What is this domain hijacking (මොකක්ද මේ Domain එකක් Hijack කරනවයි කියන්නේ)





                 Domain hijacking is a process by which Internet Domain Names are stolen from it’s legitimate owners. It is also known as domain theft. Before we can proceed to know how to hijack domain names, it is necessary to understand how the domain names operate and how they get associated with a particular web server (website).

The Operation of a Domain Name is as Follows:

                Any website say for example infotec1st.com consists of two parts. The domain name (infotec1st.com) and the web hosting server where the files of the website are actually hosted. In reality, the domain name and the web hosting server (web server) are two different parts and hence they must be integrated before a website can operate successfully. The integration of domain name with the web hosting server is done as follows:
  1. After registering a new domain name, we get a control panel where in we can have a full control of the domain.
  2. From this domain control panel, we point our domain name to the web server where the website’s data (web pages, scripts etc.) are actually hosted.

What Happens When a Domain Name is Hijacked?

                To hijack a domain name, you just need to gain access to the domain control panel and point the domain name to some other web server other than the original one. So, to hijack a domain you need not gain access to the target web server.







                For example, a hacker gets access to the domain control panel of  “infotec1st.com”. From here the hacker re-configures the domain name to point it to some other web server. Now whenever an Internet user tries to access “infotec1st.com” he is taken to the hacker’s website and not to original site
In this case the original site (infotec1st.com) is said to be hijacked.

How the Domain Names are Hijacked?

           To hijack a domain name, it is necessary to gain access to the domain control panel of the target domain. For this you need the following ingredients:
  1. The domain registrar name for the target domain.
  2. The administrative email address associated with the target domain.
            The administrative email address associated with the domain is the backdoor to hijack the domain name. It is the key to unlock the domain control panel. So, to take full control of the domain, the hacker will have to hack the administrative email associated with it.
Once the hacker takes full control of this email account, he will visit the domain registrar’s website and click on forgot password in the login page. There, he will be asked to enter either the domain name or the administrative email address to initiate the password reset process. Once this is done, all the details to reset the password will be sent to the administrative email address.


                Since the hacker has the access to this email account, he can easily reset the password of domain control panel. After resetting the password, he logs into the control panel with the new password and from there he can hijack the domai

How to Protect the Domain Name from Getting Hijacked?

               The best way to protect the domain name is to protect the administrative email account associated with the domain.Another best way to protect your domain is to go for a private domain registration.When you register a domain name using the private registration option, all your personal details such as your name, address, phone and administrative email address are hidden from the public.

I hope that this article has helped you this is the things as I know regarding the domain hijavking. If you can express your feedback through comments it's better.hope you