I bought Little.com and stolen!

[SungChan]

Hello,




I bought Little.com domain name and the seller pushed the domain name into my NetworkSolutions account.

And yesterday I tried to access my Networksolutions account but is has denied to access.

the password is changed.




And the whois information has changed.




My domain name is stolen.




Please help me. please please....




That is all I have... My whole money...







Please help me...







Me and the seller's e-mails as follow;





capsule <[email protected]>


2월 13일








jlittle에게
























Hello.




Can I buy your domain name?




Thanks










내 삼성 디바이스에서 보냈습니다















답장

전달




















John Little
Hello $49k. Regards John Sent: Saturday, February 13, 2016 at 7:17 AM From: c...

3월 6일 (10일 전)




Hello $49k. Regards John Sent: Saturday, February 13, 2016 at 7:17 AM From: c...













John Little 3월 6일 (10일 전)



로드 중...













John Little


3월 6일 (10일 전)








나에게

















영어







한국어





메일 번역

영어 번역 안함

















Hello




$49k.




Regards

John











Sent: Saturday, February 13, 2016 at 7:17 AM
From: capsule <[email protected]>
To: [email protected]
Subject: Little.com









Hello.




Can I buy your domain name?




Thanks










내 삼성 디바이스에서 보냈습니다
























답장

전달























Capsule
Thanks for your answer. Can you accept USD 15k? Thanks. 2016년 3월 6일 일요일, John...

3월 6일 (10일 전)




Thanks for your answer. Can you accept USD 15k? Thanks. 2016년 3월 6일 일요일, John...













Capsule 3월 6일 (10일 전)



로드 중...













Capsule <[email protected]>


3월 6일 (10일 전)








John에게






















Thanks for your answer.




Can you accept USD 15k?




Thanks.





2016년 3월 6일 일요일, John Little<[email protected]>님이 작성한 메시지:










Hello




$49k.




Regards

John











Sent: Saturday, February 13, 2016 at 7:17 AM
From: capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com









Thanks for your answer.




Can you accept USD 15k?




Thanks.





2016년 3월 6일 일요일, John Little<[email protected]>님이 작성한 메시지:


Hello




Sorry, it's too cheap for one-word dot com.




I can slightly decrease the price for a quick deal.




Regards

John











Sent: Saturday, March 05, 2016 at 6:33 PM
From: Capsule <[email protected]>님이 작성한 메시지:


Hello




Sorry, it's too cheap for one-word dot com.




I can slightly decrease the price for a quick deal.




Regards

John











Sent: Saturday, March 05, 2016 at 6:33 PM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com


Hello Sir,




Please reply me.




I'm a motivated buyer .




Thank you.























답장

전달





















Capsule
Ok deal. How would you like to proceed? Thanks. 2016년 3월 7일 월요일, John Little<...

3월 7일 (9일 전)




Ok deal. How would you like to proceed? Thanks. 2016년 3월 7일 월요일, John Little<...













Capsule 3월 7일 (9일 전)



로드 중...













Capsule <[email protected]>


3월 7일 (9일 전)








John에게





















Ok deal.



How would you like to proceed?




Thanks.



2016년 3월 7일 월요일, John Little<[email protected]>님이 작성한 메시지:










Hello




Let's do a deal at $33,000.




If it's agreeable to you, we can complete the deal next week.




Regards

John











Sent: Sunday, March 06, 2016 at 5:52 PM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM



From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com

Ok deal.



How would you like to proceed?




Thanks.



2016년 3월 7일 월요일, John Little<[email protected]>님이 작성한 메시지:


Hello




The first option is an internal transfer between Network Solutions account. It's free and almost immediately.




https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:









Ok I'll take the first option.




Thank you.





2016년 3월 7일 월요일, John Little<https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:

Do you have any other one word. Com domains?




Thanks.





2016년 3월 7일 월요일, Capsule<https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM








From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com








Ok I'll take the first option.




Thank you.





2016년 3월 7일 월요일, John Little<https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:








Hello

Ok, that's good. Have you sent the payment to escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:









Payment has been sent.

International wire-transfer takes 1-3 business days.

Thanks.





2016년 3월 8일 화요일, John Little<escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:

I'm pretty sure that the funds will arrive in the Escrow.com.




Once the Escrow.com approves my payment, please push the domain name.




My Networksolutions.com Username is

sungchan




Thanks.





