NameSilo

**SCAM ** Network Solutions ZTOMY.COM - NS1642.ZTOMY.COM

Located in Warnings and Alerts started by DomainVP, Jul 31, 2015.

Replies:
10
Views:
15,103

  1. DomainVP

    DomainVP Domain Expert VIP

    Posts:
    3,368
    Likes Received:
    12,126
    So I woke up this morning and I got an eMail from Network Solutions informing me that some changes were being made to my DNS.

    My domains were now being pointed to: NS1642.ZTOMY.COM, NS2642.ZTOMY.COM

    So I checked the WhoIs for my domains to make sure this wasn't just a phishing eMail, and sure enough my name servers were changed. No account details were changed, just the name servers.

    I visited one of the domains and it took me to the site FindingResult.com. Of course this domain is privacy protected etc...

    The name servers are now switched back, and I have changed my password.

    I don't know how this happened.

    Since I have the eMail containing the ticket ID and the ID of the person who facilitated this change on the NS side I have created a support ticket and will find out more as they provide me information.

    I will update this post with any more additional information that I gather.
     
    The views expressed on this page by users and staff are their own, not those of NamePros.
  2. DomainVP

    DomainVP Domain Expert VIP

    Posts:
    3,368
    Likes Received:
    12,126
    Oh man... wait till you hear this one...

    I just had a nice chat with a rep with Network Solutions, and apparently I didn't verify my whois information so the name servers were changed and pointed to NS1642.ZTOMY.COM, which will roll the traffic to spam.

    I had to yell at him for 5 minutes until he divulged that the ZTOMY name servers were theirs.

    These were drop caught domains that I will be transferring out, so I don't deal with NS often.

    Typically you would expect a registrar landing page to appear, but not with Network Solutions.

    This is obviously another loophole using ICANN policy for them to hijack your domain name and send the traffic to their own interests.

    Shame on them.

    It looks like Network Solutions finds crafty ways to insert their ZTOMY name servers into any site they can. They hit LinkedIN and USPS a few years ago.

    http://www.zdnet.com/article/linkedin-just-one-of-thousands-of-sites-hit-by-dns-issue-cisco/

    And they do this often...

    http://www.scamful.com/2014/07/warning-if-you-own-domain-names-avoid.html

    All of my domains with GoDaddy are verified via eMail, so I wouldn't know their process in dealing with ICANN verification - would they do something similar?

    UPDATE:

    On top of everything, apparently when I changed the name servers back to what they were supposed to be, the tech I was talking to went ahead and added the ZTOMY dns on top of my entries. I had to again go back in and change the DNS for the domains. What scam artists...

    [​IMG]
     
    Last edited: Jul 31, 2015
  3. S-B

    S-B Account Closed

    Posts:
    3,503
    Likes Received:
    5,744
  4. cmdomains

    cmdomains Established Member

    Posts:
    423
    Likes Received:
    235
    The worse this could have been was if you were lead to an external website to try "fix" any problem and for you to fill in a complaint form (with your personal info) to that website (a fake support website) .

    It sounds that your registrar is affiliated with whoever made the DNS change. This is still a serious note if you're traffic is dramatically affected after this change. Also, being your own manager for your domains, why they think they can freely do this is interesting assuming that they kept previous DNS working. It doesn't make much sense.
     
  5. Ms Domainer

    Ms Domainer Top Member VIP

    Posts:
    4,949
    Likes Received:
    3,058
  6. DomainVP

    DomainVP Domain Expert VIP

    Posts:
    3,368
    Likes Received:
    12,126
    Another NS intentional mess...

    I requested an auth code, which takes 3 business days to generate by the way, and once it was sent to me it turned out to be the wrong code.

    So I had to contact customer support (another 2 days) and I finally got a valid auth code.

    It should not take 3 days to get a customer their auth code, ever.

    I have a feeling they scan for domains that have high monthly SV and try to manipulate that domain any way they can to benefit themselves. It was painful getting this domain out.
     
  7. stub

    stub Top Member PRO VIP ★★★★★★★★★★

    Posts:
    23,125
    Likes Received:
    8,488
    No. They do it on every domain. Won at auction or registered at NetSol. I use NetSol for the same reasons you do. It's ridiculous, 3 days just to get the auth code, 5-7 days waiting for the domain to transfer. That's without support becoming involved. 2 days for support is generous. 1) That doesn't include a weekend, 2) It assumes you actually get a usable answer from their first support message. If you don't, you have to create yet another support ticket, you cannot reply to the same ticket. I calculated (extrapolated) from the number of tickets issued between my 2 tickets for the same issue, that they are getting something like 400k support tickets a day :( The longest it has taken me to get a simple support ticket answered is about 1.5 weeks and 4-5 tickets being issued.

    As for your actual NS issue, and eMail validation. I have never seen these nameservers on my domains at NS. You do use default defined nameservers, I presume? I've never been asked to verify my email at NS. And I always ignore the ICANN issued annual notices at all my registrars.

    I always transfer my domains out 60 days after registration. You never know when they will make it more difficult. Although for the last year I have been consistently successful in transferring domains out. It never used to be so easy, as it is now ;)
     
    Last edited: Aug 12, 2015
  8. Ms Domainer

    Ms Domainer Top Member VIP

    Posts:
    4,949
    Likes Received:
    3,058
    The ztomy name servers are used for New Ventures Services domains.
     
  9. elvey

    elvey New Member

    Posts:
    1
    Likes Received:
    1
    Wow, they're still pulling this sh*t!

    These AsSwipes (see what I did there?) claimed, "Network Solutions is now required by ICANN (the regulating body for domain registrations) to have all domain owners confirm their email address contact information. We have not received a confirmed response to the verification email communications." I understand the first sentence is true. But the second one is bullsh*t. I'd just created the email address about a week earlier, AND had used it to set up my main Network Solutions account.
     
  10. MicroW

    MicroW New Member

    Posts:
    3
    Likes Received:
    4
    Yep they just did the same to me.

    Was very scary to see that more than $30,000 worth of domains were suddenly not working and all the nameservers had changed to NS1642.ZTOMY.COM

    I was scared as hell and thought my account had been hacked.

    After confirming my email all the nameservers seem to have reverted to normal and my domains are working again..

    I can understand them needing to verify account details for icann but to change all the nameservers to their own? Unbelievable and as a customer I feel like they just sh*t all over me. Still can't believe they did that.
     
  11. stub

    stub Top Member PRO VIP ★★★★★★★★★★

    Posts:
    23,125
    Likes Received:
    8,488
    Oh well. That's NetSol. I move every domain out at the earliest possibility, after 60 days. I hate to use them, at all.
     

Want to reply or ask your own question?

It only takes a minute to sign up – and it's free!

Share This Page

NameWorth
  1. NamePros uses cookies and similar technologies. By using this site, you are agreeing to our privacy policy, terms, and use of cookies.
    Dismiss Notice
Loading...