Someone took control of a domain you own
A hijacked domain — moved after a hack, a social-engineered registrar transfer, or by a departed contractor — is recoverable, but the clock matters. We combine fast registrar escalation, the right dispute route, and court injunctions where a name risks being moved again or sold on.
How it works
hijackresponse
first movetransfer-reversal request
evidencelogs · WHOIS history · email trail
routesregistrar · dispute · court
timelinedays to weeks
The steps
- Request a transfer reversal from the losing registrar under ICANN policy.
- Lock related domains and DNS, and reset compromised accounts.
- Preserve evidence: access logs, WHOIS history, email and chat trail.
- Pursue the dispute route or a court injunction if the name is at risk of being moved.
- Restore control, then harden with registrar lock and monitoring.
What it costs
Forum filing fee
—
varies by route
Our legal fee
from $2,500
scoped after triage
FAQ
My domain was transferred without permission — what first?
Act immediately: contact the losing registrar to request a transfer reversal under ICANN policy, lock related assets, and preserve logs and WHOIS history as evidence.
Is a hijack the same as cybersquatting?
No. A hijack is unauthorized control of a name you already own; cybersquatting is a third party registering your brand. The recovery routes differ.