alert Epik Had A Major Breach

Silentptnr · Sep 14, 2021

Just read this. Looks like Epik may have been hacked and sensitive data compromised...

Read here:
https://domainnamewire.com/2021/09/14/hackers-claim-significant-epik-breach/

Thought I would share this.

Future Sensors · Sep 18, 2021

https://www.troyhunt.com/weekly-update-261/

Weekly Update 261

Never a dull moment! [...] A few other random things in this weeks vid, the one worth following up on here though is the promised tweet about how to handle the Epik breach and the result so far is, well, let's just say I think I nailed the public sentiment in the video [...]

johnn · Sep 18, 2021

Overracting? Epik fans should open their eyes for the way they treat the customers.
No posting no update nothing for days the only thing he cares is spamming new registration for $6.99 and praying?

He is not a normal/regular employee, he is the CEO.
Give me a break.

DomainNature · Sep 18, 2021

I have read the whole thread.
Steps to be taken if you are with Epik.

change password
add 2FA
set limits to your CC

Also do you really think those hackers Aubrey and Kirtaner will get out dry? If they will touch peoples money many arrests will happen, FBI will get them in their basements and get their weed out of their empty heads!

Jurgen Wolf · Sep 18, 2021

See comparable registrar: https://domainnamestat.com/statistics/registrar/Porkbun_LLC-IANA_ID-1861

Upcoming deletes 4,046 (0.55%)

kam · Sep 18, 2021

johnn said:
praying?

Believe in god and you will not be conquered by fear but love conquers all.

bmugford · Sep 18, 2021

Jurgen Wolf said:
See comparable registrar: https://domainnamestat.com/statistics/registrar/Porkbun_LLC-IANA_ID-1861

Upcoming deletes 4,046 (0.55%)

Again, something is not adding up here.

Brad

johnn · Sep 18, 2021

kam said:
Believe in god and you will not be conquered by fear but love conquers all.

You don't open the business, mess up the customers and pray.

Jurgen Wolf · Sep 18, 2021

And Porkbun as of now has ~37K .xyz and 10K .TOP
So issue is definitely not with those TLDs.

DN_Hunter · Sep 18, 2021

DN_Hunter said:
Has anyone been able to Transfer OUT using the APPROVE TRANSFER button? Right now when I hit the APPROVE Transfer button, I get a message that says
"Currently approve is not available"

I emailed EPIK support, and they replied with the following:

======================================================
For security reasons, domain transfer approval has been disabled.

If you may provide us your Epik Account PIN # as well as the 2 domains, we'll get this done for you.
=====================================================

So I provided the information they requested. Hope they can move the transfers along ASAP.

Jurgen Wolf · Sep 18, 2021

It is not mandatory to approve it immediately.
Transfer will be approved/finished automatically on 6th day. It is pending at REGISTRY level...

branding · Sep 18, 2021

bmugford said:
Hmm. What is going on there?

Brad

Regarding the deletes coming up. They ran some good promos, $1 .co, $1.99 info, $1.99 .realty if not mistaken past year.

Most of them are obviously not going to be renewed.

Regarding transfers, @Bob Hawkes in the other thread:

It seems that the auth code for transfer is no longer available directly from site, but only via email (a change from the past). Other registrars I deal with some you can get codes from site, and others only via admin email. In past Epik allowed both. Clearly only email a bit more secure, but immediately on site is more convenient.

Also, at least for me this morning, it does not allow fast approval via the email link (it asks me if I want to approve, but says approval is not allowed at this time). I did not check with customer service if there are ways around this, it is something temporary, or something particular to my transfer (I was just transferring one name, and don't mind if I do end up needing to wait the 5d).

I have 100+ names at Epik, I do not have immediate plans to move most out, will wait and see details and the response. I use 10 different registrars, with most on 4, so it is not like all my names at any registrar.

topdom · Sep 18, 2021

Jurgen Wolf said:
https://domainnamestat.com/statistics/registrar/Epik_Inc_-IANA_ID-617

Upcoming deletes 279,329 (45.57%)

It could mean 14 months ago there was a big discount for registrations. For example, ~1 USD for .co, .info, .xyz, .top .

Jurgen Wolf · Sep 18, 2021

DirkS said:
They ran some good promos, $1 .co, $1.99 info, $1.99 .realty if not mistaken past year.

Yes, but they don't have such HUGE volume in these TLDs.
See numbers above...

