I got a phone call yesterday from my lender about 11:30am. He said his email to me wasn't going through and was instead
bouncing back to him immediately. I checked my with my
mail server and deleted all email I'd already retrieved to make room, thinking the large attachment he was sending was the problem.
Nope.
He was still having a problem emailing me, so I told him to go to my website and submit his message through my contact form there. Then he said something to me that caused me to literally drop my phone.
"Um...I think someone hijacked your web site. You might want to check it out."
I immediately went to
www.craigmbeck.com and discovered he was right. My site was not there anymore. Instead, a holding page, advertising the current availability of my
domain was planted right there by my *own* domain registrar! I was flabbergasted and told him I'd call him back as soon as I straightened this out.
A quick check with both my domain registrar and web host confirmed my growing fears. Incredibly my domain registration had somehow expired 5 days ago! Fortunately, I acted quickly, within the one week grace period, and nothing happened, but this could have been financially and professionally devastating. Considering I've got my web site and email plastered all over my business cards, stationary, and email signature, not to mention how that would look to someone who decided to check out my web site or email me back after I had met or worked with them in person, that would have been bad. The good news is that my lender is also a personal friend, so the damage was minimal and the holding page had only been put up that morning.
However, there are clearly a few lessons for anyone to take from my near miss experience:
A) If you maintain a web site for your profession or business, check it
daily to make sure the site is doing what you *think* it should be doing.
This should be a given, but as you know, there are so many things that go on in a single business day, that checking your own site isn't always a top priority. However, you should
make it one. I can tell you that after this little episode, I certainly will be checking in daily on my own.
B) Don't put too much faith in any one, or anyone's system, or even their back up system or contingency plans.
Although I host my web site with
1and1, I had purchased my domain earlier from
GoDaddy on the recommendation of a friend who said they had great specials. And they do. I highly recommend them: When I called, I had an actual tech support
person on the line in less than 2 minutes!
I had bought my domain before I even had a web site to pair it with, and I paid $3.95 for a year, making certain to enable the auto renew option so I could, "set it and forget it". Problem is, a year can bring about many changes. The tech at GoDaddy ensured me their auto renew system was functioning properly, but the credit card I had left on file with them had been closed. Their backup plan to this was to send an email to the address on file letting me know my registration of the domain name had expired and was unable to be renewed. That didn't work though, since my email on file is tied to that expired domain. Therefore, if I hadn't actually checked my site, or in this case had a fellow professional I was working with notify me, the week long grace period could have easily expired and I might have actually lost the rights to my own domain name!
C) The best price isn't always the best deal.
Sure, at the time, a year for less than $4 was great for something I wasn't certain I was going to use to the extent I do now. However, once I made a greater investment in my web site, especially in a professional realm, I should have gone to the extent to extend my ownership into the future. I'm now registered until 2015. To be honest, I'm not even sure what I paid per year. I was just out to protect my domain at whatever cost by that point, hardly a smart way to shop.
D) Locking your door is a good thing.
The
only thing that protected me from someone stealing my domain was the fact I had locked it. Many domain name registrars require you to unlock your domain before you can make changes, such as renewals or
DNS settings. However, much like
Ebay used to face the issue before introducing
proxy bidding, people may have bots or scripts running that could then beat you to the punch when you unlocked your domain to renew or make changes, similar to what the phone companies used to call "Slamming" and thanks to
Federal Legislation, the reason you have to talk to a third party when changing phone services.
Why would anyone do this? The idea is simply to pick up any and all likely available domain names people could want and squat on them until someone approaches them to buy it and then profit from it. Call it the beauty of the American business model. You'd be surprised how many people make/made a good living doing this. A good example of unintentional squatting would be a site like
www.MikeRoweSoft.com. You think Mike got a free
Xbox out of them?
E) Your domain name, just like your given name, is worth protecting.
Once you've obtained your domain and have invested time, money, and effort into it, shouldn't you take care of it? Of course you should.
In business, it is commonly accepted that it can take decades to build up a solid reputation and only one careless act to destroy all of that hard work. You wouldn't knowingly let anyone slander you in the newspaper, so don't leave anyone the opportunity to trash your good name on-line.
Carelessness or ignorance, neither of which you or I can stake claim to any longer, is a weak excuse for inaction.