[RESOLVED] - GoDaddy Stolen Live Domain From Account

[tbelfort]

I've been with GoDaddy for years and never had any issues up until now, but on the 11th of April I received an email saying "a domain you have cancelled has been removed from your account"

I have a receipt for a 1 year renewal on the domain from July 2024, so it wasn't due to expire.

Every time I contact support I get a different story.

One support guy even told me I need to buy it again at auction.

Another told me to email auctions.

Another told me that I transferred it to another account, but they can't tell me who it's been transferred to. This is impossible because my account is 2FA secured, plus, I haven't had a need to login to my account as everything is on autorenewal. I sent them a screenshot of my last logins, which showed the last login to the account was February 1st 2025 until I logged in on the 11th of April after getting the email.

I've spent about 50 euros in support calls at this stage and made 10+ support requests on the web. I can't get anywhere.

This is an active live domain in my business, and I have over 120 other domains on this account with them. How can they just steal a domain from my account and ignore me?

Does anyone know anyone I can contact to get help, because the standard numbers are of no use. They just tell me they can't help and give me someone to email, and so far everyone I've emailed has ignored me.

One person even told me my domain is currently listed for sale on the auctions.

This is pretty disgusting. I don't see how it's possible at this stage to run a business on any domains on godaddy if they can just take them without your permission and with no recourse.

And this isn't even just a throwaway domain. It's an auction domain I paid a lot of money for. I have $100's of thousands worth of auction domains with godaddy in fact, so I am potentially at risk of them just taking any domain they please at any time. I have owned this domain since 2023 and have an active business on it.

 

[Daniel Owens]

I've been with GoDaddy for years and never had any issues up until now, but on the 11th of April I received an email saying "a domain you have cancelled has been removed from your account"

I have a receipt for a 1 year renewal on the domain from July 2024, so it wasn't due to expire.

Every time I contact support I get a different story.

One support guy even told me I need to buy it again at auction.

Another told me to email auctions.

Another told me that I transferred it to another account, but they can't tell me who it's been transferred to. This is impossible because my account is 2FA secured, plus, I haven't had a need to login to my account as everything is on autorenewal. I sent them a screenshot of my last logins, which showed the last login to the account was February 1st 2025 until I logged in on the 11th of April after getting the email.

I've spent about 50 euros in support calls at this stage and made 10+ support requests on the web. I can't get anywhere.

This is an active live domain in my business, and I have over 120 other domains on this account with them. How can they just steal a domain from my account and ignore me?

Does anyone know anyone I can contact to get help, because the standard numbers are of no use. They just tell me they can't help and give me someone to email, and so far everyone I've emailed has ignored me.

One person even told me my domain is currently listed for sale on the auctions.

This is pretty disgusting. I don't see how it's possible at this stage to run a business on any domains on godaddy if they can just take them without your permission and with no recourse.

And this isn't even just a throwaway domain. It's an auction domain I paid a lot of money for. I have $100's of thousands worth of auction domains with godaddy in fact, so I am potentially at risk of them just taking any domain they please at any time. I have owned this domain since 2023 and have an active business on it.

If you haven’t yet contact auctions at godaddy and see if they help I know its odd to contact them but it might help. Contact as many emails as you can. The reason auctions because they mentioned being in afternic and they may have been sold by mistake. IMO

 

[Future Sensors]

After this is resolved, it would be in the best interest of @GoDaddy to address this publicly.

Furthermore, it would be greatly appreciated if @tbelfort continues to keep us updated in this thread on every step taken by GoDaddy regarding this matter.

 

[Daniel Owens]

Furthermore, it would be greatly appreciated if @tbelfort continues to keep us updated in this thread on every step taken by GoDaddy regarding this matter.

What are your thoughts? Do you think that somehow they automatically transferred it to somebody (by mistake)?

 

[Future Sensors]

What are your thoughts? Do you think that somehow they automatically transferred it to somebody (by mistake)?