Beezy · Sep 18, 2021

| (substring_index(domain,'.',-1)) | count(*) |
+----------------------------------+----------+
| COM | 837124 |
| co | 154727 |
| TOP | 72803 |
| XYZ | 53484 |
| NET | 50892 |
| info | 46693 |
| ORG | 34105 |
| LONDON | 28444 |
| CITY | 23040 |
| BOSTON | 17011 |
| realty | 16287 |
| us | 15428 |
| IN | 13869 |
| VC | 9400 |
| ICU | 6199 |
| FIT | 6047 |
| WEDDING | 5839 |
| WORK | 5744 |
| FASHION | 5475 |
| IT | 4740 |
| best | 4711 |
| GDN | 3825 |
| LAW | 3582 |
| UK | 3297 |
| BIZ | 3100 |
| TV | 2940 |
| NL | 2817 |
| EXPERT | 2163 |
| BAYERN | 2000 |
| MIAMI | 1898 |
| ME | 1885 |
| ca | 1734 |
| CLICK | 1265 |
| cc | 1262 |
| IO | 1256 |
| BIBLE | 1185 |
| MOBI | 1111 |
| uno | 1094 |
| TODAY | 1089 |
| MELBOURNE | 1050 |
| NRW | 1001 |
| WORLD | 940 |
| LIFE | 916 |
| au | 799 |
| SYDNEY | 797 |
| COOL | 644 |
| MENU | 593 |
| O | 540 |
| TUBE | 538 |
| LIVE | 496 |
| st | 478 |
| SITE | 453 |
| CAPITAL | 448 |
| WS | 415 |
| WINE | 396 |
| COIN | 392 |
| MX | 388 |
| news | 373 |
| fr | 356 |
| SHOP | 350 |
| TRUTH | 338 |
| EMAIL | 331 |
| app | 312 |
| PRO | 311 |
| de | 296 |
| CAFE | 286 |
| CLUB | 279 |
| TRAVEL | 253 |
| FUN | 249 |
| MONSTER | 246 |
| PW | 240 |
| CH | 239 |
| AGENCY | 237 |
| network | 229 |
| one | 227 |
| LAWYER | 218 |
| BUSINESS | 217 |
| MEDIA | 214 |
| online | 212 |
| ROCKS | 212 |
| GEEK | 209 |
| bet | 205 |
| cz | 204 |
| ATTORNEY | 202 |
| EXCHANGE | 197 |
| center | 187 |
| MONEY | 184 |
| CLOUD | 182 |
| BE | 172 |
| HOUSE | 170 |
| FORSALE | 168 |
| es | 168 |
| SOLUTIONS | 166 |
| BIT | 166 |
| EU | 165 |
| ESTATE | 163 |
| WEBSITE | 162 |
| PROPERTIES | 156 |
| STORE | 152 |
| SPACE | 152 |
| MARKET | 152 |
| link | 150 |
| COMPUTER | 150 |
| PH | 148 |
| FINANCE | 144 |
| DOMAINS | 141 |
| ENERGY | 138 |
| dev | 135 |
| SERVICES | 128 |
| RENTALS | 126 |
| DIGITAL | 125 |
| AE | 124 |
| LEGAL | 124 |
| br | 122 |
| ASIA | 121 |
| group | 120 |
| MARKETING | 120 |
| FINANCIAL | 120 |
| cx | 119 |
| LOANS | 116 |
| ZA | 115 |
| cyou | 113 |
| DIRECTORY | 113 |
| NZ | 112 |
| MARKETS | 110 |
| LAND | 106 |
| GURU | 106 |
| DOCTOR | 105 |
| academy | 105 |
| TECH | 104 |
| LEASE | 103 |
| gold | 102 |
| FUND | 101 |
| golf | 101 |
| CHAT | 98 |
| COFFEE | 95 |
| AUCTION | 92 |
| at | 86 |
| ipfs | 86 |
| BBS | 85 |
| HEALTH | 85 |
| ZONE | 84 |
| credit | 84 |
| INDUSTRIES | 82 |
| SYSTEMS | 81 |
| TECHNOLOGY | 81 |
| CASH | 81 |
| COMPANY | 80 |
| PROPERTY | 79 |
| FARM | 78 |
| FYI | 78 |
| DIRECT | 77 |
| WORKS | 76 |
| CL | 76 |
| TEL | 75 |
| casino | 73 |
| PL | 72 |
| VENTURES | 71 |
| wtf | 71 |
| watch | 70 |
