Dynadot โ€” .com Transfer

alert Epik Had A Major Breach

SpaceshipSpaceship
Watch

DaveX

@GoDaveXTop Member
Impact
52,011
Last edited:
36
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
GoDaddyGoDaddy
5
•••
3
•••
how do feel about Epik? not RM
well for me, I became involved with epik because of their name pros pricing and I fell in love with their detailed analytics and marketplace flexibility. Then I came to know Rob so I like them both and I'm very disappointed in the obvious shortcomings exposed by the hack. I just really hope that we could get behind them to help them bounce back because I really think they're a good force in our industry. Even Google is being destroyed by hackers. And I'm not some blind loyal fool. I'm not happy that there have been attempts to access my venmo and my Best buy accounts lately. I don't know where that's come from as far as I know it could be from Google too
 
2
•••
According to Rob Monster in the Q&A Epik's engineers dindn't have access to this Git repository analysed by Micah Flee.

"Monster, YT1:34:19: Yeah, no absolutely. So Romans 8:28 says that all things work together for the good of those who love God, that are called according to His purpose. I believe all lemons are for lemonade. And I gotta tell you guys, yesterday was the hardest day of my life. Some of you wouldnโ€™t know that, most of you wouldnโ€™t know that, but I was actually at the closest I ever got to being broke. And it was a very hard day because so many things came at me from all different sides. You havenโ€™t really lived, like Iโ€™ve walked through the fire right? For the last three years Iโ€™ve walked through the fire. And you can walk through the fire and it doesnโ€™t burn you, thatโ€™s what iโ€™ve learned. But thereโ€™s like a different level of fire when you have freaking Anonymous light your ass up. Itโ€™s on another level. And I have to tell you that yesterday totally took me to the threshold where Iโ€™m like โ€œwow how much can I take?โ€ So anyway, it all worked out though. It was a hundred thousand dollar critical hack, we plugged that gap, we didnโ€™t lose any domains, thank God and [unintelligible] Yeah, we didnโ€™t lose any domains and we actually gained more domains than we lost yesterday, that was a freaking miracle, but praise God. And then today too, I think weโ€™ve probably gained more domains than we lost. Some of the people in media, they were not kind to us, but I absolutely think youโ€™re right, Greg. It didnโ€™t kill us, itโ€™s gonna make us stronger. The code base that the Russians were totally safeguarding, they wouldnโ€™t give our new engineers access to the git, now we know why: the code sucked. And ironically now we have them all
(...)
Monster, YT0:35:56: [reading chat. Full comment from โ€œJPโ€: โ€œIโ€™m upset at the security incident at Epik, but my anger isnโ€™t towards Rob specifically, heโ€™s just human.โ€] โ€œupset at the security incident at Epik but my anger isnโ€™t towards Robโ€ฆโ€ Yeah no, thank you, I appreciate that, JP. Yeah weโ€ฆ we did not nail that one. I think quite candidly that was some serious weak code, like hard-coding API keysโ€ฆ just weak sauce. And in reality, like I said earlier in the call, our top engineers mostly hadnโ€™t seen that code because it was kind of blackboxed, behind a firewall, separate git repository, and not part of the Epik git. And that might sound surprisingโ€ฆ [pauses to blow nose] sorry, I have a coldโ€ฆ considering that weโ€™re like a registrar, but thatโ€™s basically because of the history of how that company became part of Epik"
 
Last edited:
4
•••
According to Rob Monster in the Q&A Epik's engineers dindn't have acess to this Git repository analysed by Micah Flee.

