二十六公斤– 一个疯子的博客

godaddy域名Qxz.com,j9y.com从被盗到追回全过程

事件回放:

1.被盗
2010年7月3日(星期六) 晚上6:33
正当我要下班时，收到一封来自support@godaddy.com的 邮件

Dear wang *******,

This message is to confirm that a change of registrant has been initiated for the following domain name(s):

***.COM
***.COM

The email address for the new registrant of the domain is you_domains@hotmail.com.

If for any reason this information is incorrect or you feel this change of registrant request was made in error, you may cancel the change request.

To cancel this change of registrant request:

1. Go to the GoDaddy.com, Inc. home page and log in to your account.
2. In the My Account section, select “Pending Account Changes.”
3. In the Incoming Account Changes list, select the change you want to cancel, then click the “Deny” icon.

To retrieve your customer number or password hint or to reset your password, click here.

If you need additional assistance, please contact us within 15 days at support@godaddy.com.

Sincerely,
GoDaddy.com, Inc.

我幸好没有把它当垃圾邮件给直接删除。
英语不好,但我还是看懂了大概意思,我的域名被人PUSH走了.
我赶紧登陆进自己的godaddy.com账户.发现已经迟了.69个域名, 只剩下67个了.
在”Pending Account Changes”里面也没有可Deny的域名, 太迟了.

2.补救.
我立刻向 support@godaddy.com 回复
2010年7月3日(星期六) 晚上6:35

who changed my domain’s email
发件人：******<******@qq.com>
时   间：2010年7月3日(星期六) 晚上6:35

who changed my domain’s email
***.com
***.com

who changed ?

不久得到回复,显然是自动的回复邮件.心理那个急啊.

Thank you for contacting the Undo Department, your email has been received. Our normal hours of operation are Monday – Friday 8 AM – 5 PM. We will respond to your email by the end of the next business day. Thank you in advance.

Kindest Regards,

Undo Department

由于怕给其他域名投资人带来损失，我就到各大论坛广播域名被盗的消息。以免有人买到被盗域名。其间有不相信的。有怀疑的。各种声音!!

3.走弯路
我尝试着打电话给godaddy.
他们的电话是这样的.
24/7 Technical Support
(480) 505-8877
Billing Support: (480) 505-8855
我用uucall打的0014805058877
打通了,听不懂,我是按2然后全按1,终于接通电话.我让对方只听我讲,因为他说的我基本听不懂.
最后对方向我发了封邮件

email undo@secureserver.net with your domain (Qxz.com, j9y.com) and your account number and pin# and they will be able to help you get your domains back.

James G

Team Mahogany

Customer Care Center

This email message and any attachments hereto is intended for use only by the addressee(s) named herein. If you have received this email in error, please immediately notify the sender and permanently delete the original and any copy of this message and its attachments.

Please contact my direct supervisor at cory@secureserver.net with any feedback.

在各大论坛米友的帮忙下,我知道要联系的是undo@godaddy.com.

4.联系域名的被盗后whois信息上的邮箱地址:
2010年7月4日(星期天) 凌晨2:44

收件人： moazeni <moazeni@live.com>
Hello, Qxz.com and j9y.com are mine.

please give the domains back to my account.

Someone stolen them from my account.

please give them back to my account.

2010年7月4日(星期天) 凌晨2:51 收到回复

hi
i paid $2000 for them.
what should i do now?

2010年7月4日(星期天) 凌晨2:53
我再回复

please give the domains back to my account.
and CALL the policeman

2010年7月4日(星期天) 凌晨2:59  收到回复

they cant do any thing.what should we do.

……
当对方向我发来邮件

i cant
i used to pay with paypal masspay
friend i am student and losing 2k with domains is hard for me:

我知道显然对方不肯归还域名.
只得睡觉…..
2010年7月4日(星期天) 中午11:39 在楠哥的帮忙下
我最后一次向对方发了邮件

Hi,
Thanks for the prompt response.
My email and my GoDaddy account were just Hacked hence two domain names has been STOLEN. You bought them from the theif. Please reverse any payment that you have made for the domain asap.I have notified Godaddy regarding this issue and they will start the investigation on Monday.
Thanks for any  cooperation you can provide.
Best Regards
*******

这封信石沉大海.
后来在namepros.com是得知,对方正在暗地里推销这些域名， 企图转手！

5.取回域名
2010年7月4日(星期天) 中午11:45
我向 undo <undo@secureserver.net>; undo <undo@godaddy.com>发邮件:

Hi, there

This is an urgent notification and I do need your help asap.

My GoDaddy account were just Hacked. My domain names ***.com and ***.com were STOLEN and pushed to another Godaddy account. Please hold these domain names and get them back to me asap.

Thanks in advance for any help you can provide.

