What godaddy basically said is that once you activate it on the registrar end (ie: with godaddy) you can't disable it with godaddy any more, you have to do it via afternic.
Domains being listed in someone elses Afternic account
- Thread starter baldidiot
- Start date
What godaddy basically said is that once you activate it on the registrar end (ie: with godaddy) you can't disable it with godaddy any more, you have to do it via afternic.
Understood. As you say, you dont have it in afternic. So then that makes me think that as long it's not enabled at your registrar on a domain basis since it was transferred into your account it's meaningless. At least that is what I would hope is the case.
If it survives being transferred out and back in then that is scary.
Yes that's the theory. But this is how people are getting domains stolen - they get the fast transfer activation email from their registrar about one of their domains saying "click here". If you're not too savvy you might click it. Then whoever added it to afternic has the ability to steal it (or sell it).
There's multiple examples of this on the web.
The other issue that someone pointed out earlier in the thread, is that once fast transfer is enabled for a domain, it's possible that it might stay enabled for that domain for that registrar even if it changes hands. The fact that godaddy are saying they can't remove fast transfer once enabled supports this theory, because afternic would have no idea it had been sold (and thus the fast transfer status should be reset).
If that is true* then I could register a domain with godaddy, add it to afternic and then enable fast transfer. If I were to sell it to you via an interaccount transfer and you don't change registrar, then the fast transfer would still be active meaning that I could then steal the domain back simply by making a sale on afternic.
*I don't know if this bit is true, I'm going by what someone else said in the thread, but the logic is fairly sound knowing how useless godaddy can be. Especially if the registrar is unable to disable fast transfer once activated, because that implies permission has been given and can't be revoked (for some daft reason).
This is something that could be easily tested if anyone were so inclined.
Last edited:
Small update for a Saturday morning regarding the original domain that started the thread.
I didn't want to verify it on my afternic account (which is the only way to remove it from the fraudulent account) because it would associate it with our portfolio, which has stuff from our tag on it. And let's just say this domain is one that we're intentionally keeping separate (nudge nudge, wink wink).
After endless emails with afternic they said it was fine to set up a second throwaway afternic account purely for the purposes of verifying the domain. So at least there's that, even though it is a pain in the ass and a bunch of hoops that you shouldn't have to jump through.
But FYI for anyone else in the same situation, multiple accounts are fine with afternic.
I'm also just leaving it on the account just in case. But with a minimum offer of $999,999.
I didn't want to verify it on my afternic account (which is the only way to remove it from the fraudulent account) because it would associate it with our portfolio, which has stuff from our tag on it. And let's just say this domain is one that we're intentionally keeping separate (nudge nudge, wink wink).
After endless emails with afternic they said it was fine to set up a second throwaway afternic account purely for the purposes of verifying the domain. So at least there's that, even though it is a pain in the ass and a bunch of hoops that you shouldn't have to jump through.
But FYI for anyone else in the same situation, multiple accounts are fine with afternic.
I'm also just leaving it on the account just in case. But with a minimum offer of $999,999.
BG
Member
- Joined
- Jul 10, 2024
- Posts
- 30
- Reaction score
- 15
- Trophy points
- 9
I faced the same issue and then realised how it happen.. There was a major flaw that occurred when DAN.COM merged with GoDaddy.
Previously, DAN allowed users to add domains to their accounts without any verification. When the platform merged with GoDaddy, all those domains were automatically transferred to Afternic as if they were still owned by the original DAN account holders. This has led to thousands of domains being listed on Afternic without the actual owners' permission, resulting in automatic transfers without any acknowledgment from the real owners, grr!!
Now, imagine all the domains that were previously listed on DAN but later sold through other platforms like Sedo or private sales. If the sellers forgot to remove those domains from their DAN accounts (which many did..) before the GD merge, they were still pushed into Afternic without requiring any further verification.
It’s absolute madness!
Previously, DAN allowed users to add domains to their accounts without any verification. When the platform merged with GoDaddy, all those domains were automatically transferred to Afternic as if they were still owned by the original DAN account holders. This has led to thousands of domains being listed on Afternic without the actual owners' permission, resulting in automatic transfers without any acknowledgment from the real owners, grr!!
Now, imagine all the domains that were previously listed on DAN but later sold through other platforms like Sedo or private sales. If the sellers forgot to remove those domains from their DAN accounts (which many did..) before the GD merge, they were still pushed into Afternic without requiring any further verification.
It’s absolute madness!
You can still add to afternic without verification... I literally just added one myself and intentionally left off the verification to double check.
Also the domain that started this thread was one that I hand regged and has never been on dan or afternic. Last week someone else added it to afternic. It was nothing to do with the dan/godaddy migration, someone intentionally added it.
Last edited:
BG
Member
- Joined
- Jul 10, 2024
- Posts
- 30
- Reaction score
- 15
- Trophy points
- 9
Absolutely Nuts!!
I see you were thinking of transferring all your domains out of GoDaddy to protect yourself. Instead of doing that (which would cost you thousands in transfer fees if you have lots of domains), speak with your GoDaddy account manager and ask them to set you up with DTVS (Domain Transfer Validation Service).
This service ensures that no domains will ever leave your account without your explicit verification. When a transfer is requested, GoDaddy will: Call your registered phone number, then ask for your verification PIN, then also ask you for your 2FA authentication.. It's super secure e.g. You can't even push a domain between GD accounts without going through this process (which can be a headache, but its worth it for added security). Effectively what happens is.. If a domain is actioned to leave your account, it stays in a holding status until a member of GoDaddy verify you want to transfer it out
It’s super secure and will save you a lot of hassle. Hope this helps!
Best,
Barry