Earn Money Online With Aqeel Syed » Domaining

Improve Domain Name Security, Lessons Learned From Domain Name Hijacking

Aqeel Syed — Sat, 29 Aug 2009 03:15:23 +0000

Every bad thing, every hard time I faced in my life, I learned some lesson out of it. These lessons were hard to learn. Infact there is a positive attached with every negative situation. Worst times of your life makes you perfect.

Due to recent domain name hijacking I learned how to safeguard your assets online and to protect your identity. I’m at initial stages of my career as a web entrepreneur so this knowledge that I gained during this bad time will help me in the long run. Off course as a reader you can also benefit from my experiences.

So here we go with some quick security tips.

Domain Name Account Protection

Domain names are the cheapest thing when you build a website, you can buy for a few bucks while you pay lot more (hundreds or thousands of dollars) for hosting every year. Imagine if you are left without your domain name (your domain name is hijacked) what you have got? A hosting account with CMS/template files and a database! These files of your website are of no use for you without a domain name.

Its very important to register your domain name with a registrar that is secure and have a proven security record. I registered my domains with Name.com, they have pretty good security on domain accounts. If my account was hacked it was not the fault of domain registrar, my email account got hacked first and then cracker took control of my domain name account. However Name.com helped me out and I took my account back.

Hint Name.com offer an added layer of security with their name safe service, $20 yearly fee and you are more protected.

If you are looking for a proven security record. The only domain registrar that has a proven security record is Moniker.com. Moniker offers personalized security questions for each of your domain names. Even if someone cracked your ID & password with Moniker, they cannot move or change your domains without answering these security questions.

Domain registrar support service is also very important, what if your account is hacked and you cannot get to their support department for several days? Please research on their support response time before registering with them.

Your domain registrar should not be a reseller. Yes, if your domain registrar is a reseller, if he is a one man company. What if he closes his business or he get ill or die? Or worst move out of country, what will happen to your domain names? People those are registering domain names in India and Pakistan (or other small countries) with local companies are actually registering with domain resellers, these are individuals (with few exceptions) charging you high prices and putting you at a risk. Always register your domains with ICANN aggregated domain registrar.

Email address that you are using when registering domains is also important. If you (or your company) can afford get a secured email account (paid) for your domain names. Don’t go for free email services. Every time a domain is hijacked the reason come to know is free email services like Gmail, Yahoo! mail or Hotmail.

Use a separate email address for registering domain names, other then your general/personal email address.

Hint You should use a different email address in billing, contact and administration information in domain who is. Don’t use email address that you used with your account registration (account ID). For example, I registered my domain account with email ID xyz@mail.com while in who is information I used abc@mail.com. This way crackers don’t get know what email address is used to register that domain account.

You can also enable domain privacy to hide your contact details.

Network Integrity Monitoring
One thing that save me from lot of trouble in this domain hijack attempt is ‘Network Integrity Monitoring’. When cracker made changes with my domain names, I got an alert in email instantly and upon investigating I discovered that my domain account is compromised. If wouldn’t had ‘Network Integrity Monitoring’ may be it would have been too late for me to know about that. I got this service from sucuri.net. And another amazing this is, this handy service is free to use.

Your PC security is very important. Always use a good firewall, Anti virus and spyware removal software. Use McAfee Site Adviser when surfing online. Keep your windows updated with latest security releases.

Do you have any other ideas? Please feel free to share using comments.

Trouble Finding A Good Domain Name? Try These Domain Tools

Aqeel Syed — Wed, 26 Aug 2009 05:27:18 +0000

Worried about finding a good domain name? All one letter and even good 2 – 3 letter domains have been registered and you’re searching for a good domain for your next project. Don’t worry there are still good domains available, all you have to do is be creative and use a good domain suggestion tool. I still manage to register some good domain names with help of these tools.

Bust A Name is at top of these tools. Bust a Name suggests available domain names based on user-defined keywords.

After you add keywords, the tool suggests different available domains using your keywords and suggests synonyms to increase your possibilities. Bust a Name also has a dynamic search a la previously mentioned Instant Domain Search. If you’ve ever tried snagging a descriptive domain, you probably know that finding an unparked domain is a challenge. Bust a Name provides a nice set of tools for finding a good domain without resorting to gibberish and hyphens.

Domain hacks lets you find a domain that combines domain labels, especially the top-level domain (TLD), to spell out the full “name” or title of the domain, making a kind of pun, for example del.icio.us

MakeWords.com has advanced query features that allow you to refine your domain query for starting with, ending with, max letters, language rules random names and more and believe me it works like a magic.

Just Dropped is a website where you can search recently deleted domain names. You can find some good domain names from these recently deleted domain names but beware that there is a chance that you are going to register a domain name banned from search engines or black listed in Adsense.

DomainsBot is a domain search engine, give you suggestions and show availability of domain names. I’d personally used DomainsBot to find some really good domain names. It gives you an inline ajax auto complete feature for searching domain names.