"Monster, YT1:34:19: Yeah, no absolutely. So Romans 8:28 says that all things work together for the good of those who love God, that are called according to His purpose. I believe all lemons are for lemonade. And I gotta tell you guys, yesterday was the hardest day of my life. Some of you wouldnโ€™t know that, most of you wouldnโ€™t know that, but I was actually at the closest I ever got to being broke. And it was a very hard day because so many things came at me from all different sides. You havenโ€™t really lived, like Iโ€™ve walked through the fire right? For the last three years Iโ€™ve walked through the fire. And you can walk through the fire and it doesnโ€™t burn you, thatโ€™s what iโ€™ve learned. But thereโ€™s like a different level of fire when you have freaking Anonymous light your ass up. Itโ€™s on another level. And I have to tell you that yesterday totally took me to the threshold where Iโ€™m like โ€œwow how much can I take?โ€ So anyway, it all worked out though. It was a hundred thousand dollar critical hack, we plugged that gap, we didnโ€™t lose any domains, thank God and [unintelligible] Yeah, we didnโ€™t lose any domains and we actually gained more domains than we lost yesterday, that was a freaking miracle, but praise God. And then today too, I think weโ€™ve probably gained more domains than we lost. Some of the people in media, they were not kind to us, but I absolutely think youโ€™re right, Greg. It didnโ€™t kill us, itโ€™s gonna make us stronger. The code base that the Russians were totally safeguarding, they wouldnโ€™t give our new engineers access to the git, now we know why: the code sucked. And ironically now we have them all
(...)
Monster, YT0:35:56: [reading chat. Full comment from โ€œJPโ€: โ€œIโ€™m upset at the security incident at Epik, but my anger isnโ€™t towards Rob specifically, heโ€™s just human.โ€] โ€œupset at the security incident at Epik but my anger isnโ€™t towards Robโ€ฆโ€ Yeah no, thank you, I appreciate that, JP. Yeah weโ€ฆ we did not nail that one. I think quite candidly that was some serious weak code, like hard-coding API keysโ€ฆ just weak sauce. And in reality, like I said earlier in the call, our top engineers mostly hadnโ€™t seen that code because it was kind of blackboxed, behind a firewall, separate git repository, and not part of the Epik git. And that might sound surprisingโ€ฆ [pauses to blow nose]"

Good point. I didn't think about that. Are you sure there are Epik devs in that repo?
 
0
•••
Someone needs to convince RM right now that he shouldn't show off those underground EMF/EMP-shielded bunkers on Twitter anymore, now that all the data has come out through another route. This, yes this, clearly shows that security is not yet in his DNA. And while you might think this is good marketing, in the end it isn't.

A better security starts today.

upload_2021-10-20_2-38-57.png
 
Last edited:
2
•••
well for me, I became involved with epik because of their name pros pricing and I fell in love with their detailed analytics and marketplace flexibility. Then I came to know Rob so I like them both and I'm very disappointed in the obvious shortcomings exposed by the hack. I just really hope that we could get behind them to help them bounce back because I really think they're a good force in our industry. Even Google is being destroyed by hackers. And I'm not some blind loyal fool. I'm not happy that there have been attempts to access my venmo and my Best buy accounts lately. I don't know where that's come from as far as I know it could be from Google too

You really should read through this thread, at least last 75 pages or so. Rob has told many lies about his products and services and when confronted, even years ago, calls people liars and threatens to sue them for slander. He has done the same post hack, threatening to sue pretty much everyone in the thread and the owners of NP and me several times, of course. As he has for years. It is what grifter criminals do.
 
Last edited:
0
•••
Could some of you domain and registrar experts help me calculate Epik revenues so I can figure out just how ridiculous this valuation is. For example:
I don't deal with valuations but Epik is by no means a small registrar. As of the latest ICANN stats (June 2021), it has 651,046 gTLD domain names under management. Of these, 496,702 are .COM registrations. This is a good thing. The majority of its registrations are legacy gTLD registrations with new gTLDs accounting for approximately 11.3% with .XYZ registrations being the largest of its new gTLD footprint.

When looking at a registrar's domain name footprint, the blue chip TLDs are the big ccTLDs, .COM and .ORG. The last two are considered blue chip because they renew well. Some of the new gTLDs (the geographical ones) have very high first renewal rates but the discounted new gTLDs have much lower renewal rates. From a stability point of view, having a high percentage (50% or more) of new gTLDs is generally a bad thing so Epik scores quite well in this respect.

