3 ms·
Public info also makes it easier to steal a domain. Long ago, I (being childish) stole a domain from some random person who pissed me off in a video game. I sp
by dissident 15y ago
Public info also makes it easier to steal a domain.
Long ago, I (being childish) stole a domain from some random person who pissed me off in a video game. I spent three days calling the registrar's offices (along with a friend) over fifty times, writing the name of each service representative down so that we didn't dupe up on anyone and raise any red flags. (It was a huge registrar, though not GoDaddy.)
We were able to use the public info available on their whois records to weasel our way into getting additional account information from the employees. We'd simply call and ask for a small piece of the account information in a nonchalant manner, they'd ask for info we've already obtained from previous calls, and usually they'd either give us the info or say "we don't have access to that information".
The hardest part was getting the last four digits of the credit card on the account. Since we had all the rest of the user's information, we called maybe twenty times trying to get those numbers. Some employees would say they can't see them, but they could. All it took was one really stupid representative:
"Yes, I'd like to confirm the credit card on my account before I file a form to retrieve my account back. I have two cards that end with the same last two digits, what are the first two digits of the last four digits"
[she doesn't understand so we confuse the hell out of her for minutes on end]
"uh... 2... 6."
"And the last two?"
"82"
"Thank you, I have the right card. Good day."
Had a good laugh, filed a form, emailed it in, stole their domain before they noticed, and never gave it back. I talked to the owner and eventually redirected his website back, and he forgave me.
Keep your whois info private if you're on a crappy registrar. Likely, the OP uses the same password everywhere and some random kid stumbled on his godaddy account and took the domain from under his nose.
- dandelany 15y agoWow. As much as I appreciate you coming forward and telling a good story about social engineering, this is really a total asshole move. I hope you look back on this experience with with no small amount of shame.