| DATING | 70 |
| CHEAP | 69 |
| social | 67 |
| MN | 67 |
| GLOBAL | 66 |
| ETH | 65 |
| TIPS | 65 |
| REISE | 64 |
| contact | 64 |
| INTERNATIONAL | 63 |
| onl | 63 |
| SOFTWARE | 60 |
| BARGAINS | 60 |
| oz | 58 |
| TOYS | 58 |
| CONSULTING | 58 |
| DEALS | 57 |
| TAX | 57 |
| NAME | 57 |
| SINGLES | 57 |
| PHOTOS | 56 |
| UNIVERSITY | 55 |
| DELIVERY | 54 |
| AI | 53 |
| MS | 52 |
| GUIDE | 52 |
| COACH | 51 |
| CASA | 51 |
| TOOLS | 50 |
| APARTMENTS | 50 |
| ac | 49 |
| express | 48 |
| SOLAR | 48 |
| PARTNERS | 48 |
| win | 47 |
| SUPPORT | 45 |
| FM | 45 |
| CLOTHING | 45 |
| boutique | 44 |
| CN | 44 |
| PRESS | 43 |
| LA | 43 |
| GRATIS | 43 |
| CAM | 42 |
| TOURS | 42 |
| flights | 42 |
| LTD | 42 |
| INVESTMENTS | 42 |
| CHURCH | 41 |
| VIP | 41 |
| LIMITED | 41 |
| MANAGEMENT | 40 |
| GALLERY | 39 |
| ORGANIC | 39 |
| pt | 39 |
| CATERING | 39 |
| ART | 39 |
| SKI | 38 |
| events | 38 |
| FITNESS | 38 |
| BIKE | 38 |
| REVIEWS | 37 |
| EXPOSED | 37 |
| LC | 37 |
| codes | 37 |
| VIDEO | 37 |
| DESIGN | 37 |
| MORTGAGE | 36 |
| DIAMONDS | 36 |
| SCIENCE | 36 |
| CARE | 36 |
| SUPPLY | 35 |
| ENGINEERING | 35 |
| FOUNDATION | 35 |
| CONTRACTORS | 35 |
| SHOW | 35 |
| game | 34 |
| team | 34 |
| run | 34 |
| NINJA | 33 |
| PLUS | 33 |
| HOLDINGS | 33 |
| LIB | 33 |
| WIKI | 33 |
| CONSTRUCTION | 33 |
| CM | 32 |
| TRAINING | 32 |
| INSURE | 32 |
| SALE | 31 |
| DOG | 31 |
| RO | 31 |
| productions | 31 |
| OSS | 31 |
| BLOG | 30 |
| ENTERPRISES | 30 |
| PLUMBING | 30 |
| am | 30 |
| coupons | 30 |
| PIZZA | 29 |
| BAZAR | 29 |
| REPAIR | 29 |
| EDUCATION | 29 |
| help | 29 |
| INSTITUTE | 29 |
| recipes | 29 |
| STYLE | 29 |
| BZ | 29 |
| report | 28 |
| BUILDERS | 28 |
| CLINIC | 28 |
| SE | 28 |
| SUPPLIES | 28 |
| BLUE | 28 |
| GG | 27 |
| ECO | 27 |
| JOBS | 27 |
| PLACE | 27 |
| GS | 27 |
| COMMUNITY | 26 |
| TOWN | 26 |
| PICS | 26 |
| PHOTOGRAPHY | 26 |
| YOGA | 26 |
| PIRATE | 26 |
| DENTIST | 26 |
| MOVIE | 26 |
| claims | 26 |
| studio | 25 |
| EQUIPMENT | 25 |
| PICTURES | 25 |
| ACCOUNTANTS | 24 |
| TAXI | 24 |
| VISION | 24 |
| RENT | 24 |
| DISCOUNT | 23 |
| EMC | 23 |
| HOLIDAY | 23 |
| LI | 23 |
| VACATIONS | 23 |
| school | 23 |
| CAREERS | 23 |
| CONDOS | 23 |
| GREEN | 23 |
| TRADE | 22 |
| SO | 22 |
| RESTAURANT | 21 |
| hn | 21 |
| EARTH | 21 |
| GAMES | 21 |
| SEXY | 21 |
| KITCHEN | 20 |
| CARDS | 20 |
| TK | 19 |
| CRUISES | 19 |
| band | 19 |
| GD | 19 |
| NULL | 19 |
| SHOES | 19 |
| libre | 19 |
| PHOTO | 18 |
| SURF | 18 |
| VEGAS | 18 |
| PE | 18 |
| TO | 18 |
| GMBH | 18 |
| REVIEW | 17 |
| haus | 17 |
| AG | 17 |
| CHAN | 17 |
| FUR | 17 |