2016년 3월 8일 화요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>:

I'm pretty sure that the funds will arrive in the Escrow.com within today.








Once the Escrow.com approves my payment, please push the domain name.







My Networksolutions.com Username is




sungchan







Thanks.









2016년 3월 8일 화요일, Capsule<[email protected]>님이 작성한 메시지:

I'm pretty sure that the funds will arrive in the Escrow.com.




Once the Escrow.com approves my payment, please push the domain name.




My Networksolutions.com Username is

sungchan




Thanks.





2016년 3월 8일 화요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<[email protected]>님이 작성한 메시지:









OK! the Escrow.com approves my payment.




Please push the domain name to my Networksolutions account.




Username is



sungchan




And account number is 35107056




Thank you!







2016-03-08 19:52 GMT+09:00 Capsule <escrow.com?

I have nothing more to sell.

Regards
John


Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com








I just initiated the domain's transfer within networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:










Ok.




I wait for a transfer request from Network Solutions. Usually it takes a few hours.




Regards

John











Sent: Tuesday, March 08, 2016 at 6:47 PM
From: Capsule <networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <escrow.com is needed to complete the deal.




Regards

John








Sent: Wednesday, March 09, 2016 at 6:31 AM








From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com








Hello.




Please check your email regarding the transfer.




Thanks.





2016년 3월 9일 수요일, John Little<networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>님이 작성한 메시지:


Done.




Your confirmation at escrow.com is needed to complete the deal.




Regards

John








Sent: Wednesday, March 09, 2016 at 6:31 AM
From: Capsule <networksolutions.com.




Please check your email and networksolutions.com account.




Thanks.





2016년 3월 9일 수요일, Capsule<escrow.com?

I have nothing more to sell.

Regards
John

Sent: Monday, March 07, 2016 at 8:34 AM
From: Capsule <https://www.networksolutions.com/domain-transfer/index.jsp




The second one is an external transfer to another registrar, for example GoDaddy. I'll tell you an authorization code for it.




How domain escrow works




https://www.escrow.com/services/domain-and-website-escrow/how-domain-escrow-works/




Regards
John





Sent: Monday, March 07, 2016 at 12:08 AM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com

Ok deal.



How would you like to proceed?




Thanks.



2016년 3월 7일 월요일, John Little<[email protected]>님이 작성한 메시지:

Hello




Let's do a deal at $33,000.




If it's agreeable to you, we can complete the deal next week.




Regards

John











Sent: Sunday, March 06, 2016 at 5:52 PM
From: Capsule <[email protected]>
To: "John Little" <[email protected]>
Subject: Re: Little.com

Hello Sir,




Please reply me.




I'm a motivated buyer .




Thank you.




























답장

전달






















Capsule <[email protected]>


14:19 (2시간 전)








John에게






















Hello.




Can I refund the money for the domain?




Thanks

 

[alcy]

Good job. I am always skeptical because I have fallen victims of sweet stories. I became more skeptical when I discovered OP joined this forum just yesterday and first assignment he has for us is to help him find a stolen domain. Thanks for your update even as I wish OP all the best

I fully agree. maybe it is no coincidence the thief and OP are both of asian origin.

 

[TheLegendaryJP]

Thank you.



What lesson he or we can learn? What is the take away?



Escrow was used to sell a stolen domain. What should they do to avoid these kind of incidents?

I get irritated when DN.com asks me purchase receipts of each of my small domains even after buyer approved transactions. Now I realize they have a point.



Why is it always with Netsol?

The lesson, do your due diligence! If you used whois history it would have set off red flags, call previous owner to verify it was sold to new owner, google emails, numbers etc. Element of risk in every deal but much can be eliminated if you take care.

Escrow, they are a medium, agent, holds funds, releases funds that is it. Can they give the OP info, I suppose but if the thief was good it will be useless.

Why netsol? Easy the thief stole and kept it within netsol meaning no 30-60 day hold most rars do if transferred out, makes it harder to sell fast. They also sold just in time for an allowance of another internal push. Why netsol, if youre the thief, why not!

 

[deez007]

Holly sh*t man.... this is really not cool. I thought the op would get his money back ... I didn't realize that the seller freakin hijacked the domain from the original owner and then flogged it after a few days to the op... sorry for your loss op.

 

[domainventure]

Unfortunately it's caveat emptor. But I do hope the OP gets his money back

Always ask to see a renewal notice/ registration notice which had been sent to the whois email as well as any payment receipt of the reg/renewal before agreeing to do a high value transaction.

