I bought Little.com and stolen!

[SungChan]

Hello,




I bought Little.com domain name and the seller pushed the domain name into my NetworkSolutions account.

And yesterday I tried to access my Networksolutions account but is has denied to access.

the password is changed.




And the whois information has changed.




My domain name is stolen.




Please help me. please please....




That is all I have... My whole money...







Please help me...







Me and the seller's e-mails as follow;





capsule <[email protected]>


2월 13일








jlittle에게
























Hello.




Can I buy your domain name?




Thanks










내 삼성 디바이스에서 보냈습니다















답장

전달




















John Little
Hello $49k. Regards John Sent: Saturday, February 13, 2016 at 7:17 AM From: c...

3월 6일 (10일 전)




Hello $49k. Regards John Sent: Saturday, February 13, 2016 at 7:17 AM From: c...













John Little 3월 6일 (10일 전)



로드 중...













John Little


3월 6일 (10일 전)








나에게

















영어







한국어





메일 번역

영어 번역 안함

















Hello




$49k.




Regards

John











Sent: Saturday, February 13, 2016 at 7:17 AM
From: capsule <[email protected]>
To: [email protected]
Subject: Little.com









Hello.




Can I buy your domain name?




Thanks










내 삼성 디바이스에서 보냈습니다
























답장

전달























Capsule
Thanks for your answer. Can you accept USD 15k? Thanks. 2016년 3월 6일 일요일, John...

3월 6일 (10일 전)




Thanks for your answer. Can you accept USD 15k? Thanks. 2016년 3월 6일 일요일, John...













Capsule 3월 6일 (10일 전)



로드 중...













Capsule <[email protected]>


3월 6일 (10일 전)








John에게






















Thanks for your answer.




Can you accept USD 15k?




Thanks.





2016년 3월 6일 일요일, John Little<[email protected]>님이 작성한 메시지:










Hello




$49k.




Regards

John











Sent: Saturday, February 13, 2016 at 7:17 AM
From: capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com









Thanks for your answer.




Can you accept USD 15k?




Thanks.





2016년 3월 6일 일요일, John Little<[email protected]>님이 작성한 메시지:


Hello




Sorry, it's too cheap for one-word dot com.




I can slightly decrease the price for a quick deal.




Regards

John











Sent: Saturday, March 05, 2016 at 6:33 PM
From: Capsule <[email protected]>님이 작성한 메시지:


Hello




Sorry, it's too cheap for one-word dot com.




I can slightly decrease the price for a quick deal.




Regards

John











Sent: Saturday, March 05, 2016 at 6:33 PM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com


Hello Sir,




Please reply me.




I'm a motivated buyer .




Thank you.























답장

전달





















Capsule
Ok deal. How would you like to proceed? Thanks. 2016년 3월 7일 월요일, John Little<...

3월 7일 (9일 전)




Ok deal. How would you like to proceed? Thanks. 2016년 3월 7일 월요일, John Little<...













Capsule 3월 7일 (9일 전)



로드 중...













Capsule <[email protected]>


3월 7일 (9일 전)








John에게





















Ok deal.



How would you like to proceed?




Thanks.



2016년 3월 7일 월요일, John Little<[email protected]>님이 작성한 메시지:










Hello




Let's do a deal at $33,000.




If it's agreeable to you, we can complete the deal next week.




Regards

John











Sent: Sunday, March 06, 2016 at 5:52 PM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM



From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com

Ok deal.



How would you like to proceed?




Thanks.



2016년 3월 7일 월요일, John Little<[email protected]>님이 작성한 메시지:


Hello




The first option is an internal transfer between Network Solutions account. It's free and almost immediately.




https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:









Ok I'll take the first option.




Thank you.





2016년 3월 7일 월요일, John Little<https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:

Do you have any other one word. Com domains?




Thanks.





2016년 3월 7일 월요일, Capsule<https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM








From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com








Ok I'll take the first option.




Thank you.





2016년 3월 7일 월요일, John Little<https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:








Hello

Ok, that's good. Have you sent the payment to escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:









Payment has been sent.

