Internet

New Domain Transfer Policies from Nov 12th

The new ICANN transfer policy taking effect from Nov 12th will change the way domain transfers – and I fear hijacks – will take place…

The new registrar will only send an authorization email to the email address of the administrative contact based on the domain name's WHOIS record. Whoever has access to that email must either confirm or deny the request.

But here's the change: whether you receive it or not, the default result is that the registrar or reseller MUST release the domain name from their systems & transfer it to the new one.

Standard exceptions still apply, though:

  1. Domain must still be paid. Better you do this at least 30 days before expiration.
  2. Domain must not be "locked".
  3. Domain must not be in any sort of dispute.

Assuming at least those 3 exceptions don't apply to your

domain name, your transfer will push thru without a hitch.

I wonder what impact features like a "WHOIS Guard" (where your credentials are hidden from the public) will have on domain transfers – and what type of scam the hijackers will find…

Acutally "all" you have to do is perform a DNS spoof/hijack, manipulate the contact addresses for your desired domains and then receive those confirmation mails… something like that would probably work, or?

Source: ICANN new transfer policies take effect Nov. 12

Average rating
(0 votes)

Similar entries

  • Wow – just noticed that probably all the customers of the domain-registrar net-speed.com are sort of angry on ex-partner register.com…

  • If you want to ease the process to lookup WHOIS data, get your whois bookmarklet from whois.sc – the fastest whois service I know for us-related domains… unfortunately they don't support many european country TLDs like .de, .at etc… And…

  • Google rocks with it's latest feature – Google DomainPark allows domain name registrars and large domain name holders to unlock the value in their parked page inventory. DomainPark delivers targeted, conceptually related keywords and ads from the Google AdWords…

  • DomainKeys implementation really sucky

  • Google Backlink Checker Tool Weaker – or better: stupid broken