GoDaddy stole a domain [NamePros story] – Must Read!

GoDaddy Domain Cancellation: A Cautionary Tale from NamePros

Disclaimer: This piece summarizes ongoing discussions and should not be seen as a definitive conclusion. It presents a detailed overview of a complex domain-related incident as reported in a community thread and highlights the factors involved, without asserting any party’s guilt.

Overview
A controversy has emerged surrounding the GoDaddy domain registrar after a domain that was actively in use for a website was canceled by GoDaddy, seemingly without the owner’s initiation or authorization. The prior owner, known in the community as tbelfort, asserts that the cancellation was not a voluntary action on their part and presents documentation to support this claim. The discussion is evolving, with competing narratives from GoDaddy representatives and ongoing investigative coverage.

Key Facts Reported
– Unexpected Cancellation: On April 11 at 1:22 AM, tbelfort received an email indicating that they had canceled their domain—despite using the domain for an active website and having no reason to cancel.
– Security Posture: tbelfort used two-factor authentication (2FA) linked to an iPhone and a tablet and did not report any login codes or activity suggesting unauthorized access.
– Account Activity Evidence: GoDaddy login records reportedly show no login activity on tbelfort’s account between February 1 at 11:01 AM and April 11 at 3:47 AM (roughly 2 hours and 25 minutes after the cancellation email was received).
– Whois Change Timing: The domain’s Whois record was updated on April 10 at 23:18:35 (GMT), preceding the cancellation notification.
– Support Interactions: tbelfort engaged GoDaddy support multiple times, incurring around €50 in call fees. Piecing together the responses from various agents reportedly yielded conflicting explanations—some claimed tbelfort canceled the domain, others suggested a transfer to a different account (details withheld by support).
– Public Discussion and Response: A GoDaddy representative, listed as James (Director of Product Management), addressed the thread but indicated the matter should be resolved privately, and subsequently withdrew from public discussion. This has raised concerns within the NamePros community about transparency and resolution.
– Ongoing Clarifications: tbelfort continued to provide explanations and factual updates, while reports emerged that the domain had been canceled and registered by another party. The incident has gained traction through broader media coverage, including podcasts linked within the discussion thread, and GoDaddy has indicated that an internal investigation is underway.

Possible Explanations Considered (Not Endorsed)
– Forced Transfer via Afternic: Some community members speculated about a fraudulent listing or transfer mechanism associated with Afternic. This theory remains unverified.
– Automatic Deletion: There is also discussion about whether the domain could have been deleted automatically due to hosting content or policy infractions. This explanation is not universally accepted and is part of ongoing inquiry.

What This Means for Registrants
– Vigilance: If you hold domains with GoDaddy or any major registrar, monitor your account activity, renewal notices, and Whois records regularly. Unexpected changes warrant prompt investigation.
– Documentation: Maintain clear records of domain ownership, contact details, authentication methods (including 2FA), and any communications with your registrar.
– Community and Transparency: In complex cases, public forums and media coverage can help surface information that official channels may not immediately share. However, rely on verified sources and await formal conclusions from the registrar’s investigation.

Current Status and Next Steps
– The incident is under investigation by GoDaddy, with the community continuing to exchange updates and interpretations.
– Stakeholders and domain owners are encouraged to review the linked discussion thread for ongoing developments and to stay informed about any official statements or resolutions from GoDaddy.

Takeaway
This case underscores the importance of robust authentication, proactive monitoring of domain status, and clear communication channels with your registrar. If you have domains registered with GoDaddy, remain attentive to any unexpected notifications, and consider confirming ownership and status through independent tools and records while waiting for authoritative updates from the registrar.