Renewals are the lifeblood of registrars and registries. They are a more important indicator of a registrar's financial health than new registrations. The complete first renewal rates are only visible after the domain names go through their first renewal cycle so many of the new registrations from the last two years are going through their first renewal or have yet to go through their first renewal. (The 2020 registrations won't renew until 2021, the 2021 registrations until 2022 etc.) I crunched the multi-year renewal rates for gTLD registrar/hoster operators from 2021 to 2000 last month based on currently hosted domain names.

1) Number of domains hosted at epik and approximate profit per domain.
With a registrar that uses fixed registration fees, this would be easy. Epik uses discounting as a marketing tool so there is a range of pricing. It might be possible to estimate the overall profit using leaked data but it is not going to be reliable without knowing which registry discount offers Epik used in its marketing. The registries regularly run promotional offers for their registrars.

2) Number of web hosting accounts and approximate revenues/profit.
You have to know the hosting tiers (shared/dedicated etc), the price per account and the costs associated with setting up and maintaining the account. With retail registrars/hosters, many clients will host outside the registrar's infrastructure. This also means that they may not be hosted on the registrar's nameservers. (They may be using Cloudflare or a DIY web builder service.)

3) Break down of any other Epik products and services.
Again, the leaked data may provide some indications but it would require the costs for these services or products to be known and the number of accounts and duration to be known.

The media coverage of the Epik databreach has been almost completely focused on the political aspect. The journalists like simple explanations that don't require them to work hard and the political aspect is about the most simplistic angle on it. It is almost completely irrelevant to the rest of the world as it is local US politics.

The sheer scale of the compromise has actually worked in Epik's favour as even researchers who understand vulnerabilities and software struggle to deal with the hugh amount of data that often relates to a business outside their area of expertise. Even with the leaked data, calulating the precise valuation, turnover and profits of Epik would be difficult.

The registrar business is incredibly territorial with the top registrars in country level markets having around 80% or so of the domain names registered in that country. The only way into most of those markets is for an operator to buy the top registrars in the market. This is what Godaddy and Newfold Digital, UI and others have been doing for the last ten years or so. I publish an Excel based transactions (new/deleted/transferred) report each month that groups the main gTLDs by registrar/hoster operators. Some of the larger registrar/hoster operators have hundreds of hosting brands.

The hosting characteristics of Epik are very different to those of a typical retail registrar/hoster. This is because much of Epik's business is focused on its sales and domainer market. Just to put that market in some kind of perspective, approximately 9.5% of .COM is on sale. That's around 15 million domain names. While some of the domain names on Epik's sales platforms may be registered via Epik, others are not. This is because many portfolio operators tend to be very loyal to their main registrar but agnostic to where they post those domain names for sale. (Epik, Dan, Afternic, Sedo etc.) This is why the registrations on sales platforms are a bit of a nightmare to break down by registrar. Epik is not an accredited registrar in some ccTLDs but it has domain names from those ccTLDs on its sales platform. These may be registrants parking the domain names on Epik's sales platform or domain names registered via Epik but outsourced to a "registrations as a service" registrar which is accredited in these ccTLDs.

Sales platforms are also a bit of a problem to evaluate because unless they are charging a fee to list, they only make a profit when the domain name is sold via the platform. As a category, these domain names have different renewal trends to ordinary retail registrations. There are premium registrations that renew well (near 100%). There are almost premiums which can renew well. Then there are the highly optimistic registrations (often registered at a discount) which tend to be one year wonders.

Working out valuations for registrars (even those that simply offer registrations rather than hosting) without the registrar's financial documents and accounts is a complex process even with the current data because it also needs the historical data, the TLD market data, and enough information (revenue per domain, costs etc) to make reliable projections.

Regards...jmcc
 
13
•••
This is an interesting development that should not be overlooked.

