← All situations
Emergency Mode
Your domain is being taken
A domain you own is being transferred or its records have been changed. Call the registrar now, because transfers have a window in which they can be stopped.
What this assumes
- A computer, and a phone to call the registrar.
- Internet access, and an email address that is not on the affected domain.
Do these first
Containment. Minutes matter here and nothing else does.
- Call the registrar's urgent or abuse line and state that an unauthorised transfer or change is in progress.
- Ask for the transfer to be stopped and the domain locked immediately.
- Change the registrar account password and add a strong second factor.
- Check the name server and mail records for changes, since that is how mail gets diverted.
Afterwards
When the immediate situation is over, a plan is what keeps it from happening the same way twice. That needs an account; this page never will.
Build a plan