Does Your Domain Have a Registry Lock?
Summary: Attackers used WhatsApp to social-engineer a support agent at registrar OpenProvider into moving the domain e-hawk.net to a reseller account on Dec. 23, 2019, and three days later it was transferred to Public Domain Registry. The domain's owners, who had a registrar lock but not a registry lock, recovered it in under 48 hours only because they knew people at PDR, and DNSSEC bought them roughly 48 hours before encrypted traffic could have been intercepted.
What you should know: CSC data cited in the story found just 22 percent of domains tracked in Forbes' list of the World's Largest Public Companies have registry locks, and most domains cannot be moved for at least 60 days after a transfer - so recovery usually depends on personal contacts, not process.
Read the original at Krebs on Security ↗
- Topics
- Fraud & Scams
- Related
- ArcticRAT Cybercrime Gang Profiles Victim Finances With AI Cyber Risks · Nov 13, 2026Three People Arrested for AI-Enhanced Impersonation Fraud Cyber Risks · Nov 11, 2026Medicare scam calls, texts and ads: What to watch for this Open Enrollment Cyber Risks · Oct 14, 2026