International wire-transfer takes 1-3 business days.

Thanks.





2016년 3월 8일 화요일, John Little<escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:

I'm pretty sure that the funds will arrive in the Escrow.com.




Once the Escrow.com approves my payment, please push the domain name.




My Networksolutions.com Username is

sungchan




Thanks.





2016년 3월 8일 화요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>:

I'm pretty sure that the funds will arrive in the Escrow.com within today.








Once the Escrow.com approves my payment, please push the domain name.







My Networksolutions.com Username is




sungchan







Thanks.









2016년 3월 8일 화요일, Capsule<[email protected]>님이 작성한 메시지:

I'm pretty sure that the funds will arrive in the Escrow.com.




Once the Escrow.com approves my payment, please push the domain name.




My Networksolutions.com Username is

sungchan




Thanks.





2016년 3월 8일 화요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<[email protected]>님이 작성한 메시지:









OK! the Escrow.com approves my payment.




Please push the domain name to my Networksolutions account.




Username is



sungchan




And account number is 35107056




Thank you!







2016-03-08 19:52 GMT+09:00 Capsule <escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com








I just initiated the domain's transfer within networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:










Ok.




I wait for a transfer request from Network Solutions. Usually it takes a few hours.




Regards

John











Sent: Tuesday, March 08, 2016 at 6:47 PM
From: Capsule <networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <escrow.com is needed to complete the deal.




Regards

John








Sent: Wednesday, March 09, 2016 at 6:31 AM








From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com








Hello.




Please check your email regarding the transfer.




Thanks.





2016년 3월 9일 수요일, John Little<networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:


Done.




Your confirmation at escrow.com is needed to complete the deal.




Regards

John








Sent: Wednesday, March 09, 2016 at 6:31 AM
From: Capsule <networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com

Ok deal.



How would you like to proceed?




Thanks.



2016년 3월 7일 월요일, John Little<[email protected]>님이 작성한 메시지:

Hello




Let's do a deal at $33,000.




If it's agreeable to you, we can complete the deal next week.




Regards

John











Sent: Sunday, March 06, 2016 at 5:52 PM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com

Hello Sir,




Please reply me.




I'm a motivated buyer .




Thank you.




























답장

전달






















Capsule <[email protected]>


14:19 (2시간 전)








John에게






















Hello.




Can I refund the money for the domain?




Thanks

 

[Jackson Elsegood]

In this case the buyer received the domain into his account successfully and the escrow was closed, but a number of days later lost access to the NetSol account that was holding the domain. I spoke with the buyer this afternoon and confirmed that he is in touch with Network Solutions to resolve the issue and Escrow.com is providing any and all help we can from our side.

 

[bonavee]

...This is starting to sound like one of those Nigerian scams via email...

This has absolutely NOTHING to do with any particular nationality please. If true, this will be a serious case of Internet fraud... pure & simple! Peace & love to all! God bless Nigeria.

 

[TheLegendaryJP]

Is there a whois change when checking whois history? Did the domain actually change accounts is the question. Can somebody post the whois logs?

This is what whois shows, on March 5th it still belonged to John Little....

Domain:

Record Date: 2016-03-05
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2015-10-03
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2015-10-03T17:38:04Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Little, John
Registrant Organization:
Registrant Street: 15052 Olympic Dr
Registrant City: Clearlake
Registrant State/Province: CA
Registrant Postal Code: 95422
Registrant Country: US
Registrant Phone: 4085601720
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Little, John
Admin Organization:
Admin Street: 15052 Olympic Dr
Admin City: Clearlake
Admin State/Province: CA
Admin Postal Code: 95422
Admin Country: US
Admin Phone: 4085601720
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Little, John
Tech Organization:
Tech Street: 15052 Olympic Dr
Tech City: Clearlake
Tech State/Province: CA
Tech Postal Code: 95422
Tech Country: US
Tech Phone: 4085601720
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.UTOPIASYSTEMS.NET
Name Server: DNS2.UTOPIASYSTEMS.NET
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

It then switches to this whois on March 9th just 4 DAYS later to our OP I assume since name matches Namepros account. Further suspicious because he instantly has a [email protected] email already! It remains this way for 5 days.

