We have received a report from Andrew Rosener of MediaOptions.com that at least two domain names, Slash.com & County.com have been stolen from NetworkSolutions.com and are being shopped around for sale.
In a email Andrew wrote:
“I wanted to notify everyone that we have just discovered a domain theft at Network Solutions which I do not believe is an isolated incident.”
“So far it involves two domains, slash.com & county.com.”
The domains are from different owners and stolen by the same thief.”
County.com in particular may have been stolen some time ago and still held by the thief. The details on this one are not as clear yet.
However, Slash.com we have spoken directly with actual owner and he has confirmed with 100% certainty that the domain is stolen and he is working with Network Solutions to try and recover it.
I’m quite certain that I did not coincidentally find the only two domains which were stolen.
I would be surprised if this is not a more wide spread attack and there are many other domains involved but at this juncture it would be impossible to tell.
The domains were brought to me by another domain investor who could not afford them and I was to buy them and pay him a finder’s fee. Upon performing due diligence it became clear that the domains were suspicious and once I got a hold of the owner of slash.com via LinkedIn it was confirmed.
Just a head’s up that there is likely a larger breach at Network Solutions, possibly similar to that of Moniker.””
This looks like a sleeper theft and nothing like the Moniker breach.
As far as I see, the two names have different registrants as of now:
County.com: venumyneni@outlook.com
Slash.com: rick.watson@engineer.com
Domain Name: COUNTY.COM
Registry Domain ID:
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2014-10-14T00:00:00Z
Creation Date: 1995-08-07T00:00:00Z
Registrar Registration Expiration Date: Tue Aug 06 00:00:00 EDT 2024T00:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: ok
Registry Registrant ID:
Registrant Name: Myneni, Venu
Registrant Organization:
Registrant Street: 4 Riverview Drive
Registrant City: Somerset
Registrant State/Province: NJ
Registrant Postal Code: 08875
Registrant Country: US
Registrant Phone: +1.7326279973
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Registry Admin ID:
Admin Name: Myneni, Venu
Admin Organization: null
Admin Street: 4 Riverview Drive
Admin City: Somerset
Admin State/Province: NJ
Admin Postal Code: 08875
Admin Country: US
Admin Phone: +1.7326279973
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID:
Tech Name: Myneni, Venu
Tech Organization: null
Tech Street: 4 Riverview Drive
Tech City: Somerset
Tech State/Province: NJ
Tech Postal Code: 08875
Tech Country: US
Tech Phone: +1.7326279973
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Name Server: NS53.WORLDNIC.COM
Name Server: NS54.WORLDNIC.COM
DNSSEC: not signed
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Domain Name: SLASH.COM
Registry Domain ID:
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: http://networksolutions.com
Updated Date: 2014-10-10T00:00:00Z
Creation Date: 1995-09-09T00:00:00Z
Registrar Registration Expiration Date: 2017-09-08T00:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.8003337680
Reseller:
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Watson, Rick
Registrant Organization:
Registrant Street: 1871 Victoria Ave East
Registrant City: Regina
Registrant State/Province: SK
Registrant Postal Code: S4N 6E6
Registrant Country: CA
Registrant Phone: 6624483271
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Registry Admin ID:
Admin Name: Watson, Rick
Admin Organization: null
Admin Street: 1871 Victoria Ave East
Admin City: Regina
Admin State/Province: SK
Admin Postal Code: S4N 6E6
Admin Country: CA
Admin Phone: 6624483271
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID:
Tech Name: Watson, Rick
Tech Organization: null
Tech Street: 1871 Victoria Ave East
Tech City: Regina
Tech State/Province: SK
Tech Postal Code: S4N 6E6
Tech Country: CA
Tech Phone: 6624483271
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Name Server: NS1.SLASH.COM
Name Server: NS2.SLASH.COM
DNSSEC: not signed
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
different registrants – same thief.
Exactly how would this happen in a theft like this? The registrants account (pw) is hacked and thief goes in and takes (transfers) the names they want? Or, there’s a breach at the registrar and thief steals domain that way?
For most registrars, if you login, change or pw or even breath differently that morning, they send you an email letting you know “please confirm such and such”
Yeah exactly I don’t think its thirds its registrars stealing them first otherwise its not easily to take