How to get domain name back?

[jepinto]

If ther's typing mistakes, my apologies in advance, I've tried to see if the middle finger of my left hand can do without a knuckle today, so things are rough right now.

My friend fell for one of those "if you don't renew your domain now, you'll lose it" mailings.  Her domain name is now held by Domain Registry of America  She has had no contact with them since she fell for the letter scam.

Questions
How hard will it be for her to get control of the name back?
She is ready to change web hosts.  How does she do it?  There appear to be no way for her to do anything.
From what I can read, the only way the owner of the name can transfer away from droa is to file a complaint with ICANN.  Am I misreading this?

How can people fall for these scams after all the bad press?

[krissel]

To be clear, did she merely renew her domain name through that registry? That is, they hold the registration for her domain?

Don't they have a control panel so she can go in and manage her domain? She should be able to go to another registrar (like GoDaddy) and apply to transfer the domain to them. She would also have to set up the domain to be free to transfer and be able to respond to the emails that the new registrar will send to her during the transfer process.

I've moved registrations several times. It takes a bit of time and some setup but reading through the policy page at Domain Registry, the only problem would be if there is a dispute in progress about domain ownership. That puts restrictions on the transfer timing.

[jepinto]

they hold the registration, are the admistatrive contact and the technical contact.

They've not sent her any control panel info.

Registration Service Provided By: Domain Registry of America
Contact: support@droa.com
Web:http://www.droa.com

Domain name: ******.com

Registrant Contact:
      *******
      Private Registration
      2316 Delaware Ave Suite #266
      Buffalo
      NY,   14216-2687    US
      866-434-0212
      866-434-0211
      privacy@droa.com
   
Administrative Contact:
      *****
      Private Registration
      2316 Delaware Ave Suite #266
      Buffalo
      NY,   14216-2687    US
      866-434-0212
      866-434-0211
      privacy@droa.com
   
Technical Contact:
      *****
      Private Registration
      2316 Delaware Ave Suite #266
      Buffalo
      NY,   14216-2687    US
      866-434-0212
      866-434-0211
      privacy@droa.com

It's ok, tell me if I'm more concerned than I need to be.

[krissel]

It looks like she renewed with privacy which lists the registrar rather than the real owner to avoid having her information open on the web.

How exactly did she register this? I've gotten those things in the mail but just shredded them.

What she needs to do is contact them with whatever means they provided when she signed up and get a username and password to her account (or the numbers and email on that page). From there she can control things. However she will probably have to wait a period of time before she can move the account.

 From DROA:

QUOTE

To transfer your domain name(s) you should first login to your account to lock or unlock your domain name(s) and/or to obtain the EPP "AuthCode" which is required to transfer domain services in an EPP registry (such as .org). Alternatively, you should contact your us to have your domain name(s) services locked or unlocked or to obtain the EPP "AuthCode." Only the registrant and the administrative contacts listed in the WHOIS information may approve or deny a transfer request. Without limitation, domain name services may not be transferred within 120 days of initial registration, within 120 days of a transfer, or 120 days of renewal, if there is a dispute regarding the identity of the domain name registrant, if you are bankrupt, or if you fail to pay fees when due. We will follow the procedures for both gaining and loosing registrars as outlined in ICANN's transfer policies. Transfer requests typically take five business days to be processed.

From GoDaddy's agreement:

QUOTE

4. Transfers of Recently Renewed Domain Names
You understand that if you are transferring a domain name that has been recently renewed there is the potential that the renewal year will be lost. The renewal year will be lost if: the domain name was renewed during the forty-five (45) day grace period after the expiration date had passed; and forty-five (45) days have not yet passed since that expiration date. You understand and agree that Go Daddy is not responsible for this lost year and that Go Daddy will not credit that year to your domain. You will need to review the registration agreement you have with your previous registrar to determine if you are due a refund or credit for the lost year. Please contact your previous registrar if you have any questions about the lost year. You understand and agree that Go Daddy will not intervene in the recovery of any such lost registration years that occur during the transfer of your domain name.

[sandbox]

QUOTE

How hard will it be for her to get control of the name back?

She didn't loose it, she moved it and that will cost her another contract expense if she moves again.
The registry includes server space, the information should be on her agreement and they should move her domain to their server.

QUOTE

She is ready to change web hosts. How does she do it?

She calls ASO or anyone else and has her domain moved, but since she's getting it for free, packaged in the registry why would she want the extra expense?

GoDaddy has the same promotions, as do others. You agree and authorize the registry to hold your domain name and as an extra bonus they give you server space. It might be a good deal? What's the numbers??