Domain:

Record Date: 2016-03-09
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2016-03-09
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2016-03-09T06:03:54Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: ok https://www.icann.org/epp#OK
Registry Registrant ID:
Registrant Name: Choi, SungChan
Registrant Organization:
Registrant Street: 707-151, Anyang5-dong
Registrant City: Anyang-si
Registrant State/Province: KR
Registrant Postal Code: 180400
Registrant Country: KR
Registrant Phone: +82.1092138267
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Choi, SungChan
Admin Organization:
Admin Street: 707-151, Anyang5-dong
Admin City: Anyang-si
Admin State/Province: KR
Admin Postal Code: 180400
Admin Country: KR
Admin Phone: +82.1092138267
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Choi, SungChan
Tech Organization:
Tech Street: 707-151, Anyang5-dong
Tech City: Anyang-si
Tech State/Province: KR
Tech Postal Code: 180400
Tech Country: KR
Tech Phone: +82.1092138267
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NS3.CYPACK.COM
Name Server: NS4.CYPACK.COM
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

It switches once more on March 15th to....

Domain:

Record Date: 2016-03-15
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2016-03-15
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2016-03-15T12:37:35Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://www.icann.org/epp#clientUpdateProhibited
Registry Registrant ID:
Registrant Name: Admin Services
Registrant Organization: Admin Services
Registrant Street: Admin Svcs - NSI lit.com
Registrant City: Cupertino
Registrant State/Province: CA
Registrant Postal Code: 95015
Registrant Country: US
Registrant Phone: +1.4083991202
Registrant Phone Ext:
Registrant Fax: +1.9999999999
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Admin Services
Admin Organization: Admin Services
Admin Street: Admin Svcs - NSI lit.com
Admin City: Cupertino
Admin State/Province: CA
Admin Postal Code: 95015
Admin Country: US
Admin Phone: +1.4083991202
Admin Phone Ext:
Admin Fax: +1.9999999999
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Admin Services
Tech Organization: Admin Services
Tech Street: Admin Svcs - NSI lit.com
Tech City: Cupertino
Tech State/Province: CA
Tech Postal Code: 95015
Tech Country: US
Tech Phone: +1.4083991202
Tech Phone Ext:
Tech Fax: +1.9999999999
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.UTOPIASYSTEMS.NET
Name Server: DNS2.UTOPIASYSTEMS.NET
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

And one last time a day later March 16th to privacy and at that point I assume heading back where it should be...

Domain:

Record Date: 2016-03-16
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2016-03-15
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2016-03-15T17:52:23Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://www.icann.org/epp#clientUpdateProhibited
Registry Registrant ID:
Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization:
Registrant Street: 12808 Gran Bay Parkway West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.5707088780
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: PERFECT PRIVACY, LLC
Admin Organization:
Admin Street: 12808 Gran Bay Parkway West
Admin City: Jacksonville
Admin State/Province: FL
Admin Postal Code: 32258
Admin Country: US
Admin Phone: +1.5707088780
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: PERFECT PRIVACY, LLC
Tech Organization:
Tech Street: 12808 Gran Bay Parkway West
Tech City: Jacksonville
Tech State/Province: FL
Tech Postal Code: 32258
Tech Country: US
Tech Phone: +1.5707088780
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.UTOPIASYSTEMS.NET
Name Server: DNS2.UTOPIASYSTEMS.NET
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

The OP story has some holes, for example why is his whois showing directly from John Little?
Why did he instantly have an info@little email?
His name clearly is the same as the whois of the new owner directly after John Little?

I would add all just a theory but many questions for OP...

Post the email/info/who/how of the seller for starters. Post the sellers information used for escrow.com when you accepted the transaction and so on...