 

[bonavee]

...Always ask to see a renewal notice/ registration notice which had been sent to the whois email as well as any payment receipt of the reg/renewal before agreeing to do a high value transaction.

Very important point this. It's a no-brainer, IMHO. Bless you @domainventure.

 

[TheLegendaryJP]

I have been looking at the thieves whois info and really nothing to go on no real cache, name stolen and resold in days maybe as little as 4!

Another far out theory but plausible is the OP is the thief, stole the name, sold it to himself via escrow ( small fee for big name) and hoped that was enough to show ownership and keep it, likely but I will give OP benefit of the doubt. That could explain no whois showing between John Little and the OP...hhhmmm but I digress, escrow did nothing wrong, Netsol and John did nothing wrong. Either OP bought a stolen name or he did what I said above.

In over 10-12 years of recovering 100's of 5-6 figure+ names, helping victims and dealing with the scum out there I have seen it all!

If the OP transferred out of netsol to say ename then John Little would have a HUGE task to recover since OP could show proof of purchase and no idea it was stolen, would have resulted in huge legal fee's for John.

Thieves like to put a layer between names they keep, old tactic.

 

[HCFree1]

As a relatively new domainer, I'm glad I joined this forum and came across this thread. I have had someone try to hijack my GoDaddy acct. in the past. I'm not a fan of all things GoDaddy, but the two-factor authentication and 60-Day transfer lock, which can be a pain, make me feel a little more secure from fraud or theft of domains. Now knowing how easy it is to be scammed in a purchase, even through escrow, will make me more cautious when purchasing.

 

[WhoaDomain.com]

Stop sounding like a kid.

I did add. ( maybe) didn't I. And me being childish
Hmmm a child knows nothing about the real world which makes a child by default naive. I'm giving facts that Nigerian scams exists any fool can Google it. Me suspecting this thread is a scam similar to a Nigerian scam is childish. A child trusts. Adults know the world. So they don't trust and swallow every odd NP thread they come across created by total strangers who just created an account on NP. It is still a free country is it not? We're all entitled to our own opinion within reason.

 

[alcy]

I have been looking at the thieves whois info and really nothing to go on no real cache, name stolen and resold in days maybe as little as 4!

Another far out theory but plausible is the OP is the thief, stole the name, sold it to himself via escrow ( small fee for big name) and hoped that was enough to show ownership and keep it, likely but I will give OP benefit of the doubt. That could explain no whois showing between John Little and the OP...hhhmmm but I digress, escrow did nothing wrong, Netsol and John did nothing wrong. Either OP bought a stolen name or he did what I said above.

In over 10-12 years of recovering 100's of 5-6 figure+ names, helping victims and dealing with the scum out there I have seen it all!

If the OP transferred out of netsol to say ename then John Little would have a HUGE task to recover since OP could show proof of purchase and no idea it was stolen, would have resulted in huge legal fee's for John.

Thieves like to put a layer between names they keep, old tactic.

an absolutely plausible theory! op could be thief. or op could be thief's friend etc.. that still keeps goods "in the family"... so to speak.. or none of the above. no proof available either way.

thanks for the valuable lessons on domain security.

 

[domainerfella]

Another far out theory but plausible is the OP is the thief, stole the name, sold it to himself via escrow ( small fee for big name) and hoped that was enough to show ownership and keep it, likely but I will give OP benefit of the doubt.

I am unable to give the benefit of doubt.

In over 10-12 years of recovering 100's of 5-6 figure+ names, helping victims and dealing with the scum out there I have seen it all!

That's interesting! Tell us more?

 

[d-e-x]

Something is wrong here IMO
Seller has offered to you a Domain transfer to any DN Registry of your choice and you choose a push to the current reg. (NetSol. )???
Why not to GD?
Yes, you are new here but its look like you are domainer with some experience, you contacted the seller first, you have paid a domain which price is more than $10k (beginners don't do that), you know how Escrow works, you have a NetSol account...
Domainer with that experience would know stories about NetSol and for sure he will transferred that Domain away from NetSol. You didn't?
Many questions and only few answers....
Maybe @Avtar629 have a right when he says ´´be careful´´!
My 2 cents

 

[TheLegendaryJP]

I am unable to give the benefit of doubt.



That's interesting! Tell us more?

I could write a book

In saying that the last half dozen were all LLL dot com this last 6 months, all recovered!

