ICANN has, for reasons unknown (well, more on that below) decided to make it ever-so-much-easier for folks to hijack your Internet domain. Use to be, if someone sent in a…
ICANN has, for reasons unknown (well, more on that below) decided to make it ever-so-much-easier for folks to hijack your Internet domain.
Use to be, if someone sent in a transfer request — “Hey, I’ve bought Hill-Kleerup.org from Dave, so transfer it over to my server and ownership, please,” then ICANN policy was to require positive confirmation of this from the registered domain owner — i.e., they’d try to get hold of me, and, unless they heard it from me, they wouldn’t do it.
Now, though, to make things easier on registrars (and churn up those transfer costs), they’ve changed that policy. Now they’ll try to reach you for five days — and, if they don’t hear back a “No,” they’ll assume the transfer is okay with you, and process it.
Failure by the Registrar of Record to respond within five (5) calendar days to a notification from the Registry regarding a transfer request will result in a default ‘approval’ of the transfer. In the event that a Transfer Contact listed in the Whois has not confirmed their request to transfer with the Registrar of Record and the Registrar of Record has not explicitly denied the transfer request, the default action will be that the Registrar of Record must allow the transfer to proceed.
Bad e-mail address in your domain registry? Off on vacation? Too busy to check your e-mail? Computer problems? Spam filter inadvertently blocking that registrar’s e-mail alerting you to the transfer, or other message rules inadvertently routed the message into a different folder? So sorry — someone else now has your domain. Don’t worry, though — I’m sure they’d be more than happy to sell it back to you. For a reasonable transfer fee. Unless they’re getting more traffic having it redirect to their domain …
What other sort of “ownership” or “registration” can you think of where anyone can claim that they “own” it now, and if you don’t pipe up to say otherwise (after a token effort is made to get your attention), it’s handed over to them? Yeesh.
Kottke has some suggestions:
1. Make sure your contact information listed with your domain registrar is up to date. If a transfer request comes in for a domain you own and your email address on file with them no longer works, you won’t hear about it until your domain name redirects to big-hot-mammas.com.
2. Don’t go on vacation for more than 4 days or have someone check your email while you’re gone. Impractical, but whaddya gonna do?
3. Make sure your spam filters aren’t filtering out email from your domain registrar.
4. Some domain registrars allow you to “transfer lock” your domains. Do so now. According to one disgruntled register.com customer, register.com has no such feature at this time….you’re on your own, sucker!
5. Complain to ICANN…here’s some contact information and their Board of Directors.
I’ve done #1 (and discovered, yes, an obsolete e-mail address), #2 isn’t terribly practical, I’m trying to take care of #3, I’ll be looking at #4 (the most important), and as for #5 …