| healthcare | 17 |
| NEO | 17 |
| RED | 17 |
| LOL | 16 |
| GIFT | 16 |
| HT | 16 |
| CAMERA | 16 |
| INK | 15 |
| TW | 15 |
| associates | 15 |
| INDY | 15 |
| GARDEN | 15 |
| ACCOUNTANT | 15 |
| PARTS | 15 |
| GIFTS | 15 |
| LOVE | 14 |
| RACING | 14 |
| FURNITURE | 14 |
| FAMILY | 14 |
| ISTANBUL | 14 |
| mba | 13 |
| DATE | 13 |
| COLLEGE | 13 |
| FI | 13 |
| DYN | 13 |
| GL | 13 |
| BEER | 13 |
| ENGINEER | 13 |
| BID | 13 |
| BABY | 12 |
| LU | 12 |
| FAITH | 12 |
| VG | 12 |
| VILLAS | 12 |
| NYC | 12 |
| FLORIST | 12 |
| il | 12 |
| promo | 12 |
| LIGHTING | 12 |
| FOOTBALL | 12 |
| DIET | 12 |
| BIO | 12 |
| PARODY | 12 |
| HOSTING | 11 |
| id | 11 |
| SHOPPING | 11 |
| JETZT | 11 |
| PARTY | 11 |
| sc | 11 |
| CREDITCARD | 11 |
| PINK | 11 |
| FISH | 11 |
| SCHULE | 11 |
| ARMY | 11 |
| WEBCAM | 10 |
| COUNTRY | 10 |
| LIMO | 10 |
| af | 10 |
| CHRISTMAS | 10 |
| camp | 10 |
| PUB | 10 |
| XXX | 9 |
| JEWELRY | 9 |
| BLACK | 9 |
| CYB | 9 |
| ACTOR | 9 |
| SURGERY | 9 |
| VET | 9 |
| courses | 9 |
| film | 9 |
| PM | 9 |
| DO | 9 |
| EC | 9 |
| RE | 8 |
| MODA | 8 |
| LOAN | 8 |
| HOST | 8 |
| HK | 8 |
| VOYAGE | 8 |
| BUZZ | 8 |
| CHARITY | 8 |
| GOPHER | 8 |
| DENTAL | 8 |
| RIP | 8 |
| ARCHI | 8 |
| SOCCER | 8 |
| SH | 7 |
| LT | 7 |
| cleaning | 7 |
| GLASS | 7 |
| CAB | 7 |
| IST | 7 |
| IS | 7 |
| CRICKET | 7 |
| yt | 7 |
| gripe | 6 |
| graphics | 6 |
| HOCKEY | 6 |
| SX | 6 |
| WF | 6 |
| AUDIO | 6 |
| HORSE | 6 |
| vin | 6 |
| REISEN | 6 |
| KIM | 6 |
| CEO | 5 |
| NAVY | 5 |
| MEMORIAL | 5 |
| BAR | 5 |
| DEMOCRAT | 5 |
| LLC | 5 |
| page | 5 |
| GUITARS | 5 |
| FISHING | 5 |
| COOP | 5 |
| STREAM | 5 |
| SG | 5 |
| dance | 5 |
| irish | 5 |
| TF | 5 |
| TIRES | 5 |
| BINGO | 5 |
| REST | 4 |
| OOO | 4 |
| COOKING | 4 |
| salon | 4 |
| study | 4 |
| MEN | 4 |
| GY | 4 |
| TATTOO | 4 |
| FAIL | 4 |
| AR | 4 |
| ABOGADO | 4 |
| LUXURY | 4 |
| TENNIS | 4 |
| TIENDA | 3 |
| IM | 3 |
| vodka | 3 |
| TL | 3 |
| TC | 3 |
| REPUBLICAN | 3 |
| VOTE | 3 |
| REHAB | 3 |
| MAISON | 3 |
| IMMO | 3 |
| DOWNLOAD | 2 |
| KAUFEN | 2 |
| MOM | 2 |
| observer | 2 |
| KR | 2 |
| mu | 2 |
| theater | 2 |
| IE | 2 |
| JP | 2 |
| FUTBOL | 2 |
| VIAJES | 2 |
| PET | 2 |
| GR | 2 |
| fo | 2 |
| gives | 2 |
| JE | 2 |
| CARS | 2 |
| FLOWERS | 1 |
| FANS | 1 |
| STORAGE | 1 |
| NU | 1 |
| PY | 1 |
| SUCKS | 1 |
| XN--6FRZ82G | 1 |
| AIRFORCE | 1 |
| BOND | 1 |
| LV | 1 |
| MY | 1 |
| mg | 1 |
| VN | 1 |
| SARL | 1 |
| fan | 1 |
| immobilien | 1 |
| BOATS | 1 |
| | 1 |
| BLACKFRIDAY | 1 |
| MD | 1 |
| JUEGOS | 1 |
| RODEO | 1 |
| INC | 1 |
| TICKETS | 1 |
+----------------------------------+----------+