 

[domainerfella]

I could write a book

In saying that the last half dozen were all LLL dot com this last 6 months, all recovered!

All right, following you.

 

[domainerfella]

Could this be possible also? @TheLegendaryJP said there is no whois info between the OP (scammer) and little John. So OP made a fake transaction without really stealing the domain and put a thread here to taint Escrow.com. How about that?

You may note that he stopped responding.

 

[Domain Galleria]

I am pretty sure there was no transaction. Both the buyer and the seller are of same group hence, no money moves outside the ring

 

[TheLegendaryJP]

Anything is possible, one thing that they could have done is steal it, started escrow, completed by simply logging in and changing whois to show the "new owner"? Again all a big theory assuming OP stole it but again giving benefit of the doubt.

End of day it was stolen, period, either OP stole it sold it to himself OR he bought a stolen name and here we are.

No hard evidence either way tbh, all I know is the rightful owner gets it back and OP may or may not be out the money.

In one case I helped on p2p.com the thief even went as far as making VERY good VERY fake paypal receipts, put nothing past anyone.

 

[domainerfella]

Anything is possible, one thing that they could have done is steal it, started escrow, completed by simply logging in and changing whois to show the "new owner"? Again all a big theory assuming OP stole it but again giving benefit of the doubt.

End of day it was stolen, period, either OP stole it sold it to himself OR he bought a stolen name and here we are.

No hard evidence either way tbh, all I know is the rightful owner gets it back and OP may or may not be out the money.

In one case I helped on p2p.com the thief even went as far as making VERY good VERY fake paypal receipts, put nothing past anyone.

Is there a whois change when checking whois history? Did the domain actually change accounts is the question. Can somebody post the whois logs?

Edited: You already said this. "John continued to own the name until March 5th at least, then whois changed within Netsol to a Korean KR owner and not 7, yes SEVEN days later sold to our OP."

Missed it.

 

[Name Trader]

I already sent the proof of purchase.
But netsol said 'I would suggest that your client contact their local authorities to address the possibility of recouping their funds.'

I don't have money to hire lawyer...

You are going to need a lawyer for this case in order to get NetSol to respond to you. They have stopped responding for a reason. The reason being there is a dispute over the ownership of this domain. Who changed the ownership details of your account? The seller, the previous legitimate owner, or NetSol. NetSol will not respond except to a lawyer. You will need a lawyer in order to have any chance of recovering this domain. Else your money is gone.

At NetSol. You need to "pull" the domain into your account. How was the domain transferred to your account.

 

[Name Trader]

Ok did a little digging....

I actually tired to buy this name YEARS ago from the long time owner John Little.

John continued to own the name until March 5th at least, then whois changed within Netsol to a Korean KR owner and not 7, yes SEVEN days later sold to our OP.

Red flags everywhere there but I think it is safe to say the name was stolen from John, resold in 7 days to our OP using escrow.com and Netsol has frozen and taken it back for John.

Case closed, OP learned a lesson now go to bed.

Its now on the OP to hunt the thief down and try to recover funds, escrow cannot help, John Little and Netsol cannot help. At best Netsol could give the OP an IP or something of the thief but still useless really.

OP, bad luck!

Is any of this confirmed by John Little?

 

[TheLegendaryJP]

Is there a whois change when checking whois history? Did the domain actually change accounts is the question. Can somebody post the whois logs?

This is what whois shows, on March 5th it still belonged to John Little....

Domain:

Record Date: 2016-03-05
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2015-10-03
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2015-10-03T17:38:04Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Little, John
Registrant Organization:
Registrant Street: 15052 Olympic Dr
Registrant City: Clearlake
Registrant State/Province: CA
Registrant Postal Code: 95422
Registrant Country: US
Registrant Phone: 4085601720
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Little, John
Admin Organization:
Admin Street: 15052 Olympic Dr
Admin City: Clearlake
Admin State/Province: CA
Admin Postal Code: 95422
Admin Country: US
Admin Phone: 4085601720
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Little, John
Tech Organization:
Tech Street: 15052 Olympic Dr
Tech City: Clearlake
Tech State/Province: CA
Tech Postal Code: 95422
Tech Country: US
Tech Phone: 4085601720
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.UTOPIASYSTEMS.NET
Name Server: DNS2.UTOPIASYSTEMS.NET
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

It then switches to this whois on March 9th just 4 DAYS later to our OP I assume since name matches Namepros account. Further suspicious because he instantly has a [email protected] email already! It remains this way for 5 days.