What if your creative sense is dried up? Don’t worry use Word Mixer Enter 5 words and get 2-3 syllable results or use Dot-o-mator for mixing letters and to make up your own words and make up a nifty Web 2.0 domain name.

Split It! Before you finally register a domain name try Split It! It visually shows you how your domain name string will be split. Use this to avoid getting an accidentally funny domain name.

My Name.com Account with 14 Premium Domains Hijacked

Aqeel Syed — Thu, 30 Jul 2009 20:36:57 +0000

In past I blogged about domain name hijacking at syedaqeel.com and today I myself become a victim of domain hijacking.

I’d three very hard days, 4 days back my gmail account was hacked somehow and then the hacker cracked my Name.com account from there. I’ve 14 premium domains at Name.com which I was about to lose when I got an automatic alert through Sucuri.net that syedaqeel.com is not available. Domain was giving a 500 internal page error, I thought hosting for that domain is down (its placed on a shared hosting account), I waited for syedaqeel.com to become available. SyedAqeel.com become available after 24 hours, I decided to move it to my dedicated server to avoid further down time.

When I tried to login to my name.com account to change DNS settings, and what I found was surprising, after many tries with right password I was not able to login and when I tried to reset my password it showed that an email is sent at your hotmail.com address.

I was shocked! Yes, email was sent to someone else’s email address, as I used a Gmail account with name.com. It was confirmed that my Name.com account is compromised. My first reaction was to check how it happen and to be true, its almost impossible to crack a name.com account with brute force type attacks, as name.com have very good security.

As I checked who is for syedaqeel.com and thewondrous.com I found that contact, billing and administrator information is changed and a person with name of “Abbas Shafiee” and company name “Yamobile”.

I logged back to gmail and started checking my account that why name.com haven’t sent me a password change or wrong password notification, after going through my account I found some filters, when of them was set by hacker to automatically delete all emails coming from name.com

The first thing I did to check my system for viruses and couldn’t found anything suspicious. Next I changed passwords for all my important accounts.

So who is the cracker?

I Googled to find more about names in who is i.e, ”Abbas Shafiee” and “Yamobile”. When I dugg deep into results, I found some interesting pages. His full name is “Abbas Sufi Shafiee” and he used to run a blog at yamobile.blogpsot.com and also own a domain yamobile.org hosted at a free web host.

This search reveals that he is an Irani guy and a hacktivists, working against government. Has built some proxies to bypass Irani government’s internet filters. A few forum posts displayed that he is interested in Java scripts and his site at yamobile.org is about keyloggers. He is from Iran but using a fake US address in who is information.

July 28, 2009 at 3:19 PM

I sent an email to name.com informing them that my name.com account is compromised and started waiting for their reply. After few hours, I sent another email explaining their support in detail, what has happened and requesting to freeze my account so that he can’t transfer domains to any other registrar.

After waiting for 7 hours, I was so worried, so devastated and haven’t got any reply. I tried to contact them through twitter but didn’t found any reply.

It took me 9 hours, 3 emails from 2 different addresses, Twitter tweets, a phone call, a fax and finally a problem report at their GetSatisfaction to contact name.com support.

They sent me a few question, for those I replied promptly, waited for 5 hours to get their reply and guy at support shocked me by telling that it will take them 15 days to complete investigation.

15 days!!! I told their support that these are not just domain laying around, I have full developed websites on these domains & I don’t want to lose my readership.

Any how name.com locked that account so worries were less.

July 29, 2009

To expedite investigation process I sent name.com documents verified by Notary Public for my identity verification.

I sent an email to Aibek, admin of the top technology blog MakeUseOf.com (MakeUseOf.com was hacked in November 2008). I asked Aibek what to do in this situation, Aibek replied promptly giving some quick tips and asked me to make it public with detail and proofs.

Contacting The Cracker

On July 29 I sent an email to Abbas Shafie’s email address displaying in who is and asked him why did he hacked my account & now what does he want? His response was,

dude i bought these domains with a cheap price, i can show you that 300$ has been gone from my paypal account
dude i bought them….
Theft?

what i had to do now ?
can i report this to paypal ?

And when in next email I asked who sold you these domains? He said Aqeel Syed! What a joke it is! Apart from all this serious situation I kept laughing.

I sold him all my established domains for $300 as I need money and was in hurry. The fact is I pay $300 in hosting fee every month for these sites, these sites has generated $3000 in affiliate sales and I got business of $2000 from these domains. The other thing is he said I was paid by PayPal! Ah! I wish badly that PayPal should have been available in Pakistan. Shafiee even don’t know that PayPal do not support Pakistan, how false his accusation is!

July 29, 2009 at 11 PM
Name.com support informed me that investigation is almost complete and they will get back to me quickly. I was asked to create a new account where they will move my domains.

