to $3.8K USD instead of $8K USD. :dead:
wow wow wow....
 
0
•••
Love to see how it ended! Happy for you Dustie.

@MapleDots let me know if you'll ever be in Israel, I'll buy you a beer. you're great
 
3
•••
Until they call your telco, pretend to be you, and get the SIM changed - but those are the experts and there are a lot of amateurs working the scams too.

The reason there is so much scamming going on isn't due to "hacking", it's bad actors from Nigeria and Morocco calling up minimum wage support staff (often out of 3rd-world countries) and fooling these morons into changing passwords and account info.

I do not know why you would mention Nigeria in this case or Morocco? Are there scammers in Nigeria? Yes but 10000000% of the time, the tools and software used to scam people are often from US,Canada, UK.

Most of the scammers from Nigeria are not even technically sound to build a software in the first place. I know this. So while you call them scammers, also know that there are other Nationals that aid this. Thank you!
 
4
•••
I do not know why you would mention Nigeria in this case or Morocco? Are there scammers in Nigeria? Yes but 10000000% of the time, the tools and software used to scam people are often from US,Canada, UK.

Most of the scammers from Nigeria are not even technically sound to build a software in the first place. I know this. So while you call them scammers, also know that there are other Nationals that aid this. Thank you!
If I build a tool and you use it for scam, does that make me (the tool builder) complicit to your scam? Tools are built to solve various problems; if you decides to manipulate them for scam, no one should be held accountable but you.
 
0
•••
If I build a tool and you use it for scam, does that make me (the tool builder) complicit to your scam? Tools are built to solve various problems; if you decides to manipulate them for scam, no one should be held accountable but you.

These tools are built for one purpose: To steal! so if the owner build it for that purpose, yes, it make him an accomplice.
 
0
•••
Until they call your telco, pretend to be you, and get the SIM changed - but those are the experts and there are a lot of amateurs working the scams too.

The reason there is so much scamming going on isn't due to "hacking", it's bad actors from Nigeria and Morocco calling up minimum wage support staff (often out of 3rd-world countries) and fooling these morons into changing passwords and account info.


I'm from Morocco and I'm offended by your "racist" comment. Scammers and hackers are everywhere I don't see why you are mentioning Morocco where most of people don't even know about something called domain names.

I'm glad this story is ending great and Dustie is getting back her domain. You guys are great and showed lotof support and collaboration.

Thank you all.
 
5
•••
I'm from Morocco and I'm offended by your "racist" comment. Scammers and hackers are everywhere I don't see why you are mentioning Morocco where most of people don't even know about something called domain names.

I'm glad this story is ending great and Dustie is getting back her domain. You guys are great and showed lotof support and collaboration.

Thank you all.
Perhaps he shouldn't have mentioned countries but I really don't see any offense in doing that. I too usually mention different countries in my posts, either for good or for bad examples. We should be able to use facts freely without being offended.

It's hypocrisy to applaud when your country is mentioned as good example but battle anyone who mention your country for bad example. We should be able to take "the good" and "the bad" complements, provided they are not false.
 
2
•••
These tools are built for one purpose: To steal! so if the owner build it for that purpose, yes, it make him an accomplice.
Well, I haven't seen any generally available tool that is designed for scam.
 
0
•••
Mapeldots is legend around here. Another 2 thumbs up from me.
 
3
•••
A rollercoaster of plot twists.. wow!
You're lucky someone from NP bought your name or else if would have been long gone.

Great job guys!

not really
the name is locked on gd for any buyer
if he reported this issue and JS is investigating and they find its a bug they'd fix it regardless who bought it... once their investigation completes, they can remove name from owner accnt and refund his money and return it to old owner faster than thanos snap fingers.

but to your point, where he is lucky is to just come talk about it here on np... and for JS to be around to help here.
 
Last edited:
2
•••
I'm from Morocco and I'm offended by your "racist" comment.

Hey, the only 2 places I have ever been aggressively hacked from are Nigeria and Morocco, and 3 times from your country in the last year, so I fail to see how providing factual data on my own personal experiences is "racism" even when viewed in a highly liberal manner.

And just to be clear, I am not talking about true "hackers" in the traditional sense, but whole buildings full of people who call up banks, telcos, registrars, and other Western institutions, using "bad actor" social engineering and pretending to be the customer in order to get passwords/SIM cards, addresses, etc. changed to facilitate illegal account access.

