Re: domain name stolen and retrieved the whole story (GoDaddy security mechanism has serious loopholes)

On the two day of the weekend, I spent a lot of pain, but I can't do anything, except waiting for me to have no choice. I can't even tell anyone that my domain name is stolen. I guess the hacker must be copying my website at this time. He has not yet copied it, and in order not to let me find out, he has not changed the DNS server of the domain name. Once he was finished, he would immediately get rid of DNS, but I had to pretend that I didn't know the domain name was stolen, because if he knew I had found the theft, he didn't have to hide it again, and he would change the DNS immediately. If he changes the DNS, the consequences will be unthinkable. The advertisers who work with me will come back to me immediately, and a large number of people will come to ask me what is going on. In case he uses the website to swindle the advertiser, or to hang up the horse directly on the website, or move to the pornographic website, even if it comes back in the future, these responsibilities will be borne by me, and the reputation of the site for so many years will be completely destroyed. So I have to rush GoDaddy to accept my complaint as soon as possible before he changes DNS. Once the GoDaddy starts to accept, they will lock up my domain name so that no one can operate the domain name, including transfer, transfer, or modify the DNS. But the process of admissibility of GoDaddy also takes a week at least. If the hacker imitated me and replaced the DNS, GoDaddy began to accept it, and at least ten and a half days in the middle would be controlled by hacker. I can not let him know that I am appealing to GoDaddy, otherwise he will change DNS immediately, in the short-term interest. It feels like you know someone is holding a gun behind you, and you don't dare to run, and if you have nothing to do, you will shoot at once. But even if you don't run, he can shoot at any time. At this time, I used to sit on pins and needles, trembling with fear, sleeping and worrying, and anxious to describe it.

4 23, Monday, on Monday, at this time I found that the domain name has been stolen 7 days, from the hacker to change my domain name information has been 15 days, the longer the time, the less the possibility of accepting the acceptance of GoDaddy. At 9 o'clock in the morning, the Jinniu District Public Security Bureau called me and said I had reported my situation to the leaders of the superior. They could not handle this thing over there, and let me go to a police officer in Chengdu Public Security Bureau. It's really playing the ball. Still with a glimmer of hope, I went to the Chengdu Public Security Bureau, and after finding the police officer, I made a detailed statement to him. He understood a little more than the former police officer, but he said it was similar to the police officer, meaning that they had no way of doing it. He said they had previously received a case on which the web site was hung up, because the hacker used a foreign VPN landing, and eventually the hacker could not find it anywhere. He suggested that I want to find a more powerful hacker domain name black back, that I can come back or black, but the other is designed to do this, they may not know how to prevent. Besides, the hacker in the dark, all the information is false. Even if he wants to find someone to come to black, he has no aim. It is harder to come back than to go to heaven. So I insisted on putting the case on file. After I said the case was put on file, the public security organs just started the investigation. Once the hacker changed the domain name DNS, if he parsed the domain to the domestic server, it could find out who rented the server through the machine room. By looking for the IP address on the server, it might be able to find out where the hacker was. If the hacker changes the DNS and hangs on the advertising Coalition on the website, it can also ask the advertising alliance to provide the payee information of the related account. As long as the hacker is in China, he is not afraid of catching him. The police officer says it is not impossible to file a case, but to provide a specific amount of loss, and if the loss is fixed, the asset assessment report, such as an accounting firm or an asset appraisal company, can be filed after the report of the price bureau or other qualified institutions. Let me prepare the information first, and then bring the information together next time.

on Monday afternoon, I also went to the temple to ask God for the Buddha. I can't do anything now. I can only expect a lawyer to help me get it back. I felt like a destiny, and the intertwined coincidences made this result. I didn't know whether I could eventually dissolve the sudden natural disaster, but I knew that once the domain name was not back, I might have nothing, I could not imagine, only praying in front of the gods, Pray that I can pass the disaster safely.

when I came back, I immediately contacted the accounting firm and the asset appraisal company in Chengdu, but I asked several people, either to say that there was no qualification to assess the intangible property, or to be too expensive, and the lowest price of the less than 10 thousand of the assessment they did not answer. Only in April 24th did I find an asset appraisal company in Beijing and give me a good 6000 yuan to make a report for me. Finally, I received an evaluation report in April 29th, but it was Labor Day holiday. I had to wait until May 2nd to register.

4 23, on the evening of 23, the lawyer used my mailbox to reply to the customer service department of GoDaddy. The letter said that the domain name has been transferred to other accounts, and the domain name information has been changed. Now we only want to bring back the original GoDaddy account and ask if they have any policy to take back the account. The lawyer said that the reason why my domain name was stolen was that the account was stolen, so the domain name must be retrieved first. After the mail passed, the second day GoDaddy didn't answer, and I asked the lawyer to stop sending an email to them, and the lawyer said, and so on. They might have been dealing with them. But third days, GoDaddy still didn't answer. I spent another 2 days in the torment, and I think GoDaddy may have no longer reclaim me through the previous mail, and it's no longer useful to send them to them in my mailbox. I just hope that a lawyer can send a letter to GoDaddy as soon as possible. Perhaps this more formal mail would have been a bit of a effect.

4 26 in the early morning, the lawyer finally sent a letter to the withdrawal Department of GoDaddy, the lawyer's letter stated the details of the domain name theft, but did not mention the problem of security. GoDaddy replied in April 27th, but the answer was exactly the same as the answer to my first mail. It said, "we can't help you because the change has taken too long." The lawyer sent the lawyer's letter to the Department of legal affairs of GoDaddy and the domain name dispute Department (the GoDaddy department is really many, this domain name dispute department is only after the domain name enters the arbitration process related matters), the domain name dispute Department replied on the same day, said that according to the ICANN policy, the domain name registrar did not get the arbitration agency's verdict or the court In the case of judgment, there is no right to modify any domain name. On the morning of 28

4, the lawyer sent the lawyer's letter to ICANN's forwarding email box, transfer-questions@icann.org. The lawyer said to see if ICANN could put pressure on GoDaddy. If it still doesn't work, it will only go to arbitration. But at the beginning, the lawyer said that arbitration could not win, I did not have a registered trademark, and others failed to arbitrate, once I failed the arbitration, then ICANN and GoDaddy will not pay any attention to me again, my domain name will not be back completely. So I said, instead of going to arbitration, I'd better go to the U. S. court to prosecute GoDaddy not to do the responsibility, this time I have a domain name stolen, and GoDaddy no mail notice to me a significant relationship, GoDaddy must take the corresponding responsibility, the prosecution of GoDaddy may be a bit more successful.