[Note] How to avoid purchasing blacklisted domains?

Black domain names (abbreviated: black domains) are domain names of unknown origin. Most of these black domain names are obtained through illegal channels. After such domain names are purchased, they will cause associated disputes, resulting in the huge loss of domain investment "losing both money and the domain"!

In recent years, as the domain investment market has been rising, all parties want a slice of the cake, so lawbreakers exploit security vulnerabilities to carry out theft. A representative incident with relatively large domestic influence is the case of "in 2014, a large number of domains at X网 were stolen and transferred overseas"; you can search related terms on Baidu to view it. Recently, because the domestic domain market has been rising, many black domains from foreign platforms such as godaddy have flowed into China, so that platforms such as X名 require domains transferred in from abroad to "submit seller identity proof for re-review"; otherwise, they cannot be traded or transferred out within half a year.

Recently, because some platforms have tightened controls, hackers have set their sights on the 西部数码 platform again. This week, several black domain inflow incidents occurred in succession at 西部数码. Let's first look at the cases:

Case 1:

User A learned through a QQ group that User B had a three-letter .com and was eager to sell it, at a price of around 250,000. After discussion, both parties decided that B would first transfer the domain from godaddy to the 西部数码 platform (mainly because X名's review of domains transferred in from abroad is too strict, making trading impossible), and then conduct a PUSh transaction on the 西部数码 platform.

After User A paid on the 西部数码 platform, the PUSH transaction was successful, and User B submitted a withdrawal request. Because the withdrawal amount was relatively large, the 西部数码 domain department became more alert. Investigation found that this domain had just been transferred in from abroad; the seller could not provide the corresponding materials, could not provide the actual source of the domain, and was unwilling to reveal his true identity. Afterwards, 西部数码 temporarily froze the withdrawal, informed the buyer of the relevant situation, and reminded him of the possible related risks. Later, the buyer contacted the seller, but the seller disappeared and was basically unreachable. Later, under the intervention of 西部数码, the transaction was terminated. The buyer's payment was refunded. Just one day later, godaddy contacted 西部数码, stating that the domain was involved in theft. Currently, 西部数码 has frozen the domain and is conducting a related investigation. If the situation is true, the domain will be recovered by godaddy. User A was only one step away from losing 250,000!

Case 2:

One three-letter .com + one four-letter .com domain name.

The two parties communicated through a QQ group, with a "big shot" providing guarantee, and the seller would be paid after the domains were successfully transferred into 西部数码. At present, these 2 domains have been successfully transferred in, and the transaction payment of more than 100,000 yuan has been paid to the seller by the intermediary. The original domain owner and the original registrar godaddy have contacted 西部数码, stating that these 2 domains are involved in theft. Currently, 西部数码 has frozen these 2 domains and is conducting a related investigation. If the situation is true, the buyer's more than 100,000 yuan will be lost!

"I received it while acquiring domains in a QQ group. This was a transaction negotiated with the seller. He also provided me a list, saying it was the list of godaddy domains he held. It went through a guarantee transaction by a big shot in the circle. He provided the transfer code to the guarantor, I gave the money to the guarantor, he provided the transfer code to me, I transferred it in at 西部数码 with the transfer code, and after the transfer, the guarantor paid him. Currently the money is already in the seller's hands; the transaction amount is a low six-figure sum. I did think about whether this domain was a black domain, but the big shot in the circle said no news of this domain being stolen had recently broken out, and these two domains had not changed whois for a long time, and the price also matched a cash-out price, so it should not be a black domain, so I bought it. Afterwards I felt I should not have bought it, after all, buying such an expensive domain."

So how can you avoid buying black domain names?

1. Look at the sales channel and sales attitude.

For many black domains, the seller will definitely not sell through formal channels, and often sells in places with huge amounts of information, such as QQ groups, WeChat groups, and domain forums. Moreover, they will certainly tell you things like: recently short on money, selling at a low price, only for today.

When you ask him why he does not sell through formal channels, he will answer you: he does not want to pay the handling fee. For higher-priced domains, it is recommended to use the "domain intermediary" function of a professional domain trading platform. The trading platform will charge a certain handling fee, but it will investigate both parties to ensure the buyer does not buy a black domain. Trading domains privately carries relatively large risks, especially for domain transactions with larger amounts; in order to save about 3% in transaction fees, you may lose even more.

Even if you want to trade a domain privately, the buyer must conduct a detailed background check on whether the domain is a black domain, such as the seller's domain source, screenshots of transaction details for registration and renewal, etc. Especially important: for transactions with larger amounts, be sure to require the seller to trade under his real identity. You need to ensure that the seller's receiving bank card name is the same as his ID card information, and the same as the domain owner in the domain whois information. It is best to have the seller provide a photo of himself holding his ID card. For a thief who steals domains, he has a guilty conscience and generally does not dare to provide a similar real name; they all trade through false identities.

Domestically, there are currently multiple domain trading platforms, relatively well-known ones such as: 易名, 西部数码, 爱名, 玉米网, etc. Although these platforms cannot completely eliminate black domains, they at least add an extra layer of security. The trading platform will verify the seller's identity information, and will also review the domains flowing in and review abnormal transactions.

2. Look at the pricing.

The sales price of black domains is mostly lower than the market price. Because of a guilty conscience, a black domain cannot stay in his hands for too long; if time passes, the original owner will definitely discover it. Therefore, it is generally dumped at a low price. Buyers are advised not to harbor illusions and especially not to be greedy.

3. Look at the source of the domain.

At present, there are relatively many black domains flowing into China from foreign platforms Godaddy and ENOM. Be extra careful with domains whose original registrar is these 2 platforms! The main reason is, first, these 2 platforms have a long history, have many good domains, and are also watched more by hackers. But Godaddy does not have two-factor authentication by default. Hackers can enter other users' accounts through credential stuffing or cracking email passwords, etc., then modify the domain's whois information and obtain the transfer code online. Domestic platforms are relatively more complete in this regard; generally, for transferring out domains, they require SMS verification or security question verification and other measures, to prevent the possibility of domain theft caused by account password leakage! When 西部数码 transfers out a domain, it uses multiple measures such as password, security question, and verification code. In 13 years, there has not been a single case of domain loss.

If the seller matches all three points above, or is very close to them, then you must be extremely careful and guard against it. In the actual transaction process, as a buyer, you also need to note: do not harbor illusions, and especially do not be greedy.

The huge profits of the domain market tempt everyone, but often the greater the temptation, the higher the risk. Do not easily believe special offers that suddenly pop up from channels such as QQ groups and WeChat groups.

Always remember: Pie will never fall from the sky, but a trap may very likely suddenly grow on the ground.