Stolen Domain Recovery Process
What Is Domain Theft?
Domain theft (also called domain hijacking) occurs when a domain name is transferred or modified without the legitimate owner’s authorization. This can happen through compromised account credentials, social engineering attacks, unauthorized access to the registrant’s email, or exploitation of weak security settings.
Signs Your Domain May Have Been Stolen
- Your domain suddenly points to a different website or shows unfamiliar content.
- You receive unexpected transfer approval or completion emails.
- You can no longer log into your registrar account.
- Your domain’s WHOIS records have been changed without your knowledge.
- Your domain has been moved to a different registrar without your consent.
Immediate Steps to Take
1. Contact 10Corp Support
Reach out to the 10Corp support team immediately. Provide your domain name, account details, and a description of what happened. Our team will investigate and may place a temporary lock on the domain to prevent further changes.
2. Secure Your Accounts
- Change your 10Corp account password immediately.
- Enable two-factor authentication (2FA) if not already active.
- Check and update the email address associated with your account.
- Review recent account activity for unauthorized changes.
3. File a Complaint with ICANN
If the domain was transferred to another registrar without authorization, you can file a Transfer Dispute through ICANN’s Transfer Dispute Resolution Policy (TDRP). Visit icann.org/compliance to begin the process.
4. Contact Law Enforcement
Domain theft is a form of cybercrime. File a report with your local law enforcement agency and, if applicable, with national cybercrime reporting centers such as the FBI’s Internet Crime Complaint Center (IC3).
5. Gather Evidence
Collect and preserve all relevant documentation:
- Previous WHOIS records.
- Account activity logs.
- Email correspondence related to the domain.
- Screenshots of unauthorized changes.
How 10Corp Helps
10Corp cooperates fully with ICANN dispute processes and law enforcement investigations. We can assist by providing account records, placing holds on disputed domains, and working to restore legitimate ownership when evidence supports the claim.
Prevention Tips
- Always enable two-factor authentication on your registrar account.
- Use a strong, unique password for your account.
- Keep your registrant email secure and monitored.
- Enable registrar lock (also known as transfer lock) on your domains.
- Regularly review your domain settings and WHOIS information.
Acting quickly is critical in domain theft cases. If you suspect unauthorized activity, contact 10Corp support without delay.