Domain name security, theft, recovery and disputes
The directory

Every entry

Every entry on Hartzer.net in one place: the incidents that describe how control of a domain name is lost, and the controls that describe how it is held. Both lists are grouped by the discipline the entry belongs to, and every card carries the answer-first field — a recoverability status for an incident, a layer for a control — so the whole reference can be scanned before anything is opened.

Domain Security Incidents

11 entries
DisputedAbstract tilted diamond illustration representing Cybersquatting
Disputes and Bad-Faith Registration

Cybersquatting

A cybersquatted domain is held lawfully at the registry until a panel or a court says otherwise, which makes every route to it adversarial.

Read the entry →
Time-criticalAbstract pulse line illustration representing Typosquatting
Disputes and Bad-Faith Registration

Typosquatting

A typosquat does its damage by the hour, so the answer is takedown, blocking and suspension long before any panel decision could issue.

Read the entry →
DisputedAbstract prism facet illustration representing Reverse Domain Name Hijacking
Disputes and Bad-Faith Registration

Reverse Domain Name Hijacking

RDNH is a declaration inside a case the registrant already won. It moves no domain and awards nothing, and that is the part people misread.

Read the entry →
Time-criticalAbstract radiating spoke illustration representing DNS Hijacking
DNS-Layer Attacks

DNS Hijacking

An attacker edits your records or your delegation, and mail, logins and password resets quietly go somewhere you do not control.

Read the entry →
Time-criticalAbstract scattered dot illustration representing Domain Shadowing
DNS-Layer Attacks

Domain Shadowing

Attackers add subdomains rather than changing yours, so nothing breaks and nothing alerts you — while your reputation is spent.

Read the entry →
RecoverableAbstract ladder rung illustration representing Subdomain Takeover
DNS-Layer Attacks

Subdomain Takeover

The DNS record outlives the service it points at, and whoever claims that service next publishes at a name that is genuinely yours.

Read the entry →
Time-criticalAbstract gauge dial illustration representing Expired Domain Loss
Expiry and Lifecycle

Expired Domain Loss

A missed renewal starts a fixed sequence of grace periods. Each stage costs more than the last, and the final five days cost everything.

Read the entry →
RecoverableAbstract crossing beam illustration representing Domain Name Theft
Theft and Hijacking

Domain Name Theft

Theft moves the registration record itself. A remedy exists, but it gets harder every week the name stays gone.

Read the entry →
Time-criticalAbstract angled shard illustration representing Domain Hijacking
Theft and Hijacking

Domain Hijacking

Any unauthorized change to a domain's registration or delegation. Some versions reverse in hours; some take a year.

Read the entry →
DisputedAbstract stepped block illustration representing Unauthorized Domain Transfer
Theft and Hijacking

Unauthorized Domain Transfer

A domain moved between registrars without the real registrant's authorization. The TDRP exists for this, with narrow remedies.

Read the entry →
Time-criticalAbstract square grid illustration representing Registrar Account Compromise
Theft and Hijacking

Registrar Account Compromise

An attacker inside your registrar control panel is authenticated as you. Policy does not stop them; speed and registry lock do.

Read the entry →

Domain Security Controls

8 entries
DNSAbstract diagonal lattice illustration representing DNSSEC (DNS Security Extensions)
DNS-Layer Attacks

DNSSEC (DNS Security Extensions)

DNSSEC signs your DNS answers so resolvers can verify them. It fails closed, which is why it breaks sites.

Read the entry →
DNSAbstract stacked chevron illustration representing CAA Records
DNS-Layer Attacks

CAA Records

CAA names the certificate authorities allowed to issue for your domain. It constrains future issuance, nothing else.

Read the entry →
RegistrarAbstract contour line illustration representing WHOIS Privacy and Redaction
Registrar-Level Controls

WHOIS Privacy and Redaction

Privacy, proxy and mandatory redaction are three different things. Only one of them is optional, and all three cost you evidence.

Read the entry →
RegistrarAbstract spiral coil illustration representing Domain Monitoring
Registrar-Level Controls

Domain Monitoring

Monitoring compresses the gap between an unauthorized change and its discovery. Here is what to watch at every layer.

Read the entry →
RegistryAbstract nested ring illustration representing Registry Lock
Registry-Level Controls

Registry Lock

Registry lock freezes a domain in the registry database itself, so a compromised registrar account is not enough to move, delete or change it.

Read the entry →
RegistrarAbstract concentric arc illustration representing Registrar Lock
Registrar-Level Controls

Registrar Lock

The client* codes your registrar sets stop outside transfer requests — and stop nothing at all once an attacker is inside your account.

Read the entry →
RegistrarAbstract hexagonal tile illustration representing Transfer Authorization Codes
Registrar-Level Controls

Transfer Authorization Codes

The auth code is generated by your registrar, stored by the registry, and good enough on its own to move a domain. Treat it like a password.

Read the entry →
RegistrarAbstract orbiting dot illustration representing Two-Factor Authentication
Registrar-Level Controls

Two-Factor Authentication

Registrar lock, the transfer code, the nameservers and the contact email are all toggles inside one account — the one your password protects.

Read the entry →
Keep reading

Read by discipline instead

The same entries, grouped by the layer they act on — registration, DNS, lifecycle and dispute.

Browse by disciplineEvery entry

This is a reference, not a practice. Hartzer.net sells nothing, takes no engagements, and is not legal advice. Nothing here creates any relationship or preserves any deadline.

Top