uniregistry fake transfer

[findtim]

hi, just got this tonight, has anyone had one of these as it looks pretty official, but its certainly not true as i have nothing to do with them.

----------------
We need a ���form of authorization��� please.

Attention: ***@******.com.au

UNIREGISTRAR CORP has received a request from Domain Manager on Oct 22, 2017 for us to become the new registrar of record.

You have received this message because you are listed as the Registered Name Holder or Administrative contact for this domain name in the WHOIS database.
Please read the following important information about transferring your domain name:

You must agree to enter into a new Registration Agreement with us. You can review the full terms and conditions of the Agreement at
https://uniregistry.com/legal/registration-agreement.
Once you have entered into the Agreement, the transfer will take place within two (2) calendar days.
The transfer will not change the expiry date of your domain name.
Affected Domains for this action
**************.com.au
If you WISH TO PROCEED with the transfer, please go to our website at the following url to confirm (note if you do not respond by Oct 29, 2017, *************.com.au will not be transferred to us.).
Approve transfer

Please note that all registrars must comply with the .au Domain Name Suppliers' Code of Practice (http://www.auda.org.au/policies/current-policies/2004-04-.au-domain-name-suppliers-code-of-practice) and auDA's transfers policy (http://www.auda.org.au/policies/auda-2013-02).
If you DO NOT WANT the transfer to proceed, then don't respond to this message.

If you have any questions about this process, please contact help@uniregistry.com.
----------------

it then has a simple button to approve, which looks to actually go to uniregistry !
------------
i'll check it out monday with auda as i have NEVER had one of these before.

tim

 

[chris]

Hi @findtim - yes I got one of these about an hour ago. I think it's a legit transfer attempt, have reported it to Uniregistry.

 

[eBranding.com.au]

Yep, I got one too.

 

[findtim]

mine was for what i would call a "significant" domain name, were yours?

tim

 

[eBranding.com.au]

mine was for what i would call a "significant" domain name, were yours?

tim

No, it wasn't for a 'significant' domain. The transfer email I got was for AustralianOutback.com.au. They could've aimed much higher!

 

[findtim]

mine is for a low $xx xxx domain

 

[findtim]

stupidly , i am actually glad i am not alone

 

[snoopy]

Given there is no payment required for .com.au transfers I could imagine this scam working to a degree.

 

[neddy]

I've had this happen on two different occasions, and reported it immediately to Heather Pierre from Uniregistry ( I met her at NamesCon; and in Australia when she came out with FS). She is on the ball!

Both times there were simple and identical explanations. Someone was moving their domains to UniReg from another registrar, and they did a bulk transfer in. Their list was obviously not up to date, and so they included domains that they may have "owned" at one time. That is why as registrant I got the transfer request email.

Hopefully this is a similar instance and not some scam.

 

[findtim]

this domain i purchased from OMG.

 

[eBranding.com.au]

this domain i purchased from OMG.

The former owner of my domain was also OMG.

Both times there were simple and identical explanations. Someone was moving their domains to UniReg from another registrar, and they did a bulk transfer in. Their list was obviously not up to date, and so they included domains that they may have "owned" at one time. That is why as registrant I got the transfer request email.

Hopefully this is a similar instance and not some scam.

I reckon that's it.

 

[Andrew Wright]

I got one too. Changed the domain password just to make sure.

 

[Joel]

I received one, I opened a ticket with Uniregistry and they said that the transfer approval email goes out prior to the user entering the authcode for the domain. I can only assume that even if someone did accidently approve the transfer, it wouldn't go through unless the domain password/authcode was also correct.

 

[Scott.L]

I've got the email, it seems like a much broader net is cast.

 

[DomainNames]

Yes I got them also over recent months.

 

[DomainNames]

auDA have a look into this.

 

[geodomains]

I got one as well

 

[snoopy]

The ability to transfer a .com.au without any payment being made probably helps domain thieves.

I'd say this relates back to bad policy in terms of only allowing 2 year registrations and renewals with a certain number of days of expiry (something which AUDA has still not fixed). This prevents the usual practice of a renewal and a transfer being combined.

 

[boppity]

I got one on October 22, 9.20pm EST.

 

[thelostagency]

I got just one of these for one of my premium domains which might have also been owned by OMG in the past, I filed a support ticket and they said they warned the owner of the account not to do it again. Downside is that you can't implement domain locks for AU domains like you can for other domains so if you weren't paying attention or actually using their service could have accidentally clicked the link.