Revision Legal attorneys regularly assist individuals and businesses that have been the subject of domain theft. Recently, we have learned of one individual that may be connected to these activities.
Specifically, we are aware that multiple domain names have been reported as stolen and now list an individual by the name of YINZHONG XIE as the Registrant on WHOIS records. These records also display an email of W2KKUUICOM@GMAIL.COM.
If you have lost access and control over your domain names, and you now see a registrant named YINZHONG XIE on the relevant WHOIS records, it is suggested you take immediate action to recover your property.
Our Internet attorneys have handled these types of matters and understand the stress and confusion that comes with domain theft. Often times clients are facing losses of extremely valuable domain names. Understanding this pressure, we work as quickly as possible to expedite the judicial process to return the domain names to their rightful owner.
If you are facing domain theft issues, contact our attorneys today through the contact form on this screen.
What Is Domain Theft?
Domain theft — also called domain hijacking — occurs when a bad actor gains unauthorized access to a domain registrar account and transfers a domain name out of the rightful owner’s control. The transfer is accomplished without the owner’s knowledge or consent, and by the time the owner discovers the theft, the domain may have been transferred through multiple registrars, making recovery more complex.
Domain names can be worth thousands, hundreds of thousands, or even millions of dollars. Short, memorable domain names in popular top-level domains (.com, .net, .org) are particularly valuable. For businesses that have built their operations around a specific domain name, the loss of that domain can be catastrophic — redirecting customer traffic, damaging brand reputation, and disrupting email communications instantly.
How Domain Theft Occurs
Domain theft typically occurs through one of several methods:
- Account compromise. The thief obtains the domain owner’s registrar login credentials through phishing attacks, password database breaches, or social engineering of registrar customer support staff.
- Registrar social engineering. The thief contacts the registrar’s customer support team, impersonates the account holder, and convinces the registrar to transfer the domain or change the account credentials.
- Unauthorized transfer. Once inside the account, the thief disables the domain transfer lock, generates an authorization code (EPP code), and initiates a transfer to a registrar under the thief’s control.
- Expired registration exploitation. A domain that lapses into an expired state can be acquired by a third party through the registrar’s expiration redemption process or an auction.
Immediate Steps After Discovering Domain Theft
If you discover that your domain name has been stolen, speed is critical. The longer a stolen domain remains in the thief’s control, the more difficult recovery becomes. Take the following steps immediately:
- Contact your registrar. File an immediate report with your current or former registrar. Explain that your account was compromised and request that the registrar initiate an emergency recovery process.
- Document everything. Preserve all records of your original registration, renewal history, WHOIS records, and any communications with the registrar.
- Check the WHOIS record. Identify who now appears as the registrant. Note the registrar to which the domain was transferred and the registrant email address.
- Report to ICANN. File a complaint with ICANN’s Compliance Department if you believe the transfer violated ICANN’s Transfer Policy.
- Retain legal counsel immediately. Domain theft cases require rapid legal action to prevent the domain from being transferred further and to initiate judicial proceedings for recovery.
Legal Remedies for Domain Theft
Several legal mechanisms are available to recover a stolen domain name:
- UDRP Proceedings. If the domain theft is connected to trademark infringement — for example, the thief registered the domain in bad faith to trade on your trademark — a UDRP complaint before the World Intellectual Property Organization (WIPO) or the National Arbitration Forum (NAF) can result in a transfer order within approximately 60 days.
- In Rem Jurisdiction Under the ACPA. The Anticybersquatting Consumer Protection Act, 15 U.S.C. § 1125(d)(2), allows a trademark owner to file an in rem action in the federal district where the registrar is located to obtain a court order transferring the domain.
- Federal Computer Fraud and Abuse Act Claims. Unauthorized access to a registrar account to transfer a domain name constitutes a violation of the Computer Fraud and Abuse Act, 18 U.S.C. § 1030, which provides both criminal penalties and a private civil cause of action.