Like I said 4 times now, giving purchaser benefit of the doubt here and if it makes sense happy to help him chase down the thief or how he was swindled. I do not blindly believe everyone, when I help in these things I have MANY questions for "victims".

 

[Hypersot]

Before we discuss whether it was a stolen domain or not, you've got to prove to us you actually bought the domain in question. Something is missing somewhere. Is there any email from netsol that confirms your purchase? At least if you can't login to netsol, you should be able to log into your personal inbox. Where is the email from escrow? I will keep seeing your story as a cooked up one until you show evidence of purchase. Forum members should be very careful so we don't end up losing something in the course of looking for what is not missing.

since an escrow.com representative verified OPs sayings in this thread, I consider that proof enough

what troubles me though is that, considering what happened to the OP, an escrow service seems not to give enough protection... not sure how to feel about this :/

 

[TheLegendaryJP]

Ok did a little digging....

I actually tired to buy this name YEARS ago from the long time owner John Little.

John continued to own the name until March 5th at least, then whois changed within Netsol to a Korean KR owner and not 7, yes SEVEN days later sold to our OP.

Red flags everywhere there but I think it is safe to say the name was stolen from John, resold in 7 days to our OP using escrow.com and Netsol has frozen and taken it back for John.

Case closed, OP learned a lesson now go to bed.

Its now on the OP to hunt the thief down and try to recover funds, escrow cannot help, John Little and Netsol cannot help. At best Netsol could give the OP an IP or something of the thief but still useless really.

OP, bad luck!

 

[Jasonn]

Ok did a little digging....

I actually tired to buy this name YEARS ago from the long time owner John Little.

John continued to own the name until March 5th at least, then whois changed within Netsol to a Chinese owner and not 7, yes SEVEN days later sold to our OP.

Red flags everywhere there but I think it is safe to say the name was stolen from John, resold in 7 days to our OP using escrow.com and Netsol has frozen and taken it back for John.

Case closed, OP learned a lesson now go to bed.

Its now on the OP to hunt the thief down and try to recover funds, escrow cannot help, John Little and Netsol cannot help. At best Netsol could give the OP an IP or something of the thief but still useless really.

OP, bad luck!

why can't escrow.com help? their whole motto preventing fraud and such. escrow.com must have information on the seller and i would think it should be an issue to them that their service was used sell a stolen domain to steal funds from someone.

 

[TheLegendaryJP]

I have been looking at the thieves whois info and really nothing to go on no real cache, name stolen and resold in days maybe as little as 4!

Another far out theory but plausible is the OP is the thief, stole the name, sold it to himself via escrow ( small fee for big name) and hoped that was enough to show ownership and keep it, likely but I will give OP benefit of the doubt. That could explain no whois showing between John Little and the OP...hhhmmm but I digress, escrow did nothing wrong, Netsol and John did nothing wrong. Either OP bought a stolen name or he did what I said above.

In over 10-12 years of recovering 100's of 5-6 figure+ names, helping victims and dealing with the scum out there I have seen it all!

If the OP transferred out of netsol to say ename then John Little would have a HUGE task to recover since OP could show proof of purchase and no idea it was stolen, would have resulted in huge legal fee's for John.

Thieves like to put a layer between names they keep, old tactic.

 

[TheLegendaryJP]

Ok HUGE red flag here....

The email [email protected] .... may not have been John's any longer.

This is the 4th theft I have come across in the last few months where they use a "free" email provider. In this case John was using it but maybe it became available again...

Visit Pacificwest.com and see whois, that company owns a ton of decent generics and people use them for email.

Could be as easy as comparing those emails to a whois list and see what is available, you then create the same email and steal the domain.

That is why you should never use a free email at all for your domains, ever. Nor use a domain you own that you let expire.

 

[TheLegendaryJP]

On a side note just so you guys know who exactly the OP claims to have bought the name from....

John Little, rang bells for me because I have likely sold more good first name dot com then any individual I know.

Why did it ring a bell, not only did I make an offer on Little.com I did so because I first saw John owned and as far as I know still does, JOHN.com!

