I apologize in advance for my english.
Friends, I am in an extremely difficult situation. A scammer stole a domain inside my registrar and transferred it to Internetbs. The domain is from 2012 and has high traffic. This is my only source of income.
My past registrar was publicdomainregistry. They are now trying to help me get my domain back and are negotiating with internetbs.
How it all happened:
1. On July 25, I received a letter in the mail that the mail address of my domain was changed to another.
2. I immediately contacted my reseller and registrar, informed that I did not change the domain mail. I also carefully checked my mail logs - my mail and reseller account were not hacked.
3. The next day I discovered that the scammer had changed whois information from mine to his own.
4. A few days later, the registrar replied that they were contacted by a person who said that he had lost access to the domain's mail and asked to transfer the domain from the reseller to the direct agreement of the registrar Resellerclub.
5. The registrar asked him for documents confirming that he is the owner of the domain. My Whois information was open, so the scammer falsified documents in my name / surname and sent it to the registrar. The registrar checked the documents and changed the domain mail from mine to the scammer's mail. Then the scammer sent them an application to change whois information.
6. After my request, the registrar froze the domain and said that it had started an investigation. They asked me for documents confirming that I am the owner. I sent them everything they needed. Also my reseller helped me.
7. A few days later, the registrar replied that the fraudster's documents were indeed fake and returned the domain back to my reseller. I started to manage my domain again.
8. After 6 days (August 6) I checked the whois of my domain and was horrified to find that the registrar of my domain is InternetBS. I realized that the fraudster somehow managed to transfer the domain to another registrar.
9. It turned out that while the fraudster was managing the domain from my registrar, he managed to get the transfer key. And as soon as my registrar removed the lock for the transfer after the completion of the investigation, the fraudster used this key at the Internetbs registrar. After 6 days the move was made.
10. The scammer copied my website completely and installed it on his hosting via cloudflare. A few days later, he set up 301 redirects from my domain to another. While the proceedings are underway, the site has already moved to a new domain in the google search engine.
On August 6, I immediately contacted internetbs and informed them that a scammer had stolen my domain. They were also contacted by my registrar. The Internetbs responded that they froze the domain for transfer and launched an investigation. On August 14, they wrote that they had asked the fraudster for evidence confirming the good faith transfer of the domain, but the fraudster has not yet provided any concrete evidence. From this point on, I have not received any information. My registrar also writes to me that they are not informed of the progress of the investigation.
On the forums, I contacted 4 more victims who were affected by the same scammer. All stolen domains have the same pub id adsense.
My registrar has all the evidence that the transfer key was obtained exactly when the fraudster was managing the domain. I honestly don't understand why the internetbs have been investigating for so long.
Friends, give advice on what to do with this situation? How many days can Internetbs investigate? Have there been any successful examples of domain returns from this registrar?
Thank you for your help.
Friends, I am in an extremely difficult situation. A scammer stole a domain inside my registrar and transferred it to Internetbs. The domain is from 2012 and has high traffic. This is my only source of income.
My past registrar was publicdomainregistry. They are now trying to help me get my domain back and are negotiating with internetbs.
How it all happened:
1. On July 25, I received a letter in the mail that the mail address of my domain was changed to another.
2. I immediately contacted my reseller and registrar, informed that I did not change the domain mail. I also carefully checked my mail logs - my mail and reseller account were not hacked.
3. The next day I discovered that the scammer had changed whois information from mine to his own.
4. A few days later, the registrar replied that they were contacted by a person who said that he had lost access to the domain's mail and asked to transfer the domain from the reseller to the direct agreement of the registrar Resellerclub.
5. The registrar asked him for documents confirming that he is the owner of the domain. My Whois information was open, so the scammer falsified documents in my name / surname and sent it to the registrar. The registrar checked the documents and changed the domain mail from mine to the scammer's mail. Then the scammer sent them an application to change whois information.
6. After my request, the registrar froze the domain and said that it had started an investigation. They asked me for documents confirming that I am the owner. I sent them everything they needed. Also my reseller helped me.
7. A few days later, the registrar replied that the fraudster's documents were indeed fake and returned the domain back to my reseller. I started to manage my domain again.
8. After 6 days (August 6) I checked the whois of my domain and was horrified to find that the registrar of my domain is InternetBS. I realized that the fraudster somehow managed to transfer the domain to another registrar.
9. It turned out that while the fraudster was managing the domain from my registrar, he managed to get the transfer key. And as soon as my registrar removed the lock for the transfer after the completion of the investigation, the fraudster used this key at the Internetbs registrar. After 6 days the move was made.
10. The scammer copied my website completely and installed it on his hosting via cloudflare. A few days later, he set up 301 redirects from my domain to another. While the proceedings are underway, the site has already moved to a new domain in the google search engine.
On August 6, I immediately contacted internetbs and informed them that a scammer had stolen my domain. They were also contacted by my registrar. The Internetbs responded that they froze the domain for transfer and launched an investigation. On August 14, they wrote that they had asked the fraudster for evidence confirming the good faith transfer of the domain, but the fraudster has not yet provided any concrete evidence. From this point on, I have not received any information. My registrar also writes to me that they are not informed of the progress of the investigation.
On the forums, I contacted 4 more victims who were affected by the same scammer. All stolen domains have the same pub id adsense.
My registrar has all the evidence that the transfer key was obtained exactly when the fraudster was managing the domain. I honestly don't understand why the internetbs have been investigating for so long.
Friends, give advice on what to do with this situation? How many days can Internetbs investigate? Have there been any successful examples of domain returns from this registrar?
Thank you for your help.
Last edited:
