Dynadot

Hijacked Domain cwr.com

NameSilo
Watch

Daehler Ralph

Established Member
Impact
96
I have a very important message for all domainers. I have bought 1 month ago the domain cwr.com (Registrar Networksolutions) over Sedo for USD 19950 and the transfer happened successful after a few problems with an invalid Authorization Code for a transfer to my GoDaddy account, I decided to takeover the domain to my account by Networksolutions. But yesterday Network Solution has transferred the domain back to the old owner without any information. I have opened a ticket by Network Solution and they explained me that the domain was hijacked and sold later and also back transferred to the old owner.
Sedo hasn't checked well the whois-Informations with the seller contact information, which was somebody from Mexico.
Now I have lost my money and for Sedo is the task closed when the domain is transferred.
A warning on all domaines that can happen to everybody which buy a domain on a non-registrar-platform like Sedo.
 
17
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
It's probably not hijacked, you probably bought stolen property.

Due prudence just like you do when you buy a house is always indicated. One does a title search and a domain should be researched in a similar fashion before large sums of money changes hands.

If you look carefully there were probably clues that the domain was stolen or similar.

Not saying I don't feel your pain but man you have to be careful buying domains nowadays. If it sounds to good to be true then it probably is.
Completely disagree.

The expectation is that the seller/brokerage has vetted the listing. In this case it’s Sedo, a seller of millions in domains.

I’d sue them immediately for transfer of stolen goods. They are supposed to ensure that what they sell is legitimate. They are also assuming that transfer of goods is final, upon payment from buyer.
 
13
•••
Usually people are trying to get out of NetSol, not transfer back in.
 
11
•••
Alejandro Garcia Briseno
Ave 65 esquina Calle M 10 L 1

77712 Playa del Carmen
Mexico
 
5
•••
Sorry if I missed it but does anybody know how AGB is hijacking domains? I was going to buy a domain recently. I offered $100 for it, the guy said $500, again I said $100 he said $300 or go away so I went away. The next day he came back and said he accepts $100 for a quick deal. He asked me to create a Netsol account for push and I said I wanted an auth code. He said he can't as the domain is under a 60 day-lock and that if I don't want a push then no deal.

I told him that I would rather not have the domain if my only option is NetSol. That is how low I rate their service and their security. I would not even create an account there in case my information is stolen. Not saying it will be but I have been put-off due to numerous incidents.

Just my opinion after reading many incidents like the one in this thread.
 
Last edited:
5
•••
4
•••
PSA:

Do not do any business with anyone named Alejandro Garcia or Paty Mar from Mexico

Might also use additional aliases
 
4
•••
4
•••
Completely disagree.

The expectation is that the seller/brokerage has vetted the listing. In this case it’s Sedo, a seller of millions in domains.

I’d sue them immediately for transfer of stolen goods. They are supposed to ensure that what they sell is legitimate. They are also assuming that transfer of goods is final, upon payment from buyer.

As much as I would love to agree with you Keith it just does not happen, things slip through.

1. We know this has happened before on Sedo, we know stolen domains have slipped through.

2. Somewhere in their T.O.S. they will protect their ASSets

3. Suing them could easily cost more than what you paid on the domain in the first place.

The easiest course of action is to do a little homework after you win a domain and before you hand them the money.
 
4
•••
That's why i always request transfer away to my own registrar on any escrow transaction.
Netsol again won title as worst/expensive/unsecure registrar out there.

As Sedo not check deeply sellers it must refund funds to buyer, that's not a usual situation and they can afford for themselves to refund buyer and try to find fake seller as they have all private data of him (bank accounts etc).
 
4
•••
Completely disagree.

The expectation is that the seller/brokerage has vetted the listing. In this case it’s Sedo, a seller of millions in domains.

I’d sue them immediately for transfer of stolen goods. They are supposed to ensure that what they sell is legitimate. They are also assuming that transfer of goods is final, upon payment from buyer.

It's funny after the NWX.com situation, I emailed Sedo and am contacting every marketplace because I wanted to do an article on the very topic,

If I buy a domain name, pay you, you have the seller transfer me the name, and later on either the registry, registrar or some other governing body says the name was stolen and takes it back, what do you for me? Do you refund me since you dealt in stolen merchandise?

I saw CWR.com hit Sedo, the seller was shown to be in Mexico and when looking at whois history it did not make sense, the same happened with NWX.com.
 
4
•••
Also, leave this story as a review at SEDO's facebook: https://www.facebook.com/sedo/
And at TrustPilot. And you might even contact someone from the media. This could make an interesting and useful article. And the publicity should bug SEDO. Maybe they'll want to compensate at least some of your loss to keep their good name in public. And like someone mentioned, talk to several attorneys. SEDO was selling a stolen merchandise, they should not be able to get away with that so easily and continue doing that.

Just don't leave it like that.
 
Last edited:
4
•••
Definition of "Due Diligence":

Reasonable steps taken by a person in order to satisfy a legal requirement, especially in buying or selling something

Definition of "Due Diligence" in the domain industry:

An excuse to not pay or refund, due to the ability to shift blame.
 
4
•••
Sedo charges massive 15% commission, I thing they must include in their sales agreement full refund in cases when domain was stolen and returned to previous owner. It must be their problem to return back processed funds and buyer must be 100% covered by refund.
 
4
•••
But domainers are already complaining about escrow.com procedures, that are less intrusive.

Buyers need to do due diligence. Sedo is not the seller, and not even a real broker most of the time. Just a third party assisting with payment and technicalities. They cover their a$$, not yours.
Nobody is going to hold you by the hand. But if for some reason that is your expectation, review the terms of service first to double-check what is covered and what isn't.
Sometimes I am surprised that people are casually spending so much money in confidence on the Internet.

The other thing that crossed my mind is the prohibition from contacting the other party directly that is in place by the auction houses. If they won't let buyer contact and confirm who the seller is, why do they take commission? Unless you brought your buyer/seller to the platform, you can only rely on the auction house to check who the other party is. Why on earth should they walk free - commission in hand - while the buyer is left out of money and domain? Seriously, I doubt that their silly terms and conditions would wash with me, if I happened to be in the victims' shoes. Not that I would be buying a 20k name anyway. πŸ˜‚πŸ˜‚πŸ˜‚ I would be flying out to wherever that name is before I hand over that kind of money! We all know someone somewhere who knows somebody somewhere, in the event that we can't really physically be there. Meeting in a public place would mean the police would have a very good who the domain thief is!
 
Last edited:
4
•••
Completely disagree.

The expectation is that the seller/brokerage has vetted the listing. In this case it’s Sedo, a seller of millions in domains.

I’d sue them immediately for transfer of stolen goods. They are supposed to ensure that what they sell is legitimate. They are also assuming that transfer of goods is final, upon payment from buyer.

This is the official reply from Sedo as I posted in the thread I was contacting them, because I want the official position of marketplaces for an article, I remember seeing CWR.com and NWX.com thinking of buying, once I did the homework I knew they were stolen.

So here is the reply from SEDO, I bolded the part where they say we ain't paying you back.

Sedo takes domain theft very seriously and is committed to protecting domain ownership rights. We encourage anyone who feels they have lost a domain due to fraud to report the theft in accordance with our stolen domain policy (https://sedo.com/us/about-us/policies/stolen-domain-policy/

Stolen Domain Policy - Sedo
Stolen Domain Policy . Along with protecting intellectual property rights, Sedo is committed to protecting domain ownership rights, whether those of our users, third parties, or our own.
sedo.com
) so that Sedo’s Security & Compliance team can review the domain and block it from our services, as appropriate, to prevent a sale on our marketplace in the first place.

Unfortunately, as with anything sold on a secondary market, buyers bear a degree of risk that a domain was once stolen or that the seller has otherwise violated the terms of the purchase and sale agreement. While Sedo employs strict marketplace terms and conditions, between WHOIS privacy and disparate registry policies, it is impossible for Sedo or anyone to guarantee that a domain has never been stolen or remains subject to any other kind of legal dispute. The domain’s registrar, ICANN, or a court of law are the venues to resolve any dispute and Sedo gives our full cooperation once a dispute has been initiated.


We empathize with our buyer’s desire to eliminate that risk entirely but we ask buyers to perform their due diligence research prior to agreeing to a purchase (especially to ensure that their purchase or intended use does not violate a third party’s trademark which is a key element in UDRP proceedings) and to review their registrar policies on how they would handle a claim of domain theft.


Sedo does help our buyers minimize risk by requiring sellers to provide a legally binding representation and warranty that they have the authority to sell the name. Once a purchase and sale has been completed, however, Sedo cannot return the funds paid to a seller as we are not an appropriate party to arbitrate a dispute. If a domain is later taken away from a buyer because of the seller’s violation of the purchase and sale agreement Sedo advises the buyer to seek legal counsel to pursue the seller for breach of contract and will support the buyer by providing a documentation history regarding the transaction. This allows a buyer who ends up losing the domain because of theft to pursue the seller for a refund/damages.
 