And according to law enforcement friends and stats online from other organizations, these "social engineering warehouses" are rampant in many parts of Africa, especially the two countries I mentioned. In fact, Nigerian social engineering scams have become legend.
 
Last edited:
3
•••
Hey, the only 2 places I have ever been aggressively hacked from are Nigeria and Morocco, and 3 times from your country in the last year, so I fail to see how providing factual data on my own personal experiences is "racism" even when viewed in a highly liberal manner.

And just to be clear, I am not talking about true "hackers" in the traditional sense, but whole buildings full of people who call up banks, telcos, registrars, and other Western institutions, using "bad actor" social engineering and pretending to be the customer in order to get passwords/SIM cards, addresses, etc. changed to facilitate illegal account access.

And according to law enforcement friends and stats online from other organizations, these "social engineering warehouses" are rampant in many parts of Africa, especially the two countries I mentioned. In fact, Nigerian social engineering scams have become legend.
Mumbai police recently busted gang of 600-700 guys who were posing as irs people and were scamming Americans.
I believe good people as well as scammers both exist in any region.
A criminal has no nationality and he won't hesitate to scam someone from his own country as well.
No need to be offended buddy just because of the country name mentioned...
In fact need to be more alert rather than falling prey to these scams....
 
3
•••
Well, I haven't seen any generally available tool that is designed for scam.
Perhaps he shouldn't have mentioned countries but I really don't see any offense in doing that. I too usually mention different countries in my posts, either for good or for bad examples. We should be able to use facts freely without being offended.

It's hypocrisy to applaud when your country is mentioned as good example but battle anyone who mention your country for bad example. We should be able to take "the good" and "the bad" complements, provided they are not false.

First off all, This thread has no relationship with the said countries. Mentioning Nigeria and Morocco was TOTALLY UNCALLED FOR!

I have been here long enough to read different news of stolen domain name and nowhere have I read the country of the perpetrator was mentioned... Oh, I get it, because the culprit wasn't from Nigeria or Morocco or any other that you guys are quick to label scammers.

Like said earlier, many of the scammers in Nigeria use software that were developed by people from developed worlds. I have even seen a thread on quora where Chinese school children use various technological tactics to cheat during exams and I bet my money on it that an average Nigerian child is far far less likely to use such method...

All I am trying to say is that there are accomplice from other nationals but you guys often downplay those because they are Nigerians or Moroccans.

When the British came to Nigeria( there was nothing like Nigeria actually), they stole our oil and artifacts... some of the things we suffer as country today in Nigeria, the British caused it as they had caused in Many African countries. We are still being haunted generations after generations because of role the British played in merging different ethnic groups as a nation, an error that is further tearing us apart.

A lot of money from Africa is being laundered in Europe, UK, US... Your government know this but because of the greed, they turn a blind eye to this mess. Just yesterday I was reading a news that London real estate boom is highly linked to laundered money and I can bet that a huge chunk of those money are from African countries

WHO is going to pay for that?

I hate it when I read comments where people are quick to call others country scammers...
 
1
•••
1
•••
At least you could appreciate a legit buyer who is willing to take a heat and losses in order to help you, by spelling his nick right... Should be not so difficult, huh?
 
1
•••
Sorry for off topic...
You can’t do the right thing since you’ve already done the wrong thing.
I've just checked across my logic books and couldn't find any of such twisted casuistry there.
 
1
•••
that's sad...lesson learned - never list your domain at registrar marketplace

Can I ask why?

Also, should I point my domains to a self-developed landing page and list on efty instead?
 
1
•••
Can I ask why?

Also, should I point my domains to a self-developed landing page and list on efty instead?

Very well said, personally I would follow that advice on my most valuable domains.

I would never list a one word .com with the same company I have it registered with. I would want to make sure to have them completely separated so I was the one that made the final choice. Things can go wrong at auctions, it's easy to say sold and everybody is done. We know there are circumstances where unscrupulous people take advantage, so in the end I would not give up control of when to actually release my most valuable domains.
 
7
•••
Hey, the only 2 places I have ever been aggressively hacked from are Nigeria and Morocco, and 3 times from your country in the last year, so I fail to see how providing factual data on my own personal experiences is "racism" even when viewed in a highly liberal manner.

And just to be clear, I am not talking about true "hackers" in the traditional sense, but whole buildings full of people who call up banks, telcos, registrars, and other Western institutions, using "bad actor" social engineering and pretending to be the customer in order to get passwords/SIM cards, addresses, etc. changed to facilitate illegal account access.

