Stolen domain Reg.ru what to do?

xatabich10
Site user since 23.09.2014
Offline
44
119

Hello forum users.

I address the problem, namely the fact ... that hijacked the domain has been registered with Reg.ru. What to do and how to be?

Now I am in correspondence with them, but ... it's 11:00 the answer is no.

How it was:

Waking up ... as usual, I checked the mail and found a message from Reg.ru unread headers:

The procedure for change of ownership for the following domains successfully completed.

Request for confirmation of a change of registrant contact

domain transfer between accounts REG.RU

I was very surprised to read the letter ... oh ** l ... my main site was given to what that Artem.

From the correspondence with them, it became clear that the request for change of ownership was carried out from a non-authorized part of the site ... That is, an attacker does not even logged in, able to steal domain.

While ... mail domain administrator was different, not the one on which the account is registered in Reg.ru. And this post registrar Reg.ru was hidden, purchased service Hiding personal data. As the villains could find emails? Then the message came to the post office to prove domain ownership change came, but nebyli read. And Yandex-mail from a two-factor auntifikatsiey. Besides ... the villain presented passport information (according to the registrar) but a screen of these documents has been uploaded to the recorder, and the more I did not shine documents. And the documents that have been uploaded to the recorder have been replaced by new ones. I wonder what they were given !? And if they nebyli fake or someone from having access to a database of zayuzat ... I wonder ... How could such a thing happen !? You want to transfer the domain to another registrar ... dancing with a tambourine, but how to transfer a domain to another user, your presence is not required. It has long been working with Reg.ru, but a pig planted for the first time. Now, how to sleep? They (Reg.ru) there are still domains, I wake up and give.

Website Spars and all public pages are available on the stolen domain and their order of 11k.

What to do? What to do? How dare accomplish your goal ...

SaberTiger
Site user since 22.11.2010
Offline
93
#1

Sorry ha offtopic, but 6 years of waiting, to save the idea to write the first message? Something is wrong here.

Doma-in
Site user since 19.04.2010
Offline
334
#2

xatabich10, or international domain novozona? Do not be surprised. This happens also with foreign registrars. And to solve the problem can only recorder.

PS The only suggestion - mail hacking, but your words of two-factor authentication makes all the difference. If the mail is secure, protected account with the registrar, that the "transfer between accounts" without authorization? While the domain is in a single registrar - decide quickly reg.ru tech support, to help bring back.

Of course you are not in the domain zone RU or RF, otherwise this would not have happened.

1. КОБРА.РФ | AM1.RU | КВМ.РФ| MAXE.RU| ТБК.РФ| GEGEMON.RU| VEFOS.COM + 2. KOYKA.RU | СНАБ.РФ| RАВА.RU ( https://www.reg.ru/domain/shop/lot/raba.ru?rid=617963 )| V10.RU ( http://pikado.ru/img/domains/cont.png ) | RD1.RU | OBYEKTIV.ru |RUTRONIK.RU ( https://www.reg.ru/domain/shop/lot/rutronik.ru?rid=617963 ) | RIROM.COM 3. ਛੋਟੇ ਡੋਮੇਨਾਂ 小域名 ( http://pikado.ru )!
xatabich10
Site user since 23.09.2014
Offline
44
#3
Doma-in:
xatabich10, or international domain novozona? Do not be surprised. This happens also with foreign registrars. And to solve the problem can only registrator.PS only suggestion - break-mail, but your words of two-factor authentication makes all the difference. If the mail is secure, protected account with the registrar, that the "transfer between accounts" without authorization? While the domain is in a single registrar - decide quickly reg.ru tech support, to help bring back. Of course you are not in the domain zone RU or RF, otherwise this would not have happened.

Yes international zone: .net

Trying to solve the operator threw me on the withdrawal of the domain in the legal department, but still silent, quiet time in them).

Thanks for the help.

---------- Posted 10.06.2020 at 03:42 ----------

Doma-in:
that the "transfer between accounts" without authorization?

Maintenance responded site transfer was carried out not from an authorized parts, that is the entrance to your Personal Area is not performed. And I have this form https://www.reg.ru/domain/service/transfer_services on which the transfer was carried out of the site. How is it !? I'm in shock ...

Doma-in
Site user since 19.04.2010
Offline
334
#4

xatabich10, yur.otdel gives birth to a very long time. And it is not always a good idea to wait for the result of it. You write in the morning techies, let will provide information as the transfer was made, and whether your data is there? If yes, then "pull" the domain back. The main check and let him say, as it could without authorization to transfer the domain and let not waste time, otherwise will lead the domain to another registrar.

savingleb
Site user since 15.04.2007
Offline
369
#5
xatabich10:
How could such a thing happen !?

Forged passport copy. The domain owner has not changed as I understand it, ask to return back to you in a bar.

