Unauthorised domain transfer from freeparking.co.nz to register.com

Forums › IT Pro and developers › Unauthorised domain transfer from freeparking.co.nz to register.com

YouKnowIt

8 posts

Wannabe Geek

#247736 19-Feb-2019 19:31

So I have a .com domain name which has been happily registered with Freeparking.co.nz (previously 2day.com) with no problems.

I was checking some config on Cloudflare and discovered that it's been transferred to register.com without my knowledge or authorisation.

I received an email from Freeparking on 14/06/2018 as follows but it looks like clicking the button (Freeparking staff assured me that it was safe) has resulted in my domain moving across at some stage.

Has anyone else been affected by this? Do you know why? I've logged a ticket with Freeparking but was interested if anyone else has experienced this.
(I've scrubbed domain and contact details from the text below)

"This is in regards to the following account:

Domain: domainname.com
Email Address: email@email.com
Phone Number: +64.211234567
Address:

Register.com is now required by ICANN (the regulating body for domain registrations) to have all domain owners confirm their email address contact information or their domain will be deactivated. If your domain is deactivated you will still own the domain but you will not be able to have a live website until you verify your contact information.

To ensure your domain remain active, please click the CONFIRM button below to confirm the email address we have for you is accurate. "

The last time I had to transfer a domain I had to provide the UDAI etc and it took some time. I'm surprised this was done without my consent.

Thanks,
Chris

1 | 2

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2183952 19-Feb-2019 20:09

UDAI is a New Zealand thing but .com domains have a similar code to request transfer - which you then have to authorise - I went through this while moving all my .com domains to Cloudflare registrar.

The ICANN contact confirmation email you received is a valid request - it seems register.com had your domain transferred before that email otherwise it would have been sent from the old registrar.

An option would be if Freeparking actually just wholesales register.com and your domain was always with register.com - I wouldn't know though, perhaps someone else could confirm...

YouKnowIt

8 posts

Wannabe Geek

#2183970 19-Feb-2019 20:42

Thanks for the response Mauricio.

Freeparking were my registrar previously but I have now found that deep in their Ts&Cs that they are a Reseller of Register.com for .com domain names.

networkn

Networkn
32350 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2183975 19-Feb-2019 21:04

I believe you are just seeing what wasn't exposed before. Nothing particularly nefarious, I don't think your domain is at risk.

Register.com are a nightmare to deal with, from reasonable personal experience, and I'd never register a domain with them by choice, but they are reliable if nothing else.

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2183976 19-Feb-2019 21:04

And there's your answer then. Your domain was always with register.com... Sneaky!

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2183977 19-Feb-2019 21:05

Since you already use Cloudflare, consider transferring the .com domains to their new registrar - you might still be in a queue but it worked for me, transferred a few .com domains in minutes...

yosha

11 posts

Geek

#2184307 20-Feb-2019 13:15

Pretty common for .nz registrars to offer .com and other TLDs through a wholesaler, just some do a better job than others when it comes to 'white labeling' things like the ICANN verification emails.

Not uncommon for this to raise suspicion with domain owners, as this ICANN policy was only introduced in late 2016.

YouKnowIt

8 posts

Wannabe Geek

#2184314 20-Feb-2019 13:33

That's a good idea. It's funny you mention migrating over to Cloudflare as my Registrar, I was considering shifting over to them.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

YouKnowIt

8 posts

Wannabe Geek

#2184316 20-Feb-2019 13:34

Good point, yeah I'm pretty sure it showed Freeparking as my Registrar in the past which is what spooked me.

Anyways all good now!

mattwnz

20146 posts

Uber Geek

#2184322 20-Feb-2019 13:42

Personally I prefer to deal with NZ owned and operated companies with domains, as they should be easier to get hold of if there are issues. Plus you are dealing with companies operating within NZ laws etc. I have had some really bad experiences with overseas registrars, and communicating with them can be a nightmare. One way is to test their communications by sending them some questions.

Behodar

10504 posts

Uber Geek

Trusted

Lifetime subscriber

#2184402 20-Feb-2019 15:26

yosha:

Pretty common for .nz registrars to offer .com and other TLDs through a wholesaler, just some do a better job than others when it comes to 'white labeling' things like the ICANN verification emails.

Not uncommon for this to raise suspicion with domain owners, as this ICANN policy was only introduced in late 2016.

Yep, I've been down this road. I bought my .net domain from registrar A, then later got a fairly dodgy-looking email from registrar B demanding that I update my details or my domain will be deactivated. I deleted the email, and a few months later my domain randomly stopped working.

I ended up moving it to a different registrar.

mattwnz

20146 posts

Uber Geek

#2184407 20-Feb-2019 15:32

Behodar:

yosha:

Pretty common for .nz registrars to offer .com and other TLDs through a wholesaler, just some do a better job than others when it comes to 'white labeling' things like the ICANN verification emails.

Not uncommon for this to raise suspicion with domain owners, as this ICANN policy was only introduced in late 2016.

Yep, I've been down this road. I bought my .net domain from registrar A, then later got a fairly dodgy-looking email from registrar B demanding that I update my details or my domain will be deactivated. I deleted the email, and a few months later my domain randomly stopped working.

I ended up moving it to a different registrar.

That is the problem with international domains, they send out an email every year to update the contact details. But there is no easy way to tell if it is legit, because that email often comes from the registrar itself. If the domain provider is a reseller, the email doesn't comes from them, but the registrar itself. So any scammer could also send out the same types of emails to try and get control of a domain by sending a fake link.

networkn

Networkn
32350 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2184416 20-Feb-2019 15:42

Behodar:

yosha:

Pretty common for .nz registrars to offer .com and other TLDs through a wholesaler, just some do a better job than others when it comes to 'white labeling' things like the ICANN verification emails.

Not uncommon for this to raise suspicion with domain owners, as this ICANN policy was only introduced in late 2016.

Yep, I've been down this road. I bought my .net domain from registrar A, then later got a fairly dodgy-looking email from registrar B demanding that I update my details or my domain will be deactivated. I deleted the email, and a few months later my domain randomly stopped working.

I ended up moving it to a different registrar.

This was neither the fault of provider A nor B but rather ICAAN. Changing providers will still result in this process being undertaken periodically and is actually for YOUR benefit as if there is an important issue re your domain, having current contact details, ensures they can communicate this to you effectively.

Behodar

10504 posts

Uber Geek

Trusted

Lifetime subscriber

#2184419 20-Feb-2019 15:48

An email from a provider I don't have a relationship with, demanding details, and threatening loss of service if I don't comply? It IS their fault for making an email that looks like a scam.

mattwnz

20146 posts

Uber Geek

#2184472 20-Feb-2019 18:02

Behodar:

An email from a provider I don't have a relationship with, demanding details, and threatening loss of service if I don't comply? It IS their fault for making an email that looks like a scam.

I thin kyou will find in the terms that your relationship is with the registrar that sent the emails, but it is the registrars fault that the emails are sent like that. I do wonder why those emails need to be sent anyway, because NZ domains don't require those emails to be sent.

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2184473 20-Feb-2019 18:05

The OP is talking .com domains.

1 | 2