- State Law Claims. Conversion, civil theft, and unfair competition claims under state law may also be available depending on the jurisdiction and the facts of the case.
Contact Revision Legal’s Domain Theft Attorneys
Domain theft is a serious legal emergency that demands immediate, experienced legal counsel. Revision Legal’s Internet attorneys have successfully recovered stolen domain names for clients and understand the urgency that these matters require. If your domain has been stolen or you see YINZHONG XIE listed as a registrant on your domain’s WHOIS record, contact Revision Legal immediately at 855-473-8474 or through the contact form on this page.
UDRP and ACPA: Legal Remedies for Domain Theft
Victims of domain theft have two primary legal avenues for recovery: the Uniform Domain-Name Dispute-Resolution Policy (UDRP) and the Anticybersquatting Consumer Protection Act (ACPA). Understanding the differences between these remedies is critical to choosing the right strategy for your situation.
The UDRP is an administrative process administered by the Internet Corporation for Assigned Names and Numbers (ICANN). A UDRP complaint is filed with an ICANN-accredited dispute resolution provider—most commonly WIPO or the National Arbitration Forum—and resolved by a panel of arbitrators. To succeed, a complainant must prove three elements: (1) the disputed domain is identical or confusingly similar to a trademark or service mark in which the complainant has rights; (2) the respondent has no legitimate rights or interests in the domain; and (3) the domain was registered and is being used in bad faith. Bad faith indicators include a pattern of registering domains to prevent legitimate owners from using them, registering for the purpose of selling to the trademark owner at a profit, and using the domain to disrupt a competitor’s business.
The UDRP is faster and less expensive than federal litigation, typically resolving within 60 days. The remedy is limited to domain transfer or cancellation—no monetary damages are available. When domain theft involves actual unauthorized access to a registrar account rather than cybersquatting, the UDRP may still apply, but the factual record must clearly establish that the current registrant lacks any legitimate interest in the name.
The ACPA, codified at 15 U.S.C. § 1125(d), provides a federal court remedy for bad-faith registration, trafficking in, or use of a domain name that is identical or confusingly similar to a distinctive or famous trademark. Unlike the UDRP, the ACPA allows for monetary damages—including statutory damages ranging from $1,000 to $100,000 per domain—as well as injunctive relief and attorney’s fees in exceptional cases. Courts consider a non-exhaustive list of nine bad-faith factors under the statute, including the registrant’s intent to divert consumers, the offer to sell the domain for financial gain, and whether the registrant provided false contact information.
Practical Recovery Steps After Domain Theft
If you discover that your domain has been stolen or transferred without authorization, acting quickly significantly improves your chances of recovery. The following steps outline the recommended course of action:
- Document everything immediately. Take screenshots of WHOIS records, DNS settings, registrar account logs, and any communications related to the domain. This evidence is essential for both UDRP proceedings and federal litigation.
- Contact your registrar. Most accredited registrars have fraud and abuse teams. File a formal complaint and request that a hold or lock be placed on the domain to prevent further transfers while the dispute is resolved.
- File a complaint with ICANN. ICANN maintains a compliance department that handles reports of unauthorized transfers and registrar policy violations. An ICANN complaint creates an official record and may prompt the registrar to act.
- Secure your email and online accounts. Domain theft often follows a broader account compromise. Change passwords, enable multi-factor authentication, and audit login activity on all accounts associated with the domain registrar and hosting provider.
- Consult an internet attorney. The choice between a UDRP proceeding and ACPA litigation depends on the specific facts, the strength of your trademark rights, the availability of monetary damages, and the urgency of recovery. An experienced internet lawyer can evaluate your options and file the appropriate proceeding immediately.
Time is of the essence in domain theft cases. The longer a stolen domain remains in unauthorized hands, the greater the harm to your brand, your search engine rankings, and your business relationships. Revision Legal has handled domain recovery matters and understands the urgency that these cases demand. Contact our team today to discuss your options.