July 31, 1 AM

I’m still waiting to be contacted from name.com. They are good at what they do, but I’m not satisfied with their support. Even in a serious matter like that they are not replying, TheWondrous.com is down and I’m helpless. I can’t do anything about that site, frustrated waiting for name.com support to do something.

July 31, 3 AM Domains are back!

Finally I recieved a good email from name.com support, they had returned me my domains. Apart from initial disappointment name.com support helped me out. Its a good news, that theft ruined 4 work days and devastated a lot. Thank you all our readers, friends, twitter contacts, Aibek from Makeusof.com & name.com support for helping us in this bad situation.

Domain Name Hijacking: How Safe Your Domain Names are?

Aqeel Syed — Tue, 28 Apr 2009 08:54:55 +0000

Each week, nearly 3500 domains are hijacked from rightful owners. You could easily fall victim to domain theft, which if left unchecked can seriously impact the value of your business. Domain hijacking is the process by which internet domain names are stolen from the rightful registrant. Domain Name Hijacking has been an issue for almost as long as domain names have been around. In 1995 sex.com was stolen from Gary Kremen it’s registrant in a very high profile case. Gary Kremen fought in court for 8 years to get back his domain name.

There is another type of domain hijacking, its called Reverse Domain Hijacking. The term reverse domain hijacking refers to the practice of acquiring domain names from owners by accusing them of violating trademarks with the domain name, and demanding that the domain be transferred. One such case is reported here by KO. PKNIC, the registrar for .pk domains, terminated the domain name djuice.pk without informing it’s owner, and transferred it to Telenor, who has a trademark by the same name.

2008 was a rough year for Godaddy – they were hit hard twice, in February and again in November and December.

Back in 2007, one of my domains registered with HostNDomain, a Pakistani domain registrar were hijacked by a guy running a desi porn site. I highly doubt the hijacker was an employ of HostNDomain. After 4 days of forceful communication with their support I was able to transfer that domain from HostNDomain to Name.com

When registering your domains, always check that your domain registrar offer login tracking/emails, history and IP restrictions. If a kid can hack ebay.de then your domain can also be hijacked very easily.

Here are some tips for domain name hijacking prevention by Brett Lewis, Internet Attorny.

Always maintain accurate contact information with your registrar or services provider – In the event of a theft, if the Whois information for a domain is inaccurate, it will be difficult for a registrar or service provider to determine who the rightful registrant of the domain name should be. Don’t make things more difficult for yourself by providing phony contact information. If you want to hide your name use domain name privacy.

Register Your Domains with a Reputable Registrar – There are literally hundreds of registrars to choose from and thousands upon thousands of resellers. (Like in my case with HostNDomain.com, domain was not registered with a reputable company.) Complaints about lack of service and responsiveness at shady service providers abound. If your domain name is hijacked from one of these providers, you may have a difficult time getting anyone to listen. Domain name resellers are not under contract with ICANN and are not directly obligated to follow the same transfer confirmation processes that ICANN requires of registrars. Many do, but there is a greater risk that a reseller will not follow best practices, making it more likely that your domain name can be hijacked. Also look for a registrar that sends a transfer confirmation email prior to transferring a domain name.

Never Allow your Listed Email Address to Expire – Your email address is the key to unlocking your domain names. Your listed registrant or administrative contact email address can be used at many registrars to reset the controlling user name and password for your account. In addition, under ICANN’s Transfer Policy, a gaining registrar usually obtains the required transfer confirmation through electronic mail, sent to the registrant or administrative contact email address on file for the domain name. If you allow your email address to expire, a hijacker will steal your domain name, provided it’s worth stealing.

Protect your email address. Protect your email address that you used to register your domain name, a hacker can use your email address to access and transfer your domain name.

Keep User Names and Passwords Secure – Do not share these with anyone, unless they have an absolute need to know.
Use a Whois Privacy Service – If your contact information, including your email address, is private, it will be harder to spoof.

Lock Your Domains – This is self-explanatory. Many registrars offer a “locking” service, and will not allow a transfer of a locked domain.

Monitor Your Portfolio – Routinely monitor your portfolio for any unauthorized changes. The sooner that a hijacking is discovered, the better chance that you have of recovering your domains. This can also be done through an automated script.

Follow these steps to decrease the chance of your domain names being stolen. These steps may also help you in recovering your domain names if they are hijacked.

Adsense for Domains is Open for Everyone

Aqeel Syed — Mon, 19 Jan 2009 18:55:39 +0000

We earlier talked about Adsense for Domains in our post about making money from domains. Google had this AdSense product for domains, but only people with huge portfolios could have access to it.

Today they are opening that product up to all publishers, so even if you have few domains laying around you will now be able to put AdSense on them.

The good news is that it will be more money that what it was possible to make before with the domain parking companies (if nothing else you are taking out the middle man).

To use this feature, you just need to log into your AdSense account and click on the “AdSense Setup” tab, and there should be an “AdSense for domains” option there. Currently it is only available to U.S. AdSense publishers though, but Google should expand it to everyone else soon.