Whois jonaslund.com

Hi, I’m Jonas Lund, the real Jonas Lund. I used to be the owner of jonaslund.com. I registered it in October, 2003 and it was mine for the following 9 years. The 12th of December 2012 I lost control over my domain, a core piece of my identity, through a series of unfortunate and ‘scammy’ events. Here’s the story how it all went down.

The Beginning

The story begins in October 2003. I was a young aspiring photographer living in San Francisco with my dad and sister, I had just finished high school in Sweden and packed my bags to spend the autumn on the west coast. When I wasn’t spending time in the borrowed dark room developing prints for my portfolio I was working part-time and unpaid in a b/w photo gallery and assisted some fashion photographers. I was nineteen years old.

Half way through my time in San Francisco I started working on my online portfolio, my first website. With a lot of help from my dad, who happens to be a software developer, I built the first simple portfolio to promote my photography.

Using the Internet Archive’s Wayback Machine, this is jonaslund.com in October 2003

When it came to the time for publishing the website, I needed a domain, a complicated Geocities url simply wouldn’t cut it if I wanted to be a serious, professional photographer. Looking through the web for a domain registrar I found MyDomain.Com, 10 US dollars for one years registration for jonaslund.com seemed like a bargain so I committed to the deal and registered jonaslund.com on the 10th of October, 2003. Once it was mine, I found a cheap web host and uploaded my content, I was in business, I had my own online portfolio under my name, with a dot com top level domain, everything was perfect!

The Loss

The 23rd of November I woke up freezing in Amsterdam, I had just returned from NYC two days ago and was still battling the jet lag and my bedroom was cold because of a forgotten open window. I checked my iPhone, like I normally do every morning and on the lock screen I saw a tweet from Aram that read

@jonas_lund all your servers are TANGO DOWN (email included) ...

— Aram Bartholl (@arambartholl) November 23, 2012

I was thinking, crap, what’s wrong with my web host, dreamhost, this time. I knew that they had had some problems over the last weeks so I wasn’t too surprise, but the one thing that I found odd was that my email was down. I’ve been using Google Apps for my domain the last 4 years and that’s separate from my web hosting, so if my email was failing that must mean that my domain’s MX records were off and the reason for that must be something in relation to the domain registrar, MyDomain.com. (The MX records of a domain name specifies how email should be routed with the Smtp protocol.)

I hurry logging in to my domain account to check and see if everything is in order, and to my total shock and surprise I see that jonaslund.com has expired, 45 days ago no less. I’m thinking to myself, how is this possible, I’m always in control over these kinds of things, always on top of keeping everything in check. Then I remember, that the last time I renewed jonaslund.com was over two years ago, and because MyDomain.com is a registrar that’s spamming a lot of unnecessary, unwanted and impossible to unsubscribe from emails, I had create a specific filter for them to put all their emails into my Whatever label in my Google Apps account. So I had missed the one time email notice about my domain registration expiring. Regardless of the reason, I needed to rectify this situation as quickly as possible, but before jumping ahead, let’s take a moment to understand how domain expiring works, this will also be of crucial importance for the ending of this story.

When a domain passes the expiration date it enters a hold period for thirty days where it can be renewed by the owner without any additional costs. After this period there’s, depending on the registrar, a five day SnapName auction phase, where the domain can be bid on in an auction and bought by a third party. If no one bids on the domain, the domain will enter the grace redemption phase for thirty days, where the domain can be redeemed for a cost of around 150 US dollars. If it’s not renewed after the grace period, the domain enters the pending deletion phase, which lasts for five days, during this period the domain cannot be renewed. After the five days, the drop comes, which happens any time between 11 AM and 2 PM Pacific time and that’s when the domain is released into the open for anyone to register again. So simplified and summarized, expiration date, 30 days hold, 5 days SnapNames auction, 30 days grace period, 5 days pending deletion, and then the drop.

So I call MyDomain.com, realizing my domain is in the grace period, and I desperately want to redeem it. I talk to a guy called Alex and he assures me, after having payed 160 US Dollars, that he has redeemed my domain and that my services will be back up and running within 48 hours. And they are, after one day, my email is back in business and jonaslund.com DNS resolves nicely to my web host, so I relax and think, phew that was close.

Whew

Fast forward to the 12th of December, I get a phone call in the morning from a friend, he’s trying to send me an email but he says that the email to my address is bouncing. I’m thinking, WTF, how is that possible? I start checking all my services and everything seems normal. I conclude that something must be wrong with the domain’s MX records, somehow Google cannot relay the message to my domain. So I check the whois of jonaslund.com and that’s when it hits me, someone else is listed as the owner of jonaslund.com. So I panic and think, how is this even possible, I redeemed my domain so how can someone else be in charge over it. I call MyDomain and talk to them and the first guy I talk to agrees with me that it’s very odd and he doesn’t understand it either. His best guess is that they’ve accidentally put my domain under someone else user account and he escalates the support ticket to the higher ups to sort it out. I’m think, yeah, that could make sense, just a simple database error on their part as they were moving from an old platform to a newer one. So I relax for the moment, eagerly awaiting the response, saying that they’re rectified the situation and got my domain back under my control. That evening I call MyDomain again to complain and wonder why they haven’t solved the issue already, they excuse and say that they will escalate the support ticket even further up the chain. So I wait and wait and wait, and then the reply comes.