It’s indeed possible that the domain is already owned by someone else. Technically and procedurally, there are several scenarios that could explain this, but I prefer not to speculate further without additional information at this time.

 

[Future Sensors]

We're not entirely sure whether 'stolen' is the right word to describe what happened. But the integrity of GoDaddy's systems and procedures (and Afternic listings) is what truly matters.

 

[tbelfort]

The email notification is the same notification that is received when a domain is sold via Afternic and then transferred by the GoDaddy broker from your account to the buyer. There's the possibility that the domain has been listed on Afternic by mistake (it is possible to do so via your GoDaddy account (although seems unlikely)) or a GoDaddy broker has made a mistake when transferring a different domain (e.g: they've typed "band.com" instead of "banb.com").

Do you have any other emails from GoDaddy like "Your registrant domain name change is pending." or "Change of account confirmed for example.com" and/or any emails from `[email protected]`?

GoDaddy will be able to confirm what actually happened, but in the meantime, you may wish to review your GoDaddy domain portfolio to ensure that none of your domains are unintentionally listed for sale.

(I guess, theoretically, there could be some sort of GoDaddy / Afternic exploit where someone lists a domain they don't own for sale and then agree a sale and that causes the GoDaddy system to transfer the domain to the buyer's account. Seems very unlikely, but plausible given the Afternic system and GoDaddy system are integrated. Or, perhaps, it was previously listed for sale by someone else, and after you bought it at auction, it remained listed for sale under their account and GoDaddy has accidentally facilitated a sale by the previous owner.)

This was the very first thing I checked after I got the cancellation email before contacting support. When I search for the domain name in my email the only emails are the domain renewal in July 2024, then the cancellation one. Nothing else.

I see the domain was updated four days ago seems a little early to open a thread like this. I would’ve allowed at least 10 days before opening a thread like this however I hope you get it resolved and I’m sure it’s probably just a glitch in the Go Daddy system.

Absolutely not. This is a very serious issue. I run a 7 figure business with these domains, so this isn't something I'm going to deal with casually. It's not a minor mistake here. A domain has literally disappeared from my account and I spent 3 days, 50+ euros on multiple calls and close to 9-10 hours with support. Literally 4-6 hours the day it happened. I went to bed at 8am with a blinding headache.

“So far everyone I've emailed has ignored me” how long did you wait?

3 to 3.5 days, but the problem is that I'm getting absolutely useless information from support. Both web chat and phone.

One of them even gave me an email ([email protected]) which after emailing I got an error back "The recipient server did not accept our requests to connect."

One support guy even told me, quite cheekily, that I have to contact their broker, not support, and buy the domain back.

Another told me it was listed at auction(which apparently it's not) and that I need to contact the auctions team.

Another told me to email [email protected]

Another told me to go to some site, undosomething.com where I had to upload a copy of my passport. In fact, now I think about it I wonder if the support guy tried to steal my passport.. The domain is on my work computer, so I can check what it is tomorrow, but it started with undo and was a dot com.

None of them have replied within 3 days, so at this stage I just felt like I nothing was going to happen and more action was needed.

Furthermore, it would be greatly appreciated if @tbelfort continues to keep us updated in this thread on every step taken by GoDaddy regarding this matter.

I absolutely will keep this thread updated to the end.

As of now I have given my account email and the domain to the godaddy rep in private and am awaiting someone reaching out.

We're not entirely sure whether 'stolen' is the right word to describe what happened. But the integrity of GoDaddy's systems and procedures (and Afternic listings) is what truly matters.

Sort of. 'stolen' technically just means taken without permission. It doesn't imply whether it's premeditated by a human, or inadvertently stolen by a system, but either way, it is "taken without my permission", which fits the definition of "stolen".

And I used that word to highlight the serious and anomalous nature of the event.

 

[Future Sensors]

3 to 3.5 days, but the problem is that I'm getting absolutely useless information from support. Both web chat and phone.

The level of expertise of these people often leaves much to be desired.

