In this post I will tell you about how the domain names are hacked and how they can be protected. The act of hacking domain names is commonly known as Domain Hijacking. For most of you, the term “domain hijacking” may seem to be like an alien. So, let me first tell you what domain hijacking is all about.
Domain hijacking is a process by which Internet Domain Names are stolen from its legitimate owners. It is also known as domain theft. Before we can proceed to know how to hijack domain names, it is necessary to understand how the domain names operate and how they get associated with a particular web server (website).
The Operation of a Domain Name is as Follows:
Any website say for example gohacking.com consists of two parts. The domain name (gohacking.com) and the web hosting server where the files of the website are actually hosted. In reality, the domain name and the web hosting server (web server) are two different parts and hence they must be integrated before a website can operate successfully. The integration of domain name with the web hosting server is done as follows:
-
After registering a new domain name, we get a control panel where in we can have a full control of the domain.
-
From this domain control panel, we point our domain name to the web server where the website’s data (web pages, scripts etc.) are actually hosted.
For a clear understanding let me take up a small example:
John registers a new domain called “abc.com” from an X domain registration company. He also purchases a hosting plan from Y hosting company. He uploads all of his files (.html, .php, javascripts etc.) to his web server (at Y). From the domain control panel (of X) he configures his domain name “abc.com” to point to his web server (of Y).
Now, whenever an Internet user types “abc.com”, the domain name “abc.com” is resolved to the target web server and the web page is displayed. This is how a website actually works.
What Happens When a Domain Name is Hijacked?
Now, let us see what happens when a domain name is hijacked. To hijack a domain name, you just need to gain access to the domain control panel and point the domain name to some other web server other than the original one. So, to hijack a domain you need not gain access to the target web server.
For example, a hacker gets access to the domain control panel of “abc.com”. From here the hacker re-configures the domain name to point it to some other web server (Z). Now whenever an Internet user tries to access “abc.com” he is taken to the hacker’s website (Z) and not to John’s original site (Y).
In this case the John’s domain name (abc.com) is said to be hijacked.
How the Domain Names are Hijacked?
To hijack a domain name, it is necessary to gain access to the domain control panel of the target domain. For this you need the following ingredients:
-
The domain registrar name for the target domain.
-
The administrative email address associated with the target domain.
These information can be obtained by accessing the WHOIS data of the target domain. To get access to the WHOIS data, go to www.whois.domaintools.com, enter the target domain name and click on Lookup. Once the whois data is loaded, scroll down and you’ll see Whois Record. Under this, you’ll get the “Administrative contact email address”.
To get the domain registrar name, look for the words something like: “Registered through:: XYZ Company”. Here XYZ Company is the domain registrar. In case if you do not find this, scroll up and you’ll see ICANN Registrar under the “Registry Data”. In this case, the ICANN registrar is the actual domain registrar.
The administrative email address associated with the domain is the backdoor to hijack the domain name. It is the key to unlock the domain control panel. So, to take full control of the domain, the hacker will have to hack the administrative email associated with it. Email hacking has been discussed in my earlier post: How to hack an email account.
Once the hacker takes full control of this email account, he will visit the domain registrar’s website and click on forgot password in the login page. There, he will be asked to enter either the domain name or the administrative email address to initiate the password reset process. Once this is done, all the details to reset the password will be sent to the administrative email address.
Since the hacker has the access to this email account, he can easily reset the password of domain control panel. After resetting the password, he logs into the control panel with the new password and from there he can hijack the domain within minutes.
How to Protect the Domain Name from Getting Hijacked?
The best way to protect the domain name is to protect the administrative email account associated with the domain. If you loose this email account, you loose your domain. You can read my earlier post on how to protect your email account from being hacked. Another best way to protect your domain is to go for a private domain registration.
When you register a domain name using the private registration option, all your personal details such as your name, address, phone and administrative email address are hidden from the public.
whenever a hacker performs a WHOIS lookup for your domain name, he will not be able to find your name, phone or the administrative email address. Thus, the private registration provides an extra security and protects your privacy. Even though it costs a few extra bucks, is really is worth for its advantages.
I hope that this article has helped you. You can express your feedback through comments.
I am Srikanth Ramesh, a computer engineer from India.
49 Comments
rexter
July 5, 2009 at 1:48 PMSrikanth
July 6, 2009 at 10:08 PMRajan
July 13, 2009 at 8:18 PMmubiru charles
July 15, 2009 at 6:24 PMShah
July 29, 2009 at 10:49 AMTETETETE
September 24, 2009 at 12:19 AMCI
October 6, 2009 at 2:58 AMsilver
December 5, 2009 at 12:14 PMMe
January 8, 2010 at 7:10 PMKing_smith
January 16, 2010 at 5:10 AMRajesh
January 20, 2010 at 1:21 PMCherokee
January 26, 2010 at 5:15 PMArun Satyarth
February 4, 2010 at 8:23 PMSrikanth
February 5, 2010 at 2:28 PMHarsh Daftary
February 5, 2010 at 10:04 AMvikas
February 22, 2010 at 11:02 PMkingasty
March 7, 2010 at 5:50 PMsatish
March 8, 2010 at 2:44 PMaakash30jan
March 20, 2010 at 10:57 AMshibashis
April 17, 2010 at 9:16 PMmatermind
May 12, 2010 at 5:25 PMEdidiong
May 25, 2010 at 10:01 PMJohn Paul Praveen
August 30, 2010 at 8:08 AMtausy
September 7, 2010 at 3:23 PMNasruminallah zeeshan
September 11, 2010 at 12:56 AMIkki
October 15, 2010 at 8:02 PMhooshmand
December 15, 2010 at 2:08 PMNitish Raj
January 30, 2011 at 8:13 PMSubash
February 18, 2011 at 7:10 AMjohn
February 22, 2011 at 1:26 PMrupam
March 8, 2011 at 6:30 PMsuraj
March 27, 2011 at 9:18 PMRAJASEKAR
March 28, 2011 at 8:13 PMshazin
April 2, 2011 at 4:42 PMSachin
May 27, 2011 at 3:11 AMolabodex
June 14, 2011 at 4:12 AM??????? ?????? ?????
August 10, 2011 at 9:02 PManonymous
August 22, 2011 at 9:00 PMsamninder
September 16, 2011 at 4:05 PMwww.mocua.com
January 11, 2012 at 3:05 AMparshant
June 4, 2012 at 11:18 PMIshan
December 12, 2012 at 7:01 PMHexmate
December 30, 2012 at 12:38 AMAnjali
January 21, 2013 at 3:27 PMBalkrishna
February 27, 2013 at 12:41 PMRAJIV SARKAR
March 29, 2013 at 11:45 PMGolden
April 12, 2013 at 4:03 PMAmit
April 20, 2013 at 10:24 PMelectrician job
May 12, 2013 at 11:12 PM