Domain:

Record Date: 2016-03-09
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2016-03-09
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2016-03-09T06:03:54Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: ok https://www.icann.org/epp#OK
Registry Registrant ID:
Registrant Name: Choi, SungChan
Registrant Organization:
Registrant Street: 707-151, Anyang5-dong
Registrant City: Anyang-si
Registrant State/Province: KR
Registrant Postal Code: 180400
Registrant Country: KR
Registrant Phone: +82.1092138267
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Choi, SungChan
Admin Organization:
Admin Street: 707-151, Anyang5-dong
Admin City: Anyang-si
Admin State/Province: KR
Admin Postal Code: 180400
Admin Country: KR
Admin Phone: +82.1092138267
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Choi, SungChan
Tech Organization:
Tech Street: 707-151, Anyang5-dong
Tech City: Anyang-si
Tech State/Province: KR
Tech Postal Code: 180400
Tech Country: KR
Tech Phone: +82.1092138267
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NS3.CYPACK.COM
Name Server: NS4.CYPACK.COM
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

It switches once more on March 15th to....

Domain:

Record Date: 2016-03-15
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2016-03-15
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2016-03-15T12:37:35Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://www.icann.org/epp#clientUpdateProhibited
Registry Registrant ID:
Registrant Name: Admin Services
Registrant Organization: Admin Services
Registrant Street: Admin Svcs - NSI lit.com
Registrant City: Cupertino
Registrant State/Province: CA
Registrant Postal Code: 95015
Registrant Country: US
Registrant Phone: +1.4083991202
Registrant Phone Ext:
Registrant Fax: +1.9999999999
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Admin Services
Admin Organization: Admin Services
Admin Street: Admin Svcs - NSI lit.com
Admin City: Cupertino
Admin State/Province: CA
Admin Postal Code: 95015
Admin Country: US
Admin Phone: +1.4083991202
Admin Phone Ext:
Admin Fax: +1.9999999999
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Admin Services
Tech Organization: Admin Services
Tech Street: Admin Svcs - NSI lit.com
Tech City: Cupertino
Tech State/Province: CA
Tech Postal Code: 95015
Tech Country: US
Tech Phone: +1.4083991202
Tech Phone Ext:
Tech Fax: +1.9999999999
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.UTOPIASYSTEMS.NET
Name Server: DNS2.UTOPIASYSTEMS.NET
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

And one last time a day later March 16th to privacy and at that point I assume heading back where it should be...

Domain:

Record Date: 2016-03-16
Registrar: NETWORK SOLUTIONS, LLC.
Server: whois.networksolutions.com
Created: 1994-08-16
Updated: 2016-03-15
Expires: 2019-08-15
Reverse Whois:


Domain Name: LITTLE.COM
Registry Domain ID: 132434_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2016-03-15T17:52:23Z
Creation Date: 1994-08-16T04:00:00Z
Registrar Registration Expiration Date: 2019-08-15T04:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://www.icann.org/epp#clientUpdateProhibited
Registry Registrant ID:
Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization:
Registrant Street: 12808 Gran Bay Parkway West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.5707088780
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: PERFECT PRIVACY, LLC
Admin Organization:
Admin Street: 12808 Gran Bay Parkway West
Admin City: Jacksonville
Admin State/Province: FL
Admin Postal Code: 32258
Admin Country: US
Admin Phone: +1.5707088780
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: PERFECT PRIVACY, LLC
Tech Organization:
Tech Street: 12808 Gran Bay Parkway West
Tech City: Jacksonville
Tech State/Province: FL
Tech Postal Code: 32258
Tech Country: US
Tech Phone: +1.5707088780
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: DNS1.UTOPIASYSTEMS.NET
Name Server: DNS2.UTOPIASYSTEMS.NET
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

The OP story has some holes, for example why is his whois showing directly from John Little?
Why did he instantly have an info@little email?
His name clearly is the same as the whois of the new owner directly after John Little?

I would add all just a theory but many questions for OP...

Post the email/info/who/how of the seller for starters. Post the sellers information used for escrow.com when you accepted the transaction and so on...

Like I said 4 times now, giving purchaser benefit of the doubt here and if it makes sense happy to help him chase down the thief or how he was swindled. I do not blindly believe everyone, when I help in these things I have MANY questions for "victims".