Incident · Response · Coverage
webtechs.com was the home of the HTML validation service from Dec 1994 until Network Solutions yanked it out from under us on 18 March 1999:
Connolly, Dan W. (DWC4) admin@WEBTECHS.COM Hal Software Systems 3006 Longhorn, Suite 113 Austin, TX 78758 (512) 834-9962 Record last updated on 16-Dec-94. Database last updated on 13-Apr-99 15:39:22 EDT.
We have recently discovered that you were invoiced twice in September for the same subscription period for the domain name WEBTECHS.COM. You are only responsible for payment on ONE of the invoices. If you are remitting payment via check, either invoice stub can be submitted with the payment. However, if you are remitting payment via credit card please use the following invoice information.
Invoice number: 2590680
Domain Name: WEBTECHS.COM
Mark pays the invoice.
Registrant: VIRTUAL DOMAIN BUYERS - webtechs.com (WEBTECHS3-DOM) VIBORGVEJ 13, 1 DK-7800 SKIVE, NA NA DENMARK Domain Name: WEBTECHS.COM Administrative Contact, Technical Contact, Zone Contact: Christensen Chabert, Tom Frank (TFC14) webmaster@JADER.COM +45 97512839 (FAX) +45 96140000 Billing Contact: Christensen Chabert, Tom Frank (TFC14) webmaster@JADER.COM +45 97512839 (FAX) +45 96140000 Record last updated on 18-Mar-99. Record created on 18-Mar-99. Database last updated on 3-Apr-99 21:42:11 EDT. Domain servers in listed order: NS1.SUPERB.NET 18.104.22.168 NS2.SUPERB.NET 22.214.171.124
Since then, we're doing everything we can think of to get the domain back:
From email@example.com Mon Mar 22 11:56:38 1999 Date: Mon, 22 Mar 1999 12:52:40 -0500 (EST) To: Mark Gaither <firstname.lastname@example.org> From: email@example.com Subject: Re: [NIC-990322.621d] Hijacked domain Reply-To: firstname.lastname@example.org X-MTS-LoopDetect: InterNIC_Registration_Services This is an automatic reply from Network Solutions to acknowledge that your message has been received. This acknowledgement is NOT a confirmation that your request has been processed. If you need to correspond with us regarding this request, please be sure to reference the tracking number [[NIC-990322.621d]] in the subject of your message. Regards, InterNIC Registration Services
Business Affairs Office
He claims there was a fourth invoice:
|invoice #||service period||sent||paid|
|960918.275||Dec'95-Dec'96||19 Sep 1996||19 Oct 1996|
|90749||Dec'96-Dec'97||26 Nov 1997||22 Dec 1997|
|2538481||21 Sep 1998||(bogus/ignored)|
|2590680||Dec'97-Dec'98||23 Sep 1998||9 Nov 1998|
|3283176||Dec'98-Dec'99||20 Nov 1998|
|3283176 (2nd notice)||23 Dec 1998|
|3283176 (3rd notice)||7 Jan 1999|
Mark never received the fourth invoice.
"Three weeks ago I couldn't access my site, and then I got a call from a lady at the Library of Congress wondering if I had changed it to a porn site," said Gaither. "That really tarnishes WebTechs' and my name, so I'm flabbergasted."
InterNIC did, indeed, drop over 18,000 domain names on the night of Sunday February 28. [...]
Again. This involves domains that were paid in full, and inspite of that fact InterNIC removed the domains in clear violation of their "contract." Their attitude toward most of those involved is one of, "Tough sh*t!" without even caring that they are in the wrong or that they are destroying people's lives and businesses.
Mike Sandburg to nanog