Scams

Huge Bug Found in Godaddy – Lots of Options for Fraud

Posted in GoDaddy, Scams, Security on March 23rd, 2008 by Michael – 3 Comments

Rick reported this recently on his blog:

It appears GoDaddy.com gives you the option to cancel a transfer, after you have done an account change and the new owner has accepted the domain. How ludicrous is this? I’ve just had it happen a second time. Someone sends you a name, so you send them the money. The next thing they know, they pull it back! All they have to do is go to their account, go to pending account changes, check the box and click cancel. They can do this after it is finished!

Now in both cases it worked out fine because they had pulled it back because of a misunderstanding and quickly did another account change. It still leaves a huge door open for fraud.

I’m sure other registrars would let you pull back a domain as well, after you’ve pushed it.

I suppose it’s been around for a while, but this is the first time I hear about that and this could be a serious problem. Another reason to avoid godaddy and to be extra cautious, especially when dealing with new people.

Share

Don’t Broker Stolen Domains..

Posted in Forums, Scams on March 8th, 2008 by Michael – 3 Comments

i-has-money.jpg
In shade of recent events on DNForum, where some stolen domains were sold and others offered for sales and brokered, be very careful when asked to broker domains.

If a newbie member on a domaining forum asks you to broker a premium domain, there is a high chance it’s a stolen domain, otherwise why wouldn’t he do it himself? read more »

Share

How to Avoid Getting Scammed in Domaining

Posted in Google, Scams, Security, Tips on February 16th, 2008 by Michael – 4 Comments

scammerThis is a complete guide on domain scammers that shows how to recognize and avoid scammers while trading domains.

There are several popular scamming schemes:

1. Scammer sells stolen domains

How it works:

Scammer trying to sell quickly a stolen domain for a bargain price.

A domain can be stolen by hacking into the a email address associated with it – like yahoo, or hotmail; or by means of social engineering, e.g. if a scammer contacts the registrar support and pretends to be the owner of the domain who forgot the password. Stealing passwords is also possible through keyloggers and trojans installed on the domain owner’s computer.

How to avoid having a domain stolen?

- don’t use free email addresses in your domain contact details. Most people still do this and it puts their valuable domain assets as higher risk. Instead use an email address from your own domain.
- install and run an antivirus and antispyware software, update it frequently and run scans. Here is a good guide on cleaning your computer from spyware and viruses.
- always use strong passwords, random letters and numbers that are near each other on the keyboard. Use different passwords for everything and a password manager to keep track of them. Roboform is recommended. Change the passwords once in a while.
- keep your whois contacts and registrar information up to date read more »

Share