Assess my case

Someone took control of a domain you own

A hijacked domain — moved after a hack, a social-engineered registrar transfer, or by a departed contractor — is recoverable, but the clock matters. We combine fast registrar escalation, the right dispute route, and court injunctions where a name risks being moved again or sold on.

How it works

hijackresponse
first movetransfer-reversal request
evidencelogs · WHOIS history · email trail
routesregistrar · dispute · court
timelinedays to weeks

The steps

  1. Request a transfer reversal from the losing registrar under ICANN policy.
  2. Lock related domains and DNS, and reset compromised accounts.
  3. Preserve evidence: access logs, WHOIS history, email and chat trail.
  4. Pursue the dispute route or a court injunction if the name is at risk of being moved.
  5. Restore control, then harden with registrar lock and monitoring.

What it costs

Forum filing fee
—
varies by route
Our legal fee
from $2,500
scoped after triage

FAQ

My domain was transferred without permission — what first?

Act immediately: contact the losing registrar to request a transfer reversal under ICANN policy, lock related assets, and preserve logs and WHOIS history as evidence.

Is a hijack the same as cybersquatting?

No. A hijack is unauthorized control of a name you already own; cybersquatting is a third party registering your brand. The recovery routes differ.