[Paddy]

Er, Kris & Jennie, these people are scum of the earth.
http://www.ftc.gov/opa/2003/12/domainreg.shtm
http://www.theregister.co.uk/2004/01/06/co...domain_slammer/
http://ask.metafilter.com/63781/Who-will-s...stry-of-America
(yes, years later, they're still at it...but you know that already)

http://forums.alwayswebhosting.com/showthread.php?p=8288

QUOTE

How do I get my money back?The Federal Trade Commission stipulated that upon consumer request DROA must refund any payment remitted to them, and compensate eligible consumers an additional $6.00 per domain name transfer to assist with fees incurred when transferring back to their original registrar. If you file a complaint with the FTC you may be entitled to additional redress if you experienced any loss of business or business expenses due to DROA’s scam. Contact Domain Registry of America at (866) 434-0212 or via Email at support@droa.com. They must credit your credit card within seven business days according to the ‘Truth In Lending Act’ (TILA).

In the future, make sure she pays the $9.99 for private registration. If the domain name is important, well, she'll have to fight DROA. Start with the FTC, contact DROA and let them know you know about the FTC ruling. Don't take no for an answer.If DROA has her credit card number and has billed her for anything, then have her tell the credit card company that she's been the victim of fraud and do a charge back. Vendors HATE it when you do that - they get slapped with charge-back fees. (and if it happens enough, the credit card companies will no longer deal with the merchant...surprised it hasn't happened with DROA)

More:http://blog.forret.com/2004/12/domain-regi...f-america-scam/ (this is funny - the blogger got a cease & desist letter from DROA!)

The guy who owns DROA has been a scammer for a while - DROA isn't his only fraudulent venture, apparently (same numbered company...different scam): http://www.cbc.ca/news/story/2002/05/29/In...ngs_020529.html

SB, this is NOT a good deal - her domain didn't need renewing. That's the whole scam. See all the links I posted. Do not give these people a red cent - they don't deserve it. And they're ridiculously expensive - $30 a year just for registration - they don't host! It's the equivalent of telephone slamming as far as I can tell.

[krissel]

Paddy, I know they are scammers. I've received those letters every year in the spring a couple months before my domains were to expire. They even sent them to my parents fax because I once used their fax number for something. My Mom got all excited and called me up telling me I had only a few days to renew, blah, blah.  I laughed of course and filled her in.

Those letters can be very convincing to people who are not aware.  Similar ones show up claiming to advertise my business or scan my website for security and optimization.  Yeah, sure, all for a fee of $184 for 6 months.  

As to the FTC ruling, apparently it was not finalized and is still in limbo so they continue. From one of your links:

QUOTE

Is there an actual, answerable question here, or are you just venting and seeking commiseration?

Yes, it's in the OP:

is there any kind of action/suit against the company now? If not, why not?

I'm not a lawyer and this is not professional consultation, but I do have access to a (massive) database tracking internet law happenings and the last I see of DROA is that FTC injunction (approved by the FTC) going back to the court for approval. I'm assuming that this is still in litigation 4 years later in the U.S. District Court for the Southern District of New York.

I've searched that court's site and seen nothing new, but the presiding judge is still there so presumably they're still in litigation. But that FTC proposed final judgment had a huge amount of provisions for making restitution for people defrauded and monitoring the company for future bad practices.

I guess it's just slow in getting that final judgment.

Unless there's something in the PACER or Westlaw databases which I don't have access to, that's the state of things.
posted by cowbellemoo at 11:58 AM on May 31

QUOTE

FTC suit is in civil court and seems to be the FTC-led equivalent of a class action suit brought by private citizens. .

So her best bet now may be to try to cancel any payment. Though while this may save her money it won't get control of her domain back unless she follows the transfer policy. If she gets involved with ICANN it may take her forever to get through the dispute process.

[Paddy]

I missed that bit, Kris.

In this link it seemed like all that was required was the judge's signature. FOUR YEARS and still no sig? That's pathetic.

Still worth a call to the FTC, IMHO, both to complain and to find out the status of things. But yes - if all else fails, ask for a charge-back. (did she actually give these people her cc number?)

[krissel]

Forgot.  I found this in the DROA agreement. While most registrars have the hold harmless stuff, I think the bond requirement for defending them is unbelievable.  

QUOTE

IF LAWSUIT(S) ARE THREATENED: If we are sued or threatened with lawsuit in connection with Service(s) provided to you, we may turn to you to indemnify us and to hold us harmless from the claims and expenses (including attorney's fees and court costs). Under such circumstances, you agree that you will, upon demand, obtain a performance bond with a reputable bonding company or, if you are unable to obtain a performance bond, that you will deposit money with us to pay for our reasonably anticipated expenses in relation to the matter for the coming year. Such deposit will be drawn down as expenses are incurred, with all account notices sent to the WHOIS contact information provided in association with your domain names and/or account. We shall not be obliged to extend you any credit in relation to such expenses and we may terminate the Services for a failure to make or renew such a deposit. We will return any unused deposit upon the later of one year from deposit or the conclusion of the matter.