4
•••
I have received a Response from network solutions with make no sense and with no meaning. The Whois History is agreed. Fact is that the domain was stolen by the Glenn Smith Account (Ninja Domain Email) on the 17. October 2018 from the origin owner.
For all:
NEVER BUY DOMAINS WITH NETWORK SOLUTIONS AS REGISTRAR!!!

I want to say sorry here to Glenn Smith from @ninjadomain. I am sure that you are not involved in this domain hijack. This will happen again that this Alejandro Garcia Briseno will hack other domains and nobody can do anything.

I am very disappointed from platform like Sedo that they don't give some money back. I am or was a very good customer of them. I have sold this year nfc.com and the year before deh.com jur.com and hse.com on Sedo platform and they don't want to pay me a part of the money back. Poor company
 
Last edited:
4
•••
It's pretty clear Sedo don't care a lot about security - Sedo STILL do not have 2FA, even though that has been raised on here before. And the CMS they use for the site, Typo3, already has extensions for 2FA that they could just switch on - Google Authenticator for example: https://extensions.typo3.org/extension/cf_google_authenticator/

So at Sedo, like at Afternic, if someone gets into a Sedo account they can change the sale price of a domain that has MLS (or on Afternic, FastTransfer) enabled, buy it at that new superlow price, and the domain will go right out of the owner's registrar account before they even know it. Why would any company leave the door open like that?
 
4
•••
3
•••
The address


This names and adresses are guaranteed faked. But why happens this with so many netsol accounts?
Yep

According to @Acroplex:

"There's about 125 more linked to that account; I only shared the LLL kind after verifying odd changes in ownership. They all have in common previous yahoo/AOL/Comcast etc. accounts. Others are linked to domains that dropped, and re-registered - a common domain hijacking technique."

Very sorry this happened to you and hope you get this resolved
 
3
•••
There might be a level where contacting previous victims. Collecting information and submitting to cyber crimes units I could result in an arrest. Would at least prevent future stress for many others.
 
3
•••
If each domain could have a visible whois with all owners history, dates and name servers, it could be more difficult to scam..
I mean the buyer sees the domain had owner or name server changes a short time ago and contact the ex owner for confirmation.

Or I am wrong?
 
3
•••
Thanks a lot for your good help and advises to all.
I have paid the amount by money transfer first to sedo and they have transfered after the transfer to the seller.
 
Last edited:
3
•••
WHOIS Registrant Name History of CWR.com according to DomainIQ
  • December 2014 -- RJR Enterprises Chuck Risley
  • April 2015 -- Perfect Privacy, LLC [possibly updated 2015-03-12T19:03:30Z]
  • October 17th, 2018 -- Glenn Smith [possibly updated 2018-10-07T17:26:04Z] *tagging @ninjadomain for comment*
  • October 18th, 2018 -- Alejandro Garcia Briseno* [possibly updated 2018-10-18T04:19:32Z] [email protected]
  • October 25th, 2018 -- Perfect Privacy [possibly updated 2018-10-24T18:04:20Z]
  • December 5th, 2018 -- Protected, WhoisGuard [p. updated 2018-11-03T07:30:15Z] [email protected]**
  • December 19th, 2018 -- Daehler, R (assuming @Daehler Ralph) [p. updated 2018-12-14T11:47:03Z]
  • January 4th, 2019 -- RJR Enterprises Chuck Risley [p. updated 2019-01-04T17:21:13Z]
**Registrant Name shows Protected WHOIS Guard, yet it reveals WHOIS Info. The address listed appears to be a UPS store.
Show attachment 106223

Hosting History
Show attachment 106222

It appears Alejandro Garcia Briseno
(AGB) may have sold other 3L.com on Sedo.

Given the allegations behind other domains sold by AGB, there is a possibility that other domains sold by AGB may have also been stolen, such as GHE.com

The previous owner of GHE.com was using a Mindspring.com email address that had been pwned multiple times.

1546714227181.jpg


I will work on contacting the previous owner of GHE.com to confirm the status.

If anyone is in contact with Nat Cohen of Telepathy.com, they might want to reach out to him to make him aware of this red flag.
 
Last edited:
3
•••
Seems you could run an easy scam.

1. Put a valuable domain in its own account with a newly created email.
2. List domain at Sedo
3. Sell domain and get paid under scam whois and overseas bank
4. Use real info and tell registrar the domain was stolen.

Now you got paid from Sedo and the registrar returns domain from the unsuspecting buyer at Sedo.
 
3
•••
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back