WARNING: Stolen Domain Names Slash.com & County.com Are Being Shopped Around

by

We have received a report from Andrew Rosener of MediaOptions.com that at least two domain names, Slash.com & County.com have been stolen from NetworkSolutions.com and are being shopped around for sale.

In a email Andrew wrote:

“I wanted to notify everyone that we have just discovered a domain theft at Network Solutions which I do not believe is an isolated incident.”

“So far it involves two domains, slash.com & county.com.”

The domains are from different owners and stolen by the same thief.”

County.com in particular may have been stolen some time ago and still held by the thief. The details on this one are not as clear yet.

However, Slash.com we have spoken directly with actual owner and he has confirmed with 100% certainty that the domain is stolen and he is working with Network Solutions to try and recover it.

I’m quite certain that I did not coincidentally find the only two domains which were stolen.

I would be surprised if this is not a more wide spread attack and there are many other domains involved but at this juncture it would be impossible to tell.

The domains were brought to me by another domain investor who could not afford them and I was to buy them and pay him a finder’s fee. Upon performing due diligence it became clear that the domains were suspicious and once I got a hold of the owner of slash.com via LinkedIn it was confirmed.

Just a head’s up that there is likely a larger breach at Network Solutions, possibly similar to that of Moniker.””

About Michael Berkens

Michael Berkens, Esq. is the founder and Editor-in-Chief of TheDomains.com. Michael is also the co-founder of Worldwide Media Inc. which sold around 70K domain to Godaddy.com in December 2015 and now owns around 8K domain names . Michael was also one of the 5 Judges selected for the the Verisign 30th Anniversary .Com contest.

Comments

  2. Andrea Paladini says

    As far as I see, the two names have different registrants as of now:
    County.com: venumyneni@outlook.com
    Slash.com: rick.watson@engineer.com

    Domain Name: COUNTY.COM
    Registry Domain ID:
    Registrar WHOIS Server: whois.networksolutions.com
    Registrar URL: http://networksolutions.com
    Updated Date: 2014-10-14T00:00:00Z
    Creation Date: 1995-08-07T00:00:00Z
    Registrar Registration Expiration Date: Tue Aug 06 00:00:00 EDT 2024T00:00:00Z
    Registrar: NETWORK SOLUTIONS, LLC.
    Registrar IANA ID: 2
    Registrar Abuse Contact Email:
    Registrar Abuse Contact Phone: +1.8003337680
    Reseller:
    Domain Status: ok
    Registry Registrant ID:
    Registrant Name: Myneni, Venu
    Registrant Organization:
    Registrant Street: 4 Riverview Drive
    Registrant City: Somerset
    Registrant State/Province: NJ
    Registrant Postal Code: 08875
    Registrant Country: US
    Registrant Phone: +1.7326279973
    Registrant Phone Ext:
    Registrant Fax:
    Registrant Fax Ext:
    Registrant Email:
    Registry Admin ID:
    Admin Name: Myneni, Venu
    Admin Organization: null
    Admin Street: 4 Riverview Drive
    Admin City: Somerset
    Admin State/Province: NJ
    Admin Postal Code: 08875
    Admin Country: US
    Admin Phone: +1.7326279973
    Admin Phone Ext:
    Admin Fax:
    Admin Fax Ext:
    Admin Email:
    Registry Tech ID:
    Tech Name: Myneni, Venu
    Tech Organization: null
    Tech Street: 4 Riverview Drive
    Tech City: Somerset
    Tech State/Province: NJ
    Tech Postal Code: 08875
    Tech Country: US
    Tech Phone: +1.7326279973
    Tech Phone Ext:
    Tech Fax:
    Tech Fax Ext:
    Tech Email:
    Name Server: NS53.WORLDNIC.COM
    Name Server: NS54.WORLDNIC.COM
    DNSSEC: not signed
    URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

    Domain Name: SLASH.COM
    Registry Domain ID:
    Registrar WHOIS Server: whois.networksolutions.com
    Registrar URL: http://networksolutions.com
    Updated Date: 2014-10-10T00:00:00Z
    Creation Date: 1995-09-09T00:00:00Z
    Registrar Registration Expiration Date: 2017-09-08T00:00:00Z
    Registrar: NETWORK SOLUTIONS, LLC.
    Registrar IANA ID: 2
    Registrar Abuse Contact Email:
    Registrar Abuse Contact Phone: +1.8003337680
    Reseller:
    Domain Status: clientTransferProhibited
    Registry Registrant ID:
    Registrant Name: Watson, Rick
    Registrant Organization:
    Registrant Street: 1871 Victoria Ave East
    Registrant City: Regina
    Registrant State/Province: SK
    Registrant Postal Code: S4N 6E6
    Registrant Country: CA
    Registrant Phone: 6624483271
    Registrant Phone Ext:
    Registrant Fax:
    Registrant Fax Ext:
    Registrant Email:
    Registry Admin ID:
    Admin Name: Watson, Rick
    Admin Organization: null
    Admin Street: 1871 Victoria Ave East
    Admin City: Regina
    Admin State/Province: SK
    Admin Postal Code: S4N 6E6
    Admin Country: CA
    Admin Phone: 6624483271
    Admin Phone Ext:
    Admin Fax:
    Admin Fax Ext:
    Admin Email:
    Registry Tech ID:
    Tech Name: Watson, Rick
    Tech Organization: null
    Tech Street: 1871 Victoria Ave East
    Tech City: Regina
    Tech State/Province: SK
    Tech Postal Code: S4N 6E6
    Tech Country: CA
    Tech Phone: 6624483271
    Tech Phone Ext:
    Tech Fax:
    Tech Fax Ext:
    Tech Email:
    Name Server: NS1.SLASH.COM
    Name Server: NS2.SLASH.COM
    DNSSEC: not signed
    URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

  4. Ramahn says

    Exactly how would this happen in a theft like this? The registrants account (pw) is hacked and thief goes in and takes (transfers) the names they want? Or, there’s a breach at the registrar and thief steals domain that way?

    For most registrars, if you login, change or pw or even breath differently that morning, they send you an email letting you know “please confirm such and such”