question Domain got put on hold by Verisign without a single email

[PAKB]

Hello , I hand regged a domain EXXEE.com on 2019-10-21 at dynadot , Same domain was approved on SH as premium listing , I changed NS to SH back then but today when my domain got delisted at Squadhelp (Due to changed nameservers) , I contacted dynadot immediately and asked how my NS were changed without my permission.
Dynadot let me know that domain got on hold by verisign , I didn't got any email from registery or dynadot before about this ...What could be issue and how can i get domain back ?

Here is reply from dynadot

 

[Jurgen Wolf]

Maybe they (spamhaus) finally did something right - removed the domain from their db after it became pendingdelete.

It was regged on Oct'21 and NS forced on Dec'6 - after ~1.5 months of parking...

 

[Jurgen Wolf]

And absolute idiotism that Dynadot forwards OP to Verisign, and then Verisign forwards him to Dynadot...

 

[PAKB]

And absolute idiotism that Dynadot forwards OP to Verisign, and then Verisign forwards him to Dynadot...

Yes, Both parties don't know what happened to domain in short...

 

[branding]

Here's the older thread on NP about a similar incident:

https://www.namepros.com/threads/domain-seized.1116091/

 

[Jurgen Wolf]

From my another experience with Afilias - they don't resolve any registrant requests... taboo.
Only accredited registrar can ask Afilias to update the domain state.

 

[Internet.Domains]

Here's the older thread on NP about a similar incident:

https://www.namepros.com/threads/domain-seized.1116091/

In the link there is alot of information regarding this issue. I did lots of research on this and mentioned a year ago that it will affect lots of domains.

 

[PAKB]

Here's the older thread on NP about a similar incident:

https://www.namepros.com/threads/domain-seized.1116091/

The domain mentioned in this thread (oreux in king) is still in sinkhole , so there is no hope for any domain put into it... Strange.

 

[Jurgen Wolf]

@Rob Monster

 

[Internet.Domains]

The domain mentioned in this thread (oreux in king) is still in sinkhole , so there is no hope for any domain put into it... Strange.

No there is no hope. It is under the American Department of Homeland Security.

 

[Jurgen Wolf]

Ethos, which tries to get .ORG - US company?

 

[sharfab]

No there is no hope. It is under the American Department of Homeland Security.

Its possible this domain name may have a International implications issue, because this matter is under specifically the Department of Homeland Security and not under any of our U.S. local law enforcement jurisdictions.

 

[Internet.Domains]

This domain name may have a International implications issue, because this matter is under specifically the Department of Homeland Security and not under any of our U.S. local law enforcement jurisdictions.

The malware, or potential malware, absolutely has international implications. Surely the DHS is working with other top level government agencies across the globe. Hence, all the secrecy involved. This is above and beyond ICANN, registries and registrars. The malware uses DNS to change delivery sites on domains. This isn't the first and won't be the last.

https://www.us-cert.gov/ncas/alerts/TA16-336A

 

[wwwweb]

Strangely...
I do tens of WHOIS reviews daily... for many years...
And never have seen those shadow NS.

 

[Internet.Domains]

Wow! That's the most valuable name I have seen hit. Ouch!

Good catch!

 

[PAKB]

what a Great name ... But the domain is being redirected to nature.com and doing good i think...
In my case domain is redirecting to some downloadable file

 

[wwwweb]

Wow! That's the most valuable name I have seen hit. Ouch!

Good catch!

It's been fixed, given the name, and it's under CSC management. The OP got a good hand reg, I don't think they want to spend the money to correct it though, but would be interesting on the procedure, past ownership can really mess things up at times.

 

[PAKB]

It's been fixed, given the name, and it's under CSC management. The OP got a good hand reg, I don't think they want to spend the money to correct it though, but would be interesting on the procedure, past ownership can really mess things up at times.

Yes I am not going to spend any $ on this but still looking for any appropriate answer of this from dynadot or verisign which are totally silent on the issue so far...

 

[Internet.Domains]

Yes I am not going to spend any $ on this but still looking for any appropriate answer of this from dynadot or verisign which are totally silent on the issue so far...

