zlacker

[return to "Zoho.com CEO says domain with 40M users suspended for abuse complaint"]
1. svembu+h3[view] [source] 2018-09-24 18:21:27
>>achyne+(OP)
Zoho CEO here.

Our domain was abruptly blocked by our registrar this morning. Our NOC team and myself tried to get in touch with them and they tell us "Contact our legal". Even I could not get in touch with anyone beyond their phone operator. The domain was restored, but as DNS takes time to restore, we are still facing issues. They later claimed there were abuse complaints about Zoho.com emails (which is our personal email service with millions of free and paid users). We received a total of 3 complaints from them and two of them have been acted upon and one is under investigation.

Once we dig our way out of this, we will find ways make sure no one takes down our domain again this way.

◧◩
2. belorn+wh[view] [source] 2018-09-24 19:54:42
>>svembu+h3
If you have 40M users I suspect the annual cost from the registrar is very small part of the budget. Get a registrar where you don't have to deal with a phone operator.

I work in this industry and it's a very clear separation between bulk registrars and those that maintain fewer but high value domain names. The latter usually give you a personal contact person to call and work proactively to deal with threats to companies' domain names and trade marks. I don't think I have ever heard of a domain being abruptly suspended by such a registrar.

The cost is usually 5x-10x that of the cheapest registrars so there is naturally a balance to be struck, and as I work in this industry I might be a bit biased. However the damage when waiting on the TTL when registries update NS records sounds very substantial when they first suspend and later restore a domain name in what sound as a very reckless behavior.

◧◩◪
3. svembu+hm[view] [source] 2018-09-24 20:36:10
>>belorn+wh
Yes, that is good advice. We are reviewing all our processes about domain registries right now. Major lesson learned, and I would encourage other companies to think this through and learn from our experience today.
◧◩◪◨
4. ethanw+5K[view] [source] 2018-09-25 00:31:11
>>svembu+hm
I learned this the hard way just a few months ago with Namecheap. Those guys dumped all of my personal information to some people (my name, address, phone number, etc.). I have kids in my home and all they offered me was $100 in Namecheap credit, which I didn't accept out of principle. I spoke with a lawyer and the privacy laws in the U.S. seem to make it not even worth going after them. Registrars basically can do what they want and it's hard to hold them accountable.
◧◩◪◨⬒
5. Someth+FS[view] [source] 2018-09-25 02:44:22
>>ethanw+5K
What people? Why are you scared of them? Should I be worried, as I have domains at namecheap.
◧◩◪◨⬒⬓
6. tomcam+KT[view] [source] 2018-09-25 02:59:07
>>Someth+FS
I’m in the same position and would love to hear more as well
◧◩◪◨⬒⬓⬔
7. ethanw+v01[view] [source] 2018-09-25 04:45:32
>>tomcam+KT
Here's a quick timeline.

I did some work for a client in 2017 who was starting a cryptocurrency business. This involved buying a domain name for him to transfer to him later.

Well in 2018 there was some internal strife in his business that ended with a lawsuit being started. The opposing party started sending subpoenas to Namecheap asking for all information from 2018 onwards in relation to his account. What ended up happening was they released all of my information about my purchases, domains, personal information(anonymized credit card info, my actual physical address, information about my other unrelated clients domains, etc.)... going back to the start of my account.. several years worth of data prior to 2018. All clearly out of scope of the subpoena they were served.

Not only that, Namecheap never notified me of this.. in violation of their own privacy policy. They're supposed to notify their customers of the release of their information in relation to subpoenas by email or certified mail. Instead I found out much later from my previous client when he was given a copy of all of my information. And presumably his opposing parties in the crypto space were also given all of my information.

Seems kind of messed up to release all of that erroneously, without warning... especially to shady people in the crypto space.. you know, with people getting kidnapped over this stuff.

TL;DR Namecheap will drop your info, even if you paid to protect it as soon as they're given a single demand letter. And they won't stop at just giving up the info that's asked for (with 0 fight and 0 notification to you) there's a chance they'll release ALL of your account information.

◧◩◪◨⬒⬓⬔⧯
8. tomcam+zb3[view] [source] 2018-09-26 01:46:09
>>ethanw+v01
Thank you for sharing that awful story. Sorry you had to go through it. Quite disappointing to a customer of Namecheap as well.
[go to top]