Domain Theft
The unauthorized transfer of a domain out of its rightful owner's control, often via account compromise.
- glossary
Domain theft is the end result of a successful domain hijacking attack: the name has been moved, via an unauthorized transfer, to a registrar or account controlled by the attacker, severing the rightful owner's access entirely. The attack typically begins with account compromise — through phishing, leaked credentials, or social engineering of registrar support — followed by disabling protections and submitting a transfer using the auth-code obtained from inside the account. Recovery is difficult and slow: ICANN dispute procedures can take months, and in the interim the stolen domain may resolve to malicious content or be transferred again. The best defenses are layered prevention: keep the transfer lock enabled, use strong unique credentials with hardware MFA, and register high-value names under registry-lock programs.
Related keywords
- domain theft
- unauthorized transfer
- account compromise
- domain security
- recovery
Contributors
Namefi is a collective of engineers, designers, and operators who obsess over building tools that make managing your onchain domain names effortless.
Victor Zhou is a technology founder and standards editor focused on digital identity and trust. He founded Namefi, edits Ethereum Improvement Proposals, and previously led smart-contract architecture work at Google Labs.
His work sits at the intersection of naming, ownership, and the systems people use to establish identity online. That perspective makes him especially interested in the way names move between personal meaning, public recognition, and digital infrastructure.
For Namefi, Victor edits and writes about domains as durable digital identity: how names become ownable onchain assets, how tokenization changes custody and trust, and what naming can learn from the systems people use to establish identity online.