Thieves are trying to steal our domain names while Afternic and GoDaddy are asleep at the wheel.
In the past few hours I have received requests from my registrar to approve Fast-Transfer on Afternic for several of my domain names.
Apparently my domains are added on Afternic by crooks that are trying to steal them. I will not talk about how easy this can be done as people in the industry already know about this.
It is quite easy to click on some of these approvals if you are dealing daily with Afternic.
And even worse. It is quite easy to batch approve Fast-Transfer for several domains at your registrar while some of these domains are listed by you and others by a thief.
The problem is that Afternic does not require a verification when you try to add domains in your account. They only ask for verification if the domains are already listed at some other account!
And the registrars only ask domain owners for Fast-Transfer verification, NOT for adding the domains on Afternic.
My domains requested today are all 4-letter domains. I checked and these domains are not on Afternic yet… (or the domains were deleted before I checked)
(BTW I am not alone here. This has been done in the past but never at this scale. More and more complaints for similar emails are appearing on Twitter.)
I got the first batch of verification emails on January 12th for a few of my 1-word .com domains.
(Apparently these are the same domains on several emails from scammers trying to buy them for cheap. Is it a coincidence?)
So I went to my Afternic account and tried to add these 1-word domains and guess what?
The domains are listed at a thief’s account and Afternic is ASKING ME to verify my own domains!
What kind of business are you running there? I am sure that you have no automated system… But really? No one cares to check accounts for suspicious activities?
So here it is:
Afternic and GoDaddy, I give you 24 hours to find the account(s), ban them and delete all my domains in there. I gave you one of my domains and that should be more than enough to help you.
I will try and add my domains in my account tomorrow. If I can’t, I will explore my options with an attorney.