Also a guy who is as smart as John is not selling his last name, not for $33k lol I mean his company only sold for $220 million.


https://en.wikipedia.org/wiki/Portal_Software

 

[Nazz]

$33k for Little.com seems rather cheap, doesn't it?

 

[Kenneth Smith]

do y'all not see the red flags here. its a con.. how can you afford to pay 33k for a domain but can't afford a lawyer.

 

[dezinerite]

Can you guys please stop calling him a Nigerian scammer? It's a derogatory term that is clearly offending some members (who are probably from Nigeria). The OP obviously cannot speak English to save his life, and we know Nigerians speak English really well. Did you not factor this in at all? If you think the OP is a scammer, why can't you just use the word scammer alone, why do you need to associate any nationality to it? Also, let's try to stop diverting the issue, it is unproductive and childish. This is about the OP and him losing money.

Let's be kind and give him the benefit of the doubt so that for future reference if anyone goes through the same thing they will be able to refer to this thread.

The OP clearly bought a stolen domain, and NetSol most likely blocked his account and returned the domain to its rightful owner. So nobody hacked into his NetSol account and stole anything, the OP initially assumed that's what happened when he thought the domain was stolen from him.

The asking price for little.com was 45k, that in itself was fishy. It took one email for the seller to drop the price down to 33k. The OP lacks knowledge in the industry. Zero portfolio, willing to spend 33k aka "life savings" into one single domain. Motivation: greed. That's what scammers are able to stimulate from their victims, and convince them they will profit tenfold.

I wonder if the OP had been acting as a broker or intermediary between a pair of scammers (or could be the same scammer with 2 email accounts).

Way I see it, OP is fighting a losing battle. Especially if you have no funds for lawyers or investigators. If you've got time on your hands you could always try to scambait the person who sold you little.com by pretending to be someone interested in another domain. If their email still works.

 

[TheLegendaryJP]

Just an update, I was away for a few days.

I have reviewed screen shots the OP provided of escrow. Assuming he is telling the full truth, no fakery and he is 100% honest I must conclude that John's email was either compromised or left expired and reregistered for use by the thief. Unfortunately if the thief used his old email service and called himself John Little in the escrow transaction is does not mean it was THE John Little (domain owner) it could have been anyone.

I have suggested the OP contact escrow and ask for verification of who they paid and how. That info would either quickly lead to more questions or put an end to this. I would assume the thief would not send funds to the real John Little of course so that would be a key piece of the case, if obtainable.

Again giving OP benefit of the doubt and with the help of escrow payment info, say thief's bank account, email for payment (which if via the john little hacked email is useless)...etc Even if one found the thief who could be anywhere in the world, charging them, proving it all in court and recovering funds are all very long shots and may not even justify the expense. Sad but a reality and a big example why due diligence is so vital.

 

[America First]

"But I don't know the seller's bank location and Escrow.com said cannot send me the seller's bank info."

I would say it`s an Escrow.com problem. How they will not assist in this is beyond me in every way. If they have any info that could help and they do not want to give the info, than Escrow.com should conduct their own investigation to clear their name form any liability. Again, who protects me the buyer if not Escrow.com?
Why are fees paid?

On the other hand I do understand how others think this looks very suspicious from the poster. I hope all is on the up and up with this post.

 

[Jasonn]

I didn't open any files.
Netsol took back from me.

ah, so little.com was stolen, you bought the stolen domain and then netsol took it back to give the rightful owner. in this case escrow.com should definitely be involved.

 

[TheLegendaryJP]

Also the OP when agreeing to buy should have at least compared escrow details to John's whois and even tried the number (doesn't seem to work) again a huge no no imo. Keep info current! It only helps a thief when you do not.

Escrow would know who they paid out and if not John Little, big flag!