Jurgen Wolf said:
Yes, but they don't have such HUGE volume in these TLDs.
See numbers above...

Are these Epik reg numbers?

carob · Sep 18, 2021

https://techcrunch.com/2021/09/17/epik-website-bug-hacked

TechCrunch has since learned that Epik was warned of a critical security flaw weeks before its breach.

Security researcher Corben Leo contacted Epik’s chief executive Monster over LinkedIn in January about a security vulnerability on the web host’s website. Leo asked if the company had a bug bounty or a way to report the vulnerability. LinkedIn showed Monster had read the message but did not respond.

Leo told TechCrunch that a library used on Epik’s WHOIS page for generating PDF reports of public domain records had a decade-old vulnerability that allowed anyone to remotely run code directly on the internal server without any authentication, such as a company password.

“You could just paste this [line of code] in there and execute any command on their servers,” Leo told TechCrunch.

Start · Sep 18, 2021

^ Are those numbers from the hacked info?

The .com figure is more than twice what domainnamestat.com said.

Also, these are pretty high amounts for low quality TLDs:

| TOP | 72803 |
| XYZ | 53484 |
| LONDON | 28444 |
| CITY | 23040 |
| BOSTON | 17011 |

branding · Sep 18, 2021

Jurgen Wolf said:
Yes, but they don't have such HUGE volume in these TLDs.
See numbers above...

Agreed. Still a big gap. Let's see how this develops.

blockhead · Sep 18, 2021

Gotta wonder if Rob's looking for a new lawyer after doing that video chat. Definitely a lot to unpack there.

Jurgen Wolf · Sep 18, 2021

Beezy said:
Are these Epik reg numbers?

Source of your numbers?

Beezy · Sep 18, 2021

Jurgen Wolf said:
Source of your numbers?

This tweet:

https://twitter.com/x/status/1438995730803294210

(feel free to delete anything mods if you need to).

Jurgen Wolf · Sep 18, 2021

Start said:
^ Are those numbers from the hacked info?

The .com figure is more than twice what domainnamestat.com said.

Also, these are pretty high amounts for low quality TLDs:

| TOP | 72803 |

| XYZ | 53484 |

| LONDON | 28444 |

| CITY | 23040 |

| BOSTON | 17011 |

Numbers of Feb'28?
Forget them.
We are talking about the current September's deletes.

Future Sensors · Sep 18, 2021

I'll tag @Rob Monster

Maybe he can tell more.

branding · Sep 18, 2021

https://twitter.com/x/status/1439020408783654917

Marshall · Sep 18, 2021

Hackers alter Epik’s knowledge base to mock company’s response

Source: https://arstechnica.com/information...of-data-from-epik-web-host-of-gab-and-parler/

namezest · Sep 18, 2021

Any evidence of sub proxy server use? If so then financial stuff is not limited to last 4 digits.
User names passwords addresses emails.....

alert Epik Had A Major Breach

Domains88.comTop Member

78% of human domainers will be replaced by robotsTop Member

WeSellName.comTop Member

Top Member

standforUkraine.comTop Member

Top Member

www.DataCube.comTop Member

WeSellName.comTop Member

standforUkraine.comTop Member

Top Member

standforUkraine.comTop Member

Private InvestorTop Member

Top Member

standforUkraine.comTop Member

Top Member

Top Member

Established Member

Private InvestorTop Member

TruckerTop Member

standforUkraine.comTop Member

Top Member

standforUkraine.comTop Member

78% of human domainers will be replaced by robotsTop Member

Private InvestorTop Member

Top Member

Top Member

Similar threads

We're social

Pinned

Appreciation

Agreement