Sometimes they even proclaim complete untruths, as can be read in this thread, where support simply says that the domain Atom.com (a competitor of GoDaddy) can safely be purchased via GoDaddy.

https://www.namepros.com/threads/afternic-official-thread.1295231/page-181#post-9338783

 

[Daniel Owens]

This was the very first thing I checked after I got the cancellation email before contacting support. When I search for the domain name in my email the only emails are the domain renewal in July 2024, then the cancellation one. Nothing else.



Absolutely not. This is a very serious issue. I run a 7 figure business with these domains, so this isn't something I'm going to deal with casually. It's not a minor mistake here. A domain has literally disappeared from my account and I spent 3 days, 50+ euros on multiple calls and close to 9-10 hours with support. Literally 4-6 hours the day it happened. I went to bed at 8am with a blinding headache.



3 to 3.5 days, but the problem is that I'm getting absolutely useless information from support. Both web chat and phone.

One of them even gave me an email ([email protected]) which after emailing I got an error back "The recipient server did not accept our requests to connect."

One support guy even told me, quite cheekily, that I have to contact their broker, not support, and buy the domain back.

Another told me it was listed at auction(which apparently it's not) and that I need to contact the auctions team.

Another told me to email [email protected]

Another told me to go to some site, undosomething.com where I had to upload a copy of my passport. In fact, now I think about it I wonder if the support guy tried to steal my passport.. The domain is on my work computer, so I can check what it is tomorrow, but it started with undo and was a dot com.

None of them have replied within 3 days, so at this stage I just felt like I nothing was going to happen and more action was needed.



I absolutely will keep this thread updated to the end.

As of now I have given my account email and the domain to the godaddy rep in private and am awaiting someone reaching out.



Sort of. 'stolen' technically just means taken without permission. It doesn't imply whether it's premeditated by a human, or inadvertently stolen by a system, but either way, it is "taken without my permission", which fits the definition of "stolen".

And I used that word to highlight the serious and anomalous nature of the event.

Keep us posted

 

[tbelfort]

Looks like there was a whois update on 4/10 the day before it was deleted.

The GoDaddy rep will know best.

Maybe an ICANN dispute regarding invalid whois?

Check your associated junk mail around that same date.

GL

Oh, and it wouldn't be this.

All my whois information is either my C corporation, my LLC or my personal name. Addresses are C corp address and LLC address. All 100% valid. Phone number is my personal mobile on them all and all my domains have catch-alls to one single email that I check weekly.

 

[forge]

When I search for the domain name in my email the only emails are the domain renewal in July 2024, then the cancellation one. Nothing else.

Please note (if you don't already know) that with GD most all domain names are embedded within the email body and therefore will NOT show up in a search within your email account (based on my own experience). Frustrating to say the least.

Actually, quite often the domain name is not even given in notification emails.

 

[NicTraders]

One of them even gave me an email ([email protected]) which after emailing I got an error back "The recipient server did not accept our requests to connect."

Presumably you realised there's a typo in that email address?... Not that I think emailing the correct address will have any impact. You've clearly taken many steps to try and get assistance, and GD 'support' is not good at giving it.

 

[Grilled]

The email notification is the same notification that is received when a domain is sold via Afternic and then transferred by the GoDaddy broker from your account to the buyer. There's the possibility that the domain has been listed on Afternic by mistake (it is possible to do so via your GoDaddy account (although seems unlikely)) or a GoDaddy broker has made a mistake when transferring a different domain (e.g: they've typed "band.com" instead of "banb.com").

Do you have any other emails from GoDaddy like "Your registrant domain name change is pending." or "Change of account confirmed for example.com" and/or any emails from `[email protected]`?

GoDaddy will be able to confirm what actually happened, but in the meantime, you may wish to review your GoDaddy domain portfolio to ensure that none of your domains are unintentionally listed for sale.