Your not going to get an answer. They know very little about this. The Avalanche network of malware is being investigated by the most secret agencies and the top computer scientists in the world. The stability of the globe is at stake.

 

[Rob Monster]

@Rob Monster

Sorry to tell you but it is the dreaded SHADOWSERVER sinkhole:

Domain Name: EXXEE.COM

Registry Domain ID: 2446197598_DOMAIN_COM-VRSN

Registrar WHOIS Server: whois.dynadot.com

Registrar URL: http://www.dynadot.com

Updated Date: 2019-12-06T20:55:42Z

Creation Date: 2019-10-21T18:45:55Z

Registry Expiry Date: 2020-10-21T18:45:55Z

Registrar: DYNADOT, LLC

Registrar IANA ID: 472

Registrar Abuse Contact Email: [email protected]

Registrar Abuse Contact Phone: +16502620100

Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Name Server: SC-A.SINKHOLE.SHADOWSERVER.ORG

Name Server: SC-B.SINKHOLE.SHADOWSERVER.ORG

Name Server: SC-C.SINKHOLE.SHADOWSERVER.ORG

Name Server: SC-D.SINKHOLE.SHADOWSERVER.ORG


It is the kiss of death for a domain name unfortunately.

@PAKB - I will PM you my DOJ contact.

More than likely it got caught up in some malware sweep.

Dynadot should have been notified with a DOJ case number.

 

[Jurgen Wolf]

@wwwweb
Thanks.
I rarely review WHOIS for .COMs
Probably, this is a reason why I didn't detect any SHADOWSERVER-victims.

 

[PAKB]

Sorry to tell you but it is the dreaded SHADOWSERVER sinkhole:

Domain Name: EXXEE.COM

Registry Domain ID: 2446197598_DOMAIN_COM-VRSN

Registrar WHOIS Server: whois.dynadot.com

Registrar URL: http://www.dynadot.com

Updated Date: 2019-12-06T20:55:42Z

Creation Date: 2019-10-21T18:45:55Z

Registry Expiry Date: 2020-10-21T18:45:55Z

Registrar: DYNADOT, LLC

Registrar IANA ID: 472

Registrar Abuse Contact Email: [email protected]

Registrar Abuse Contact Phone: +16502620100

Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Name Server: SC-A.SINKHOLE.SHADOWSERVER.ORG

Name Server: SC-B.SINKHOLE.SHADOWSERVER.ORG

Name Server: SC-C.SINKHOLE.SHADOWSERVER.ORG

Name Server: SC-D.SINKHOLE.SHADOWSERVER.ORG


It is the kiss of death for a domain name unfortunately.

@PAKB - I will PM you my DOJ contact.

More than likely it got caught up in some malware sweep.

Dynadot should have been notified with a DOJ case number.

Got it, thanks a lot...

 

[Rob Monster]

Got it, thanks a lot...

I am going to guess your domain was included as an addendum to Civil Action 16-1780

If you contact them, they will give you some date, probably more than 1 year old, when the Sinkhole expires.

See related thread:

https://www.namepros.com/threads/domain-seized.1116091/page-3#post-7048725

 

[7363824]

That really sucks. I think your best bet is to get an attorney who knows what they are doing. Perhaps they can file something to get a new court order to release the domain?

 

[PAKB]

I am going to guess your domain was included as an addendum to Civil Action 16-1780

If you contact them, they will give you some date, probably more than 1 year old, when the Sinkhole expires.

See related thread:

https://www.namepros.com/threads/domain-seized.1116091/page-3#post-7048725

Got it , thanks... will update the thread once i got a reply from them , There was not a single clue on google about the domain previous history so i regged it ,
On the other hand i think there must be some free tool which can make sure domain history is clean etc

 

[wwwweb]

That really sucks. I think your best bet is to get an attorney who knows what they are doing. Perhaps they can file something to get a new court order to release the domain?

Spend 4 figures on a hand reg domain? better to try, and get dynadot to do something, and spend your money on a nice category defining name for 4 figures.