And according to law enforcement friends and stats online from other organizations, these "social engineering warehouses" are rampant in many parts of Africa, especially the two countries I mentioned. In fact, Nigerian social engineering scams have become legend.

Every country on earth has scammers/thieves/hackers.

Your "law enforcement friends" are liars. The most aggressive and vicious hackers/scammers/thieves are definitely not from Africa.
 
2
•••
@Dustie -

Curious -

1) For your site dustie.com, did you have a Login Lockdown plugin?

2) When you owned dustie.com, what Registrant Email did you have listed under Whois?

3) Did you use the same password for dustie.com as you were using with your GD account?


The reason I ask these (3) question...

(a couple of "if"s) - but if you didn't have a Login Lockdown plugin in place with your dustie.com site and had assigned [email protected] with Admin rights - this could be the crux of your theft.

Here's how...

A) Someone could have written a simple script to ping your login with 1000's of passwords over a period of time.

B) Once they hit your [email protected] password, they then could have simply added Dustie.com to Afternic with a $450 price. Additionally, they could have cleared the site of the webpage (which was mentioned in this thread)

C) Once added to Afternic, AN would have sent [email protected] a confirmation email for Fast Transfer.

D) Not having Login Lockdown, with your [email protected] password in hand (and also not having 2FA in place with GD)... well you end up with the price change from the $20,000 price to the $450 amount. Adding a name to Afternic WILL OVERRIDE the existing GD Premium price (either by design or a bug - but it happens).

THIS MAY NOT HAVE EVEN BEEN the Maxtra (NP Member) who is being persistently mentioned here. Maxtra may have simply been a person who found the domain on GD Premium and purchased it one night.


If this is the case... the crux of the problem is not having Login Lockdown in place to protect your site's Admin password (and hence Admin email is easily hacked) and also not having 2FA in place at GD as a safety net for security. Fast Transfer is simply enabled by clicking on the link they send you and then logging into the registrar account to accept Fast Transfer for that specific (or bulk list) domain. With 2FA in place, the Fast Transfer would not (should not) have been enabled as they would have needed the 6 digit code to get into your GD account to accept the Fast Transfer request.

This may not have been what happened here, but is a possible scenario that would fit the situation being discussed.

-Cougar

ps: And you can retrieve a domain if Fraud was involved. You need documentation and you need to engage Joe Styler (GD/AN).
 
Last edited:
0
•••
I think this narrative, not yet ultimately complete, demonstrates an important concern with BIN fast transfer. The whole process happens without further intervention. That speed and ease is what makes it attractive, but probably above some price point there should be some confirmation to make sure no error has been made.

BTW I am only talking high value domain names - I think the ease and convenience of registrar marketplaces and fast transfer agreements make total sense up to some price point.

Bob
 
Last edited:
2
•••
Your "law enforcement friends" are liars. The most aggressive and vicious hackers/scammers/thieves are definitely not from Africa.

Congratulations, that's quite the achievement.

The point the stats, reports and "law enforcement liars" are making is that it's far, far, far, far easier to setup a "social engineering warehouse" in a developing country in Africa or Asia, than say, in the USA, where the intelligence community would have your ass in a NY minute.
 
Last edited:
1
•••
It is not an achievement, just fact. Go read a book.

You and your friends spread lies as fact.
 
Last edited:
0
•••
Congratulations, that's quite the achievement.

The point the stats, reports and "law enforcement liars" are making is that it's far, far, far, far easier to setup a "social engineering warehouse" in a developing country in Africa or Asia, than say, in the USA, where the intelligence community would have your ass in a NY minute.
Yeah, Madoff had it going for so long stealing billions of dollars huh? In the last 3-4 months, many of these internet fraudsters have been apprehended in Nigeria... At time, a whole Night Club was invaded for that purpose alone.
 
Last edited:
0
•••
It's a great and honorable gesture. But given the amount of unknown variables that led to the outcome it did it may be in the best interests of the OP to initiate the Legal Dispute procedure in order to have answers as to the how, what and why the transaction happened by getting down to the bottom of the matter with an inquiry if there was any impropriety involved concerning possible price manipulation and or involvement of a hacker.

@namelancer has a great point here.

Yes, MapleDots is providing a "return avenue" - however - if Dustie doesn't find out how it was initially mis-transferred, then what's to stop this from happening a 2nd time?

Is MapleDots going to persistently donate another $5,000 to the next buyer?

GD needs (should) be involved to provide clarity to what transpired.

-Cougar
 
Last edited:
3
•••
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back