(I guess, theoretically, there could be some sort of GoDaddy / Afternic exploit where someone lists a domain they don't own for sale and then agree a sale and that causes the GoDaddy system to transfer the domain to the buyer's account. Seems very unlikely, but plausible given the Afternic system and GoDaddy system are integrated. Or, perhaps, it was previously listed for sale by someone else, and after you bought it at auction, it remained listed for sale under their account and GoDaddy has accidentally facilitated a sale by the previous owner.)

+1 for that observation...

... and @s1m welcome to namePros!... I noticed you're only a month in, and providing quality posts from the get go!

 

[DrJacoby]

This was the very first thing I checked after I got the cancellation email before contacting support. When I search for the domain name in my email the only emails are the domain renewal in July 2024, then the cancellation one. Nothing else.

The person that listed the domain for sale will probably be the one that receives the Congratulations email, not you in this case.

 

[enterscope]

I would recommend everyone do an export of their domains at Godaddy that way you can compare your list to your account every so often in case something happens to you.

I don't see how it could have been a 3rd party because even if they managed to add your domain to their afternic account what are the odds the domain even sells? Especially that close to renewal, just a lot of factors at play for that scenario to work.

It's more likely that there was a mistake somewhere internally.

Regardless, GD is fully capable of transferring the domain back to the rightful owner. Years ago I purchased a domain from Flippa that was stolen (for $1500 mind you) and within a couple days the domain vanished with not a peep from GD. They bypassed UDRP and everything, just took it upon themselves to resolve a 3rd party domain dispute even though it is explicitly against GD's own TOS.

Another reason I transfer domains out as soon as they come up for renewal.

 

[tbelfort]

UPDATE:

I received a response from GoDaddy. Here is the email below:

So at this stage it looks like our domains are not safe at all with GoDaddy. They can just remove them from your account and then tell you that you have to contact the new owner through the WHOIS directory.

This is absolutely disgraceful and incompetent behavior.

I have responded just now showing the receipt for my renewal that shows payment for 1 year made on July 13th 2024.

I'll update when I hear back again, but at this stage I'm going to start moving all my domains out of GoDaddy as I no longer have trust in the company.

 

[forge]

at this stage I'm going to start moving all my domains out of GoDaddy as I no longer have trust in the company.

Join the club.

Really sorry you had this outcome, a very lousy deal. I hope somehow you can still sort things out.

 

[Daniel Owens]

Join the club.

Really sorry you had this outcome, a very lousy deal. I hope somehow you can still sort things out.

I turned on two factor ID at godaddy after seeing this that way no one else can see my account even with pass. If domains disappear, I will know if it's a GoDaddy glitch and I will keep mine all locked.

 

[bmugford]

UPDATE:

I received a response from GoDaddy. Here is the email below:

Show attachment 273891


So at this stage it looks like our domains are not safe at all with GoDaddy. They can just remove them from your account and then tell you that you have to contact the new owner through the WHOIS directory.

This is absolutely disgraceful and incompetent behavior.

I have responded just now showing the receipt for my renewal that shows payment for 1 year made on July 13th 2024.

I'll update when I hear back again, but at this stage I'm going to start moving all my domains out of GoDaddy as I no longer have trust in the company.

The receipts you provided appear to contradict that conclusion.

The domain would have gone to auction, as an expired domain. When did that happen?

You are going to have to do better on this one @GoDaddy.

Brad

 

[enterscope]

UPDATE:

I received a response from GoDaddy. Here is the email below:

Show attachment 273891


So at this stage it looks like our domains are not safe at all with GoDaddy. They can just remove them from your account and then tell you that you have to contact the new owner through the WHOIS directory.

This is absolutely disgraceful and incompetent behavior.

I have responded just now showing the receipt for my renewal that shows payment for 1 year made on July 13th 2024.

I'll update when I hear back again, but at this stage I'm going to start moving all my domains out of GoDaddy as I no longer have trust in the company.

Wow that was quick.... domain expired, dropped and re-registered 2 months before the actual expiration date.

Maybe the new registrant is using top-secret quantum time technology?

 

[HostGeeks.com]

what name was it?post it here, if its junk just let it go and dont use godaddy again