Oh noooo

What? Is it true? Did I lose my domain to a SnapNames Auction? The whois record is the truth and not due to a misplaced domain name? It’s around 12 am and I need to get up very early the day after but I realize the consequence of someone else being in control of my number one online piece of identification, my email, so I go on a rush of changing primary email address for every web service I can think of, Facebook, Twitter, Amazon, Dreamhost, Linode, MediaTemple, NameCheap, Paypal, Ebay, Github, Quora, Spotify, Skype, Dropbox, Battlenet, Apple/iTunes, Online Banking, CSN, DigID, etc. As long as the new owner can’t get access to those I’ll be fine for now, until I can solve the situation proper. The following morning I send an email to every contact in my Google account with a notice, Please do not send any emails to info@jonaslund.com as that’s not me any more.


~ % whois jonaslund.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net for detailed information.

   Domain Name: JONASLUND.COM
   Registrar: DOMAIN.COM, LLC
   Whois Server: whois.domain.com
   Referral URL: http://www.domain.com
   Name Server: NS1.FRESHWEBSERVER.COM
   Name Server: NS2.FRESHWEBSERVER.COM
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 12-dec-2012
   Creation Date: 09-oct-2003
   Expiration Date: 09-oct-2014

>>> Last update of whois database: Sat, 15 Dec 2012 14:01:00 UTC <<<

NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of 
the domain name registration in the registry is currently set to expire. This date does not 
necessarily reflect the expiration date of the domain name registrant's agreement with the 
sponsoring registrar.  Users may consult the sponsoring registrar's Whois database to view 
the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois database through the use 
of electronic processes that are high-volume and automated except as reasonably necessary 
to register domain names or modify existing registrations; the Data in VeriSign Global Registry 
Services' ("VeriSign") Whois database is provided by VeriSign for information purposes only, 
and to assist persons in obtaining information about or related to a domain name registration 
record. VeriSign does not guarantee its accuracy. By submitting a Whois query, you agree to 
abide by the following terms of use: You agree that you may use this Data only for lawful 
purposes and that under no circumstances will you use this Data to: (1) allow, enable, or 
otherwise support the transmission of mass unsolicited, commercial advertising or solicitations 
via e-mail, telephone, or facsimile; or (2) enable high volume, automated, electronic processes 
that apply to VeriSign (or its computer systems). The compilation, repackaging, dissemination 
or other use of this Data is expressly prohibited without the prior written consent of VeriSign. 
You agree not to use electronic processes that are automated and high-volume to access or query 
the Whois database except as reasonably necessary to register domain names or modify existing 
registrations. VeriSign reserves the right to restrict your access to the Whois database in its 
sole discretion to ensure operational stability.  VeriSign may restrict or terminate your access 
to the Whois database for failure to abide by these terms of use. VeriSign reserves the right 
to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Registrant:
 Siposs Lorand
 Vila Estudantes, 192
 Sao Paulo, BR 01505
 BR

 Domain name: JONASLUND.COM


 Administrative Contact:
    Lorand, Siposs  admin@jonaslund.com
    Vila Estudantes, 192
    Sao Paulo, BR 01505
    BR
    +55.72309376
 Technical Contact:
    Lorand, Siposs  admin@jonaslund.com
    Vila Estudantes, 192
    Sao Paulo, BR 01505
    BR
    +55.72309376


 Registration Service Provider:
    Dotster.com, support@dotster-inc.com
    +1.8004015250
    This company may be contacted for domain login/passwords,
    DNS/Nameserver changes, and general domain support questions.


 Registrar of Record: Domain.com
 Record last updated on 12-Dec-2012.
 Record expires on 10-Oct-2014.
 Record created on 10-Oct-2003.

 Domain servers in listed order:
    NS1.FRESHWEBSERVER.COM
    NS2.FRESHWEBSERVER.COM


 Domain status: clientTransferProhibited
                clientUpdateProhibited



whois jonaslund.com

I start thinking, wait a minute, so if my domain was snapped in the SnapNames auction, how come it worked for the 30 days of the redemption period? And how come the MyDomain.com guy, Alex, didn’t realize it was in the SnapNames Auction phase and inform me so I could also place a bid? Something seems fishy with the whole situation. Especially since my works was still on jonaslund.com and it looks just normal. I checked the source and found <!-- Mirrored from jonaslund.com/ by HTTrack Website Copier/3.x [XR&CO'2010], Sun, 18 Nov 2012 18:44:38 GMT --> <!-- Added by HTTrack /Added by HTTrack --> so the new owner cloned my content, and all looks perfectly normal, except one major thing. The emails sent to info@jonaslund.com will no longer arrive in my inbox, but in his, in Siposs Lorand inbox. So he has effectively appropriated my online identity, he now owns a part of me, something that has been part of me since 2003, something I’ve identified myself with and through since almost a decade.

However, during the first scare I went on a domain registration rampage, I got jonaslund.biz, jonaslund.info, jonaslund.org and therealjonas.com just a precaution in case I would lose my primary domain, so I at least had some domains with my name in them. So now my Jonas Lund online identity has 301 (permanently moved) from jonaslund.com to http://jonaslund.biz. I’ve reached out to most places online to update the incoming links to my website from .com to .biz, so Google can recognize that the real Jonas Lund now resides under jonaslund.biz instead of the .com facsimile.

I’ve been emailing the new owner daily to recover my domain, to effectively buy it back for what I assume will be an atrocious sum of cash, which would be totally worth it. So far I’ve heard nothing...

Update 1, 30th Dec 2012

I just visited jonaslund.com and saw the account that was hosting jonaslund.com has been suspended. So jonaslund.com is no longer showing my content on the website, which is really beneficial to me, as it clears out the confusion between fake Jonas Lund and the real Jonas Lund. I’m sending an email once a day to all possible @jonaslund.com emails, but so far no contact from the new owner.

Update 2, 2nd Jan 2013

Seems like it's back online again, the fake jonaslund.com, so back to the really bad situation again.