Визовый центр в Санкт-Петербурге (https://visaspb.com/).
xatabich10
Site user since 23.09.2014
Offline
44
#6
savingleb:
Forged passport copy. The domain owner has not changed as I understand it, ask to return back to you in a bar.

About forgery, I also thought, but legal. Department wrote that the documents downloaded, they are available only upon request of the Ministry of Interior. Here's how to check if my documents were provided !? Register domain first my brother, then he handed me ... and he does not have rights to administer ... not me. Ure, the department almost silent night. In a chat on reg.ru links to help throw. About the domain administrator. Support wrote the administrator does not change when the form through which the stolen domain, changing only the personal account. I have not stolen the domain administrator, and not the one who is the first of its regal. I'm an admin understand Reg.ru. I beg to return the domain, but Technora write wait for an answer from the legal department. I asked to freeze the domain name to find out. In short chaos until happening.

---------- Posted 10.06.2020 at 14:51 ----------

In general, legal department wrote Reg.ru boilerplate response to my message ... that we are not a jurisdictional body authorized to establish a legal fact of theft of a domain name. And supposedly only the police will be given all the appearances and passwords, and if confirmed will return the domain. But as long as I go to the police is not from Russia, my police will write the Russian police is a few years ... the domain has been replaced by the registrar. And blocking or domain name suspension, too, only if you contact the police. All is not set explicitly in favor of the owner, fraudsters and even give odds are in the form of reg.ru to transmit without authorization on the site. I was in complete deadlock.

bums
Site user since 03.07.2006
Offline
412
#7
xatabich10:
I'm an admin understand Reg.ru.

The administrator is the one whose details are specified in the domain, and REGRU - registrar

If the administrator has not changed, then savingleb, he says is true, it is too late, send a request for domain transfer in your account through the same shape

https://www.reg.ru/domain/service/transfer_services

Регистрация доменов RU/SU/РФ/COM/NET/ORG/etc (https://www.regnic.name/?sesign) у регистраторов reg.ru(<-naunet.ru), webnames.ru, r01.ru, nic.ru, PublicDomainRegistry.com, uk2group.com. Все в одном аккаунте и по низким ценам, RU/РФ от 152 руб. А так же SSL сертификаты SECTIGO(<-COMODO)
Vladimir
Site user since 07.06.2004
Offline
329
#8
bums:
The administrator is the one whose details are specified in the domain, and REGRU - logger, if the administrator has not changed, then savingleb, says is true, it is too late, send a request for domain transfer in your account through the same form https: // www. reg.ru/domain/service/transfer_services

- I looked, well knowing their data transfer a ride back to your account.

- But, it turns out (if the mail is hidden) where it took this information (together with the passport)?

Well, this is an obvious hole in regru why they created it?

PS Hmm, I have a domain name (domain administrator is not changed by this operation.). And manage other account.

TC, but in your panel, it should be!

Аэройога ( https://vk.com/aeroyogadom ) Йога в гамаках ( https://vk.com/aero_yoga ) Аэройога обучение ( https://aeroyoga.ru ) и просто фото ( https://weandworld.com )
xatabich10
Site user since 23.09.2014
Offline
44
#9
nadejda:
- I looked, well knowing their data transfer a ride back to your account. - But, it turns out (if the mail is hidden) where it took this information (together with the passport)? Well, this is an obvious hole in regru why they created it? PS Hmm, I have a domain name (domain administrator is not changed by this operation.). And manage other account. TC, but in your panel, it should be!

The domain in your account, and I do not see those. reported that the support data domain owner change to another. That is, I seem to have not the administrator. What is a trap. Pulled domain and all exactly yet. I have created an application to the department to check the documents, too, but still silent.

---------- Posted 10.06.2020 at 16:36 ----------

bums:
The administrator is the one whose details are specified in the domain, and REGRU - logger, if the administrator has not changed, then savingleb, says is true, it is too late, send a request for domain transfer in your account through the same form https: // www. reg.ru/domain/service/transfer_services

Tech support said data domain owner change and return the domain of the same form is impossible. Nonsense.

Jet D.
Site user since 08.12.2008
Offline
403
#10

xatabich10, so it is a known hole in them, her one hundred years in the afternoon, on a regular basis such themes appear.

Apply to the authorities, then write to the registrar to suspend operations with the domain.

Or just return the domain itself (via the same form without authorization :)) and transferred to another registrar where the domain transfer according to the standard procedure (from the control panel with the confirmation link sent to your email in case the gTLD), rather than a passport picture which to draw - it is 5 minutes. Well, my passport, since its data are known, who do not need :)

Домены от $0.59! (https://regway.com) 500+ доменных зон, 20+ способов оплаты и 10 лет стабильной работы Регистрация и продление доменов .RU и .РФ от 150 ₽! (/ru/forum/377815) Доступен реселлинг и API!

To post a new comment, please log in or register