alert Epik Had A Major Breach

[DaveX]

Just read this. Looks like Epik may have been hacked and sensitive data compromised...

Read here:
https://domainnamewire.com/2021/09/14/hackers-claim-significant-epik-breach/

Thought I would share this.

 

[Future Sensors]

"Our engineers believe the hack is of an aged remote backup, not of Epik's core production."

Do these engineers still believe this?

Was all data indeed from a backup, including the many historical .ovpn files?

 

[MadAboutDomains]

Probably these .ovpn files and more.

I saw the Twitter bio... I clicked away . Has all you need to know.

 

[Kai W.]

I left EPIK and DYNADOT at the beginning of 2021 because of concerns about data security and personal privacy.
EPIK's login structure is so large that it's unusual for the same account to be able to log into multiple projects. They are just a registrar now, but it seems that their desire is to create a full ecological platform. When your aspirations are too big, something is bound to go wrong.

 

[marijuanadomain]

Because of Epik-I am suffering from Domain PTSD, lack or no sex drive, loss of appetite ,loss of hair, loss of enjoyment in life, pain and suffering.....sleepless nites and excruciating frighten nightmares that my domains gone vanish....and worst still in this unprecedented ( I bet you have heard this word unpreceded billions of times already) times, it has excruciated my pain....

lawsuit $$$$ for my domain therapy....

 

[Mr. Deleted]

I am suffering from ... no sex

I wouldn't admit to that.

 

[Beezy]

WOW.

https://twitter.com/x/status/1439773762275004417

https://twitter.com/x/status/1439773931938856960

https://twitter.com/x/status/1439779826429308928

 

[Beezy]

The thing that everyone accuses every registrar of doing, logging your searches, Epik WAS PROBABLY DOING THAT?

We'll see.

No conspiracy theory.

 

[tonyk2000]

I'm starting to think that Epik should better sell the business asap. With all domains/accounts migrated to another registrar. Bulk domain transfer in such a case would be free (if approved by ICANN I think? needs to be rechecked...) Since Epik was reported to Visa/Mastercard, as some twitter posts suggest, it is far from obvious that their merchant accounts would not be terminated by credit card systems. But, a registrar cannot run accepting crypto and wires only, CC is a must. The problem here is that no registrar would want to receive a number of "toxic" domains (or customers) Epik currently has...

 

[MasterOfMyDomains]

Have Joey's twitter accounts been closed now? Cant find the ones in your screenshot, one says suspended.
https://twitter.com/yourdaddyjoey

https://twitter.com/x/status/1439730338993999874

 

[kam]

WOW.

https://twitter.com/x/status/1439773762275004417

https://twitter.com/x/status/1439773931938856960

https://twitter.com/x/status/1439779826429308928

It's NOT TRUE. Some people just make up a story to make the situation worse.
According to the Database Schema
https://pastebin.com/1bLEm78G

The domain_history table was just a list of data contains the operation history of domains. Including the history of unlock domain, change nameserver, set url forwarding etc.

(Above Pastebin link is refer to this post: https://www.namepros.com/posts/8400013/)

 

[carob]

I have never heard about Gab, Parler etc.
I see them firstly in this thread...
@Rob Monster , why their problems are mine now?

Parler featured on NP before:

https://www.namepros.com/threads/wh...and-rob-monster.1128748/page-119#post-8115083

https://www.epik.com/blog/parlerstatement

Gab.com was booted by Godaddy and went to Epik, bringing controversy with it:

https://domainnamewire.com/2018/11/05/rob-monster-explains-why-he-accepted-gab-com-domain-at-epik/

https://www.namepros.com/threads/so...y-24-hours-to-transfer-or-suspension.1107245/

 

[.X.]

Parler featured on NP before:

https://www.namepros.com/threads/wh...and-rob-monster.1128748/page-119#post-8115083

https://www.epik.com/blog/parlerstatement

Gab.com was booted by Godaddy and went to Epik, bringing controversy with it:

https://domainnamewire.com/2018/11/05/rob-monster-explains-why-he-accepted-gab-com-domain-at-epik/

https://www.namepros.com/threads/so...y-24-hours-to-transfer-or-suspension.1107245/

My Question is.... As most of these sites left Godaddy for Epik .... where there other hosts that they could have used aside from epik ?? The controversies seem to revolve around Godaddy giving the boot to these sites

 

[Samer]

Twitter verified ☑

https://twitter.com/x/status/1439705083483205640

twitter bio says “Founder of # Anonymous (yes that one)”

This is why you’re my favorite # websleuth.
RIGHT to the source! Didnt know that easy.

Probably a mediocre fallguy who doesnt know the meaning of Anonymous. enjoy “fodder”

Samer

 

[tonyk2000]

I am considering downloading this DB. I'd like to know what exactly is there about my domains, such as whois records of non-epik domains... or something I might purchase @ namejet many years ago ...

The issue I am experiencing is the following: Rob disclosed in video that there are now curses on this dataset.

Ref:

https://en.wikipedia.org/wiki/Pulsa_diNura

(just an example)

I'm just a domainer. Not an exorcist.

Any recommendations (or references to external sources) to remain safe?

 

[carob]

I'm just a domainer. Not an exorcist.

Any recommendations (or references to external sources) to remain safe?

https://dnprotect.com/

Legal
If your domain name is subject to legal action, trademark claim, or UDRP dispute, you’re covered. We’ll defend your domain name using our legal resources.


Theft
If there are any issues related to the domain name ownership, you’re covered under DNProtect’s domain name ownership coverage.


Clerical Errors
Similar to overdraft protection from your bank, if you forget to renew your domain name, we’ll make sure the domain does not go offline.

That may or may not cover curses and data breaches - you'd need to ask the company providing the service, namely Epik.

 

[dirk]

Just so you know:

https://twitter.com/x/status/1439824858376859648

 

[karmaco]

I think it's better with no approve button right now. With domains at risk in case someone somehow gets a valid auth code for a domain (and maybe is able to login somehow, to unlock a domain too), it allows more time to notice an unauthorized transfer out.

But if you ask support, are they able to expedite it so the transfer goes through?

I pressed them and they auto approved. I disagree its good to wait a week. I have 2Factor on and zero reason to not approve my request. One of the names I sold. Not telling my customer to wait a week

 

[Future Sensors]

When so many different data sets were managed and preserved in this way, it may have been a design choice. The other option is ignorance, I don't know which one is better.

 

[eternaldomains]

Just reporting that my 1st batch of Masterbucks withdrawal (100) is successful. As for amount, for this round it's lower, probably due to crypto dipping yesterday, so I won't complain.

 

[Windoms]

E: 15,003,961
Check if your email/phone: Haveibeenpwned.com

Regards

Damn.
My safe and cherished email that I dont even use for paypal or NPs is now compromised, on 1 single website: epik.