 

[TRY]

again. use the INTERNET PEOPLE! It's BEEN CALLED the NIGERIAN SCAM for years! Wanna call someone RACIST? go speak to the FBI. They Coined the TERM not me. It is MOST UNFORTUNATE for the NIGERIANS that this termed HAS BEEN COINED. Perhaps Nigerians should be more proactive about CATCHING these scammers who are EMBARRASSING their country by DOING SUCH SCAMS. although you can't really blame them because they are too busy trying to SURVIVE. is easy enough to drop comments without doing research. me racists? well if we are calling names. then You Childish. we can do this all DAY FOLKS.

again if this SCAM were started by my countrymen Filipinos. Then I'd have no problems calling this the Filipino Scam. PERIOD let's quit getting off topic and stick to this thread. I still believe this thread is "shady" I hate thinking this so someone please prove me wrong with concrete proof. Thanks.

ABC did a news documentary titled "Nigerian Scams"...in America the phrase was popularized by the media.

 

[d-e-x]

Can you guys please stop calling him a Nigerian scammer? It's a derogatory term that is clearly offending some members (who are probably from Nigeria). The OP obviously cannot speak English to save his life, and we know Nigerians speak English really well. Did you not factor this in at all? If you think the OP is a scammer, why can't you just use the word scammer alone, why do you need to associate any nationality to it? Also, let's try to stop diverting the issue, it is unproductive and childish. This is about the OP and him losing money.

Let's be kind and give him the benefit of the doubt so that for future reference if anyone goes through the same thing they will be able to refer to this thread.

The OP clearly bought a stolen domain, and NetSol most likely blocked his account and returned the domain to its rightful owner. So nobody hacked into his NetSol account and stole anything, the OP initially assumed that's what happened when he thought the domain was stolen from him.

The asking price for little.com was 45k, that in itself was fishy. It took one email for the seller to drop the price down to 33k. The OP lacks knowledge in the industry. Zero portfolio, willing to spend 33k aka "life savings" into one single domain. Motivation: greed. That's what scammers are able to stimulate from their victims, and convince them they will profit tenfold.

I wonder if the OP had been acting as a broker or intermediary between a pair of scammers (or could be the same scammer with 2 email accounts).

Way I see it, OP is fighting a losing battle. Especially if you have no funds for lawyers or investigators. If you've got time on your hands you could always try to scambait the person who sold you little.com by pretending to be someone interested in another domain. If their email still works.

1. Nobody here has called OP a ´´Nigerian scammer´´, I did not saw that. What I saw is - be aware, maybe...
2. OP is Domainer with some experience and he don't ´´lack knowledge in industry´´ like you said. Newbies don't buy such expensive domains.
3. Imagine - newbie approach to the John Little with words: ´´hi, can I buy your domain? ´´ Simple like that. Sorry but I don't buy that. ( Hi, Bill can I buy Microsoft from you? )
4. OP contacted seller FIRST and that is very important in this case.
5. Seller has offered to the OP transfer to ANY reg. of his choice. What if OP has decided to transfer domain to the GoDaddy for example ? With Escrow evidence he will have he's domain back in he's account in few days.

Like I said before, here we have some ´´loco´´ situation, many questions and only few answers.
OP comes here asking for help and that is ok. but if you want help you need to give some evidence here, (screenshot of Escrow payment for example would be fine. Not only - I am a victim and I don't have a money...) if you don't want to make that public that is ok. but then how you expect to somebody help you ? Beside that @TheLegendaryJP offered him a help ´´
Can you share the escrow info, you say you paid John Little so feel free to PM me the escrow info.

I want to continue to give you the benefit of the doubt BUT you have to start helping yourself via proof. ´´

This is best he can get here and now he is on the move.

To the OP - Send a PM to the @TheLegendaryJP with some evidence and you will get all help you need.

 

[bobbarato]

I'm going to speculate that the theft emailed a keystroke logger malware to the OP / new owner of little.com. It got "activated" and sent the account details to the the thief.

It's for concern about this sort of stuff that all my registrar logins and emails go to an older laptop running linux that is used for nothing else.

 

[domainventure]

Unfortunately it's caveat emptor. But I do hope the OP gets his money back

Always ask to see a renewal notice/ registration notice which had been sent to the whois email as well as any payment receipt of the reg/renewal before agreeing to do a high value transaction.

