Our domain has been stolen

[yudiarnanda]

On April 8th I logged into my WordPress, when I logged in an error appeared that my username and email were not registered there, I checked the database but my username and email were there.

I checked Whois, and the DNS has changed to Cloudflare's DNS, I'm using InMotion Hosting, but my domain is still on Godaddy. I can't log in to Godaddy, I recovered my account at changeupdate.com, after I get my Godaddy account back, I checked on the activity that my account was added with a mobile phone number for 2-step verification on March 31st. I checked my domain, freedesignresources.net is also gone.

They also stole my cPanel and changed all the passwords, so I don't get notified when the domain is transferred. I contacted Godaddy on April 9th and was advised to email [email protected], I got a reply:

The Undo Department cannot investigate claims regarding unauthorized account access. If your account was reviewed and determined to be compromised, the domain will be returned to the account as part of the review process.

Then again get a reply like this:

We apologize for any confusion, the Undo Department cannot investigate claims regarding unauthorized account access.

I chatted with several agents, they advised me to send another email. I've emailed six Godaddy departments several times:

• April 9 to: [email protected]
• April 13 to: [email protected]
• April 17th to: [email protected]
• April 17th to: [email protected]
• April 20th to: [email protected]
• April 20th to: [email protected]

On the 17th I got a reply, and I was advised to email [email protected] regarding my case. Then on the 22nd, I asked again to the agent via chat about the last email I sent to [email protected], they said I would get a reply email within 24 hours. After 24 hours I didn't get an email reply, on the 23rd I asked again to another agent, why haven't received a reply, they said couldn't find my ticket, so I was advised to send another email again to [email protected] or [email protected].

Why They can't find my ticket? I've emailed six departments of Godaddy at different times, all emails I sent from April 9 to April 23 were suggested by the Godaddy team on live chat.

I contacted the six departments of Godaddy many times. But did not get a satisfactory answer. What should I do now?

 

[UncleBrand]

you have to phone support nonstop, use voip like skype

and file a police report that you transfer to Godaddy asap

 

[alcy]

To me this topic is to draw attention to his website, I doubt is a real case, no Godaddy staff appear here to say anything, they know such tricks can be used on such popular forums.

frankly i know little bout Alexa.. rankings etc...but didnt others here already check and confirm this was valuable ranked site which kinda implied it already was getting good attention as u put it

either way as per name value alone no website it is worthless

 

[TribeMagnet]

I've removed all possible domains from GoDaddy and there are just a few waiting out the no-transfer period.

 

[alcy]

the name?

 

[decades80]

the name?

freedesignresources .net it has 30K Alexa, so its valuable website with lower value domain.

 

[yudiarnanda]

the name?

freedesignresources.net

 

[yudiarnanda]

Compromised email account is the likely culprit. From there, an attacker can scan thru the inbox and see any possible accounts, then use the “Forgot Password” feature on many sites to change the password and gain entry.

Yes, I think so.

 

[yudiarnanda]

@Joe Styler @Paul Nicks

Can you take a look at this?

Brad

Can you follow up on this @Joe Styler @Paul Nicks? I also spoke with Daniel from InstantShift about this, we had the same case, but the domain was transferred to another registrar, it took him only a week to get the domain back

My domain just transferred to another Godaddy account, I don't think it took a long time to verify my case.

 

[alcy]

freedesignresources .net it has 30K Alexa, so its valuable website with lower value domain.

yes just wanted to make sure of name...cause its my understanding 90percent stolen names are due to name value only. of which this has none.

if I understand correctly the thief wishes to profit.off existing biz yes?

 

[noneisnone]

yes just wanted to make sure of name...cause its my understanding 90percent stolen names are due to name value only. of which this has none.

if I understand correctly the thief wishes to profit.off existing biz yes?

domain rating and domain authority is extremely high with low spam score a x,xxx name i would say even without the website

 

[noneisnone]

so what would u do with this name without website...if u paid it 4fig? parking money or something? cause strictly as name without rankings etc it has no value

it helps with ranking when you decide to develop it even without the website if you monitor dropcatch auctions some random domains with double hyphens go for high hundreds only for the da and dr metrics

 

[yudiarnanda]

Sure, but it's surprising a person would use the exact same email on all of his services. I mix mine up just to make it harder if one them is stolen through social engineering.

And all my emails are on my phone, so if I get even the slightest issue with passwords or access (even false-positives) I immediately investigate online and with service providers.

The CSRs be giving it away like candy, and the entire world is trying to steal 24/7, so you really need to be proactive.

I use a different email on all services for my domain. unfortunately, the email I use is on the same hosting, so they can access it.

 

[yudiarnanda]

Cases like this really need to be escalated to higher levels. The first level of support is not really designed to handle complex cases like this.

Hopefully Paul or Joe can get this back on track.

Brad

I agree!

 

[yudiarnanda]

We have dealt with very similar issues, usually when that registrar can't find the account information then your account may have been deleted by the hacker. That unfortunately makes it much more difficult dealing with that registrar.

We (DNProtect) should be able to help, feel free to get in touch with us.

The domain name is still at GoDaddy, so that's a plus--it can be more difficult to get the domain name back one it's transferred away from GoDaddy.

Yes, the domain name is still at GoDaddy, so it's not difficult for the team to get my domain back.

 

[IMEZI]

To me this topic is to draw attention to his website, I doubt is a real case, no Godaddy staff appear here to say anything, they know such tricks can be used on such popular forums.

EPIK staff did showup in here while on other thread with EPIK problem no EPIK staff appear at all ^_^