[sandbox]

Paddy, I don't know that she is not agreeable with the contract she signed, Jen only indicated that she hasn't seen the web space. DROA is a re-seller for http://www.enom.com/ which is an American company in Washington, who in my opinion are the responsible party. Secondarily I would write to the last holder of the domain name and see why they released it to DROA. Push the issue from a victims position with the responsible parties. The last domain holder had a responsibility to protect the domain and only release it to legal registrars, and eNom has a responsibility to it's license as a registrar.

The last registrar released the domain to a know criminal and eNom continues to use know criminals to exploit the public. If DROA actually has space available that Jen's friend has not been able to locate, the issue may go away. Jen does not say that the domain account was not ready for renewal, it could very well have been?

If I had the domain name I might be able to digg for a location.

Jen did say that her friend was looking for her server location so my guess is that she bought the package that included server space. eNom needs to be held accountable under their license, DROA has no license.

[krissel]

This is from the DROA's domain agreement:

QUOTE

To transfer your domain name(s) you should first login to your account to lock or unlock your domain name(s) and/or to obtain the EPP "AuthCode" which is required to transfer domain services in an EPP registry (such as .org). Alternatively, you should contact your us to have your domain name(s) services locked or unlocked or to obtain the EPP "AuthCode." Only the registrant and the administrative contacts listed in the WHOIS information may approve or deny a transfer request. Without limitation, domain name services may not be transferred within 120 days of initial registration, within 120 days of a transfer, or 120 days of renewal, if there is a dispute regarding the identity of the domain name registrant, if you are bankrupt, or if you fail to pay fees when due. We will follow the procedures for both gaining and loosing registrars as outlined in ICANN's transfer policies. Transfer requests typically take five business days to be processed.

IMO it would be best for her to try to follow the established procedure for transferring her domain back to wherever she had it before. But she will have to wait the required period. At worst she will have only ended up paying an exorbitant fee for renewal, which is of course how they make their money off unsuspecting people.

[jepinto]

not typing much, hard with one hand-dang you don't miss them till they're gone

Thank y'all.

No, it was a check.

I will have her contact them for a control ppanel.  She can't remember when she did it, and she is gone for two weeks, so it's moot (ish) now.

I'm glad I wasn't "just seeing bogeymen under the bed".

[tacit]

QUOTE(krissel @ Aug 16 2007, 05:34 AM) <{POST_SNAPBACK}>

Forgot.  I found this in the DROA agreement. While most registrars have the hold harmless stuff, I think the bond requirement for defending them is unbelievable.  

QUOTE

IF LAWSUIT(S) ARE THREATENED: If we are sued or threatened with lawsuit in connection with Service(s) provided to you, we may turn to you to indemnify us and to hold us harmless from the claims and expenses (including attorney's fees and court costs). Under such circumstances, you agree that you will, upon demand, obtain a performance bond with a reputable bonding company or, if you are unable to obtain a performance bond, that you will deposit money with us to pay for our reasonably anticipated expenses in relation to the matter for the coming year. Such deposit will be drawn down as expenses are incurred, with all account notices sent to the WHOIS contact information provided in association with your domain names and/or account. We shall not be obliged to extend you any credit in relation to such expenses and we may terminate the Services for a failure to make or renew such a deposit. We will return any unused deposit upon the later of one year from deposit or the conclusion of the matter.

This does not mean that you can't sue DROA. It means that if you host a Web site, and because of your Web site someone sues (for example, if your Web site has proprietary information or defames someone or has copyrighted material on it or something), it is YOU, not DROA, who is responsible.

The key is this part: IF LAWSUIT(S) ARE THREATENED: If we are sued or threatened with lawsuit in connection with Service(s) provided to you, we may turn to you to indemnify us...

[antony]

I just received a similar scam the other day from a company called "Domain Renewal" (domainrenewalonline.com)



It is interesting to note that...

I got my .org domain from Go Daddy for US$ 8.99 per year (+ 20 cents ICANN fee). The price from (domainrenewalonline.com) is a staggering US$ 79.95 per year.

Further,

QUOTE

When Domain Renewal extends your domain no information will be changed in the “Whois” information section.

The expiry date information is part of WHOIS, it translates that US$ 79.95 will give you nothing.

[Paddy]

Where did you find the price, Antony? Just had a look at their web site and the price isn't listed anywhere.

The English translation of their site is atrocious - should be a red flag right there, along with the ridiculous price. Seems they're operating out of Belgium and/or the Seychelles, and they've been busy boys lately, judging by the number of comments on blogs and forums.

Yet another scummy reason for private registration.