Best Regards

*******

my domain (***.com, ***.com)
account number:****
pin:****
my account name:****

得到回复是:

Thank you for contacting us, your email has been received. Our normal hours of operation are Monday – Friday 8 AM – 5 PM. We will respond to your email by the end of the next business day. Thank you in advance.

Kindest Regards,

Domain Services

国外的工作时间好严格啊。只好再等。

2010年7月6日(星期二) 凌晨0:55 收到undo@godaddy.com的 邮件

附   件：1 个 ( GD Undo Form.pdf )
Dear ******,

Thank you for contacting us. Please provide us with the following:

1.    The completed Request for Undo of Change of Registrant form (attached).

2.    Photo identification. Acceptable photo identification is clear, readable, and issued by the government.  We must be able to clearly identify the pictured person, name, signature, and expiration date. If your photo ID does not contain an English Translation, we will require a Certified English Translation done by someone certified to do translations.

You may scan or take a digital photo of the information and email it to undo@godaddy.com. Once all the required documentation has been received, we will investigate the matter and respond to you via email as quickly as possible.

If all required documentation is not received within 10 days we will consider the matter closed.

In the meantime we have placed a lock on the domain names, which will prevent them from being further modified or transferred to a different Registrar.

Thank you,

Undo Department
469526

让我填一个正式的表格GD Undo Form,并要有官方的证件的照片。
幸好有护照,有数码相机.
在这里说明一下,GD Undo Form.pdf 因为是PDF文档,我只好把里面的内容截图,要填写的统统用firework填写好.(因为怕手写的、跟拍照时不清晰。)
我是这么填写的,详情请见附件.

只在GD Undo Form.pdf 的第三张,要手工签名的地方就没办法,打印第三张,手动写上姓名,然后拍照.
护照也拍好照片.
在准备好这些材料后.
我一口气向 undo@godaddy.com 发了两封带有这些附件的邮件

Hi, there
Please check the attached files per your requested.
Thanks again.
Best regards,
*******

6.谢天谢地,成功取回自己的域名
2010年7月7日(星期三) 上午9:28 收到godaddy.com的邮件。
告诉我域名已经PUSH到我指定的新账号.
我进新账户一看,果然有了。

Dear *******,

We have moved the domain names into the specified account.

Now that you have gained control over your domain name(s), here are a few suggestions on how to keep your account and domain name(s) secure in the future:

* Never share your username and password with another party. If it is pertinent that someone other than you login to the account to make changes to the domain name(s), you should immediately change the password after these changes have been made.

* To ensure that your domain name(s) do not transfer, expire, or get stolen, sign up for our Protected Registration,

https://www.godaddy.com/gdshop/p … ?se=%2B&ci=6442

* We suggest that the password be a series of numbers, letters, and symbols. Additionally, do not use this same password for any other account or on any other Internet site.

* Make sure that the registrant listed is the exact person or entity you wish to have legal rights over the domain name(s). Additionally, make sure you have a valid business license for the company listed and a government-issued photo ID for the person listed as the registrant. That way, if you do lose access to your account you can prove the identity of the registrant.

* Continually confirm that the administrative email address is updated so that the customer is notified of any changes to the domain name(s). Do not allow the email address to expire because this allows someone else to sign up for the email address, providing easy access to the account and domain name(s).

* If there is a credit card and/or shopper pin associated with the account, make sure that no one else is aware of what card is on file since this is another way that someone can verify account information and login to the account.

Thank you,

Undo Department
469526

2010年7月7日(星期三) 上午10:00 收到godaddy.com的邮件。

Dear Valued GoDaddy.com Customer:

The registration of the following domain name(s) has been successfully transferred to you:

***.COM
***.COM

Now’s the time to make sure all the information associated with this domain is accurate and up to date.

Please log in to your GoDaddy.com, Inc. account to view or change your domain details:
Go to the GoDaddy.com home page and log in with your username or customer number and password.
From the My Products list, you can manage, renew, and upgrade your products and services.

To retrieve your customer number or password hint or to reset your password, click the “Forgot Your Password?” hyperlink in the login area on the home page.

Auto-Renew Your Domain(s) Now!
When you modify your option to Auto-Renew, you won’t have to do it yourself when your domain(s) are about to expire.
In the My Products section, select “Domains.”
Use the checkboxes to select the domain(s) you want to modify, and then click “Change Auto Renew.” If you selected multiple domains, enable the fields using checkboxes on the right.
Select “Automatically Renew Domains.”

Take 10%* off your next order at GoDaddy.com!
After you’ve set up your account, enjoy 10% savings on us. The next time you visit GoDaddy.com, simply enter source code gdbb103 at checkout to receive your savings. Or mention the code when you call
(480) 505-8821.

Once again, welcome and congratulations on a successful transfer of domain registration.

Sincerely,
GoDaddy.com

最后在这里谢谢大家的关注.特别感谢楠哥.
另外这两个域名经此一番折腾估计是卖不出了,附上我所填 写的GD Undo Form的前两页,希望对大家有所帮助.