NameSilo

Domains got stolen from my namesilo [Recovered]

Located in Domain Registrar Reviews, started by TSB, Aug 29, 2018

Replies:
35
Views:
4,643

  1. TSB

    TSB Top Contributor VIP Gold Account

    Posts:
    4,172
    Likes Received:
    355
    Yesterday, I was checking domain list in my namesilo account. Found that my 4L.com's were missing. Immediately I've sent mail to namesilo and got a reply like the domains got transferred to another account.

    And when I checked IP login info in the domain transaction history, for these 3 alone the access is from the UK. I shared this info with the namesilo customer support and waiting for their reply. I'm sure the domains were stolen from my account, but not sure how did it happen.

    Screen Shot 2018-08-29 at 3.23.02 PM.png

    First time facing this problem. I hope a lot of people gone through this situation. But what is the success rate in getting back the stolen domains?
     
    The views expressed on this page by users and staff are their own, not those of NamePros.
  2. tonyk2000

    tonyk2000 Top Contributor VIP ★★★★★★★★★★

    Posts:
    1,867
    Likes Received:
    2,882
    @namesilo will no doubts respond with a comment here.
    Suggestion for namesilo: implementation of a configurable system of emailed login notifications, such as for example if a login from noticeably different location occured (such as on the screenshot). Up to sending email about each successful (or unsuccessful) login attempt. And/or denying obviously suspicious login attempts like this one (185.220.101.44 is a tor exit node).
    @TSB - do you have 2FA enabled with namesilo?

    Edited: I just found that emailed notifications are already available at namesilo. Right into "proactive notifications" config. It might still make sense to implement a default (non-configurable) email notification of unusual correct logins, and of all incorrect logins though.
     
    Last edited: Aug 29, 2018
  3. TSB

    TSB Top Contributor VIP Gold Account

    Posts:
    4,172
    Likes Received:
    355
    @tonyk2000, actually I didn't enable it, but I enabled right after finding this.
     
  4. TSB

    TSB Top Contributor VIP Gold Account

    Posts:
    4,172
    Likes Received:
    355
    I've enabled all of my other registrars except this. my bad.
     
  5. MasterOfMyDomains

    MasterOfMyDomains Top Contributor VIP ★★★★★★★★★★

    Posts:
    4,506
    Likes Received:
    4,607
  6. karmaco

    karmaco Top Contributor VIP

    Posts:
    2,404
    Likes Received:
    6,034
    It’s under domain history on the right side bar
     
  7. karmaco

    karmaco Top Contributor VIP

    Posts:
    2,404
    Likes Received:
    6,034
    I get an email every time I push or receive a domain. Any movement. Thought that was automatic.
     
  8. tonyk2000

    tonyk2000 Top Contributor VIP ★★★★★★★★★★

    Posts:
    1,867
    Likes Received:
    2,882
    Yes, indeed. It is likely an icann requirement... @TSB did you receive any domainpush notification on 19/7 ? Or, any sort of email notifications like a change of account email etc... ?
     
  9. Hypersot

    Hypersot Top Contributor VIP

    Posts:
    2,145
    Likes Received:
    2,339
    no IP nor location shown in domain history.
     
  10. TSB

    TSB Top Contributor VIP Gold Account

    Posts:
    4,172
    Likes Received:
    355
    Nope, I haven't received any.
     
  11. TSB

    TSB Top Contributor VIP Gold Account

    Posts:
    4,172
    Likes Received:
    355
    Click the View Details under Details in DOmain Activity History, it will open popup with info.
     
  12. tonyk2000

    tonyk2000 Top Contributor VIP ★★★★★★★★★★

    Posts:
    1,867
    Likes Received:
    2,882
    So it may well be that your email account was also accessed by the person who stole the domains :(
    They might delete it from the inbox before you checked email.
     
  13. Hardheolar

    Hardheolar Established Member

    Posts:
    89
    Likes Received:
    84
    It should be able to be traced
     
  14. Hypersot

    Hypersot Top Contributor VIP

    Posts:
    2,145
    Likes Received:
    2,339
    I did, I still get nothing like what I see in your screenshot.
    Anyway, let's not change the subject of the thread :)

    I wish you all the luck getting your domains back. Thanks for letting us know.
     
  15. tonyk2000

    tonyk2000 Top Contributor VIP ★★★★★★★★★★

    Posts:
    1,867
    Likes Received:
    2,882
    Since it was accessed from TOR, the real location of a hacker cannot be traced based on IP. What can be found out is what happened with the domain pushed, they are likely not with namesilo already. Might be sold or resold 1 or more times... including to other domain investors. In any case, a separate warning post on this forum with the list of domains (stolen - do not buy) will not harm I think.
     
  16. TSB

    TSB Top Contributor VIP Gold Account

    Posts:
    4,172
    Likes Received:
    355
    When I checked the Whois lookup they are still with name silo
     
  17. karmaco

    karmaco Top Contributor VIP

    Posts:
    2,404
    Likes Received:
    6,034
    Then NS should help you get them back. Hopefully the domains are locked in the hackers account.
     
  18. rathish

    rathish Top Contributor VIP

    Posts:
    2,090
    Likes Received:
    465
    Please share the domain names , so that we can skip buying those domains if someone offered us the same...
     
  19. golan

    golan GolanMedia.com VIP Gold Account

    Posts:
    4,327
    Likes Received:
    5,215
    That sucks bro. Please keep us updated.
     
  20. namesilo

    namesilo Top Member NameSilo Staff VIP Gold Account

    Posts:
    865
    Likes Received:
    2,414
    Hi guys,

    The domains are still with us so we have blocked the ability to transfer out while we investigate.
    TSB - lets take this convo back to support chat.
     
  21. lambo.com

    lambo.com n e w s m e d i a .com VIP Gold Account

    Posts:
    1,372
    Likes Received:
    2,277
    lol, I don't!
     
  22. elevator

    elevator DnCombo.com VIP

    Posts:
    1,842
    Likes Received:
    1,315
    Your vigilance has saved you. Just folloup and get back your domains. Cheers
     
  23. wwwulff

    wwwulff Top Contributor VIP

    Posts:
    1,887
    Likes Received:
    5,388
    Hope you get your names back - Please keep us updated
     
  24. Bob Hawkes

    Bob Hawkes Top Member NameTalent VIP Gold Account Trusted Blogger

    Posts:
    6,570
    Likes Received:
    18,641
    This is undoubtedly something you have checked, but they were not in any chance for sale on Afternic premium network with fast transfer enabled, and they have actually sold, but for some reason you did not get (maybe spam filter?) the Afternic notification of the sales? There was a post a while back that a NP member thought his domain was stolen and that turned out to be the answer.

    Anyway, I hope that it does get resolved.

    ps I presume you have checked to see what you can find out about the IP address where right now.
     
  25. Kate

    Kate Domainosaurus Rex VIP ★★★★★★★★★★

    Posts:
    21,116
    Likes Received:
    22,479
    Maybe there is a filter that deletes all mail from namesilo.com. I hope the OP was not using the same password for E-mail and all online services...
     

Want to reply or ask your own question?

It only takes a minute to sign up – and it's free!
Topics / Tags:
NameWorth
  1. NamePros uses cookies and similar technologies. By using this site, you are agreeing to our privacy policy, terms, and use of cookies.
    Dismiss Notice
Loading...