 

[premkumar]

Better File a complaint both to Icaan about Netsol of their lack luster security and the money you lost becoz of them. 2. File a local police complaint and send copy to all the party Icann, netsol, escrow add netsol, escrow as criminal in police complaint. This will help you, may be in future if culprit caught you may get you money, even if not, in future netsol or escrow establish branch in your country, they may face music and try to solve / compensate you. Infact add Icaan also as criminal, becoz they allowed the Whois name transfer. This keep tab on all guys. I know a case in which CEO of billion dollar MLM was arrested for complaint of cheat for just $100. so just involved everyone who are party to the case and file police complaint against them.

Who knows the culprit may be a netsol employee( having access & knowledge of netsol security), so just go ahead and file complaint. If your country is big market like china, chance are their this people face music when they want to enter or start their business in your country. In that time, this complaint hunt them.

If you are real victim, in that case the above is one possible solution.

 

[WhoaDomain.com]

you racist.

again. use the INTERNET PEOPLE! It's BEEN CALLED the NIGERIAN SCAM for years! Wanna call someone RACIST? go speak to the FBI. They Coined the TERM not me. It is MOST UNFORTUNATE for the NIGERIANS that this termed HAS BEEN COINED. Perhaps Nigerians should be more proactive about CATCHING these scammers who are EMBARRASSING their country by DOING SUCH SCAMS. although you can't really blame them because they are too busy trying to SURVIVE. is easy enough to drop comments without doing research. me racists? well if we are calling names. then You Childish. we can do this all DAY FOLKS.

again if this SCAM were started by my countrymen Filipinos. Then I'd have no problems calling this the Filipino Scam. PERIOD let's quit getting off topic and stick to this thread. I still believe this thread is "shady" I hate thinking this so someone please prove me wrong with concrete proof. Thanks.

 

[Silentptnr]

If anybody solve this problem, I'll pay the commission..

Thank you... Please help me...

Hmmm. No money for lawyer, but will pay commission? Seems weird. Not saying this didn't happen, but very weird set of circumstances.

 

[LarryDomain]

I'm just concerned about this thread MIGHT end up scamming NP people.

AVTAR629 - Your family seems a bit gullible! Not to be mean or anything but Father, Mother, Aunt and Granfather scammed?? Dude anyone will tell you, your family is quite gullible for scams. I've ran into one single person in my life that has been scammed by the Nigerian or similar Phishing scam. And I work for a company that employs 10,000+ people.

So needless to say, your family all needs to take a Internet safety class. You included, cuz you might be next.

Not hearing anything.

"Sold" 4 names at the auction which finished last Thursday but have not heard a thing.

OBSTACLE.COURSES........One of the very rarest gTLDs. I think only a little over 1K domains

Curious, did you used to have an all black lander up with a small yellow icon thing?

I recall trying to buy this years ago, made good 5 fig offer with the willingness to go much more, think I called the house and spoke with the owners wife and child. Never heard back...at that time we easily would have paid 6 figs, now that cpa etc is blah, its a pass. Timing is important, for this name while still very nice, I think you missed it.


Ok back, just checked, it was you...man did your child or wife not give you the message? Never ceases to amaze me how people miss out....maybe...all the best.

By the way? Why do I know so much about Nigerian scams because I have had my father scammes and mother and aunt and grandfather scammed by such scams. Not all from Nigeria. Some from India. But even if indian it's still called by the FBI as what? The Nigerian scam so no. I will not apologize. You take what I said personal? Ok I'll make you a fair deal give back what Nigerian scams have taken from my family and I'll be happy to apologize. Shall I give you my bank account so you can wire me the money ? Yea right! Like I'd give that to u? Lol

Prediction! my post will be deleted and this Nigerian guy's post won't be. Even though the Nigerian scam is something you can Google right now! lol

 

[AuctionBio]

My best advise to every domainer
If you buy any premium domain, you need to immediately shift it to your other account only for security measures. This can happen to anybody any time.