"Monster, YT1:24:27: Yes. bugs [at] epik.com. Yes we do. In fact, funny you should ask. We have a very talented young developer in Belgium. His name is Guy. Like โ€œGuyโ€ but Belgians pronounce it โ€œgeeโ€, French. And Guy is developing a bug submission platform. We also have started a company that you might have come across called Cybermarks, and it is a cybersecurity boutique. You might say โ€œwow guys, you guys are such clowns, why would you start a cybersecurity company?โ€ Well, yeah. So the idea isโ€ฆ what can we do? So we hired a bunch of South Africans, like an elite team of cybersecurity people. They only were at it for a couple of months in terms of setting up their operation. They were working for a high-level firm. And theyโ€™re Kingdom guys, so they work for the Kingdom. Theyโ€™re Christians. And the company that was employing them wanted to do some stuff that they didnโ€™t feel comfortable with, and so they quit as a cohort, four of them, actually eight of them, but four elite cybersecurity guys, and we hired them. So that was about a month and a half ago. So Cybermarks.com is a division thatโ€™s being incubated by Epik. But I think weโ€™re gonna hire quite a few heavy-duty cybersecurity guys, so if youโ€™re on the side of good, you want to basically turn from the dark side or whatever. If youโ€™re white hat and you want to be a force for good, Cybermarks would be a fantastic organization to be a part of I would say. Weโ€™re a pretty cool company, guys. I know that we look like clowns to some of you when you look at the cover, but check out epik.com/labs."

https://blog.mollywhite.net/monster-qa/
 
Last edited:
1
•••
Yep, you can file this under fallout from the Epik data breach, and the connections people have already made. This data breach likely played a major role.

I am sure this information is going to continue to be very interesting to the FBI, DOJ and other investigative agencies.

Jan. 6 committee subpoenas 'Stop the Steal' rally organizer Ali Alexander

https://www.politico.com/news/2021/...bpoenas-stop-the-steal-rally-organizer-515608
Anonymous are the good guys, and you know it
 
0
•••
Someone on the replies of that Micah Flee tweet about Epik's Gitlab posted an archived page of We Can Develop IT from March 2021 that shows Rob Monster as their "partner" alongside Kenn Palm and Vitaliy Opryshko as the other partners. This is very interesting because if you go to the We Can Develop IT webpage now Rob Monster is no longer there.
 
5
•••
3
•••
Someone on the replies of that Micah Flee tweet about Epik's Gitlab posted an archived page of We Can Develop IT from March 2021 that shows Rob Monster as their "partner" alongside Kenn Palm and Vitaliy Opryshko as the other partners. This is very interesting because if you go to the We Can Develop IT webpage now Rob Monster is no longer there.

Apparently this friendship was not so close that the keys to the codebase were entrusted to him.
 
1
•••
0
•••
Apparently this friendship was not so close that the keys to the codebase were entrusted to him.
Hackers and Russians have had more access to the entire company than Rob. Totally normal.
 
7
•••
0
•••
Hackers and Russians have had more access to the entire company than Rob. Totally normal.

Based on what Iโ€™ve seen from infra built for and by the right this is p typical and is, in fact, totally normal.
 
2
•••
Hackers and Russians have had more access to the entire company than Rob. Totally normal.

And - knowing now that this was in fact a Kenn Palm's Intrust operation not a Rob Monster's Epik operation - also spammers and dropcatch scammers.
 
0
•••
Whoโ€™s Kenn Palm? Sorry. I just got here.
 
2
•••
Based on what Iโ€™ve seen from infra built for and by the right this is p typical and is, in fact, totally normal.
Gosh, imagine that. Wonder why that is.
 
0
•••
Dynadot โ€” .com TransferDynadot โ€” .com Transfer
Appraise.net
Spaceship
Domain Recover
CatchDoms
DomainEasy โ€” Live Options
  • The sidebar remains visible by scrolling at a speed relative to the pageโ€™s height.
Back