I think there's a missunderstanding in the procedure.
I've just transfered several domains from GoDaddy to NameCheap.
See,
- I request and pay the transfer at namecheap.
- Namecheap sends an email to the owner of the domain and it leads him to a place where you accept or transfer the domain. The owner has to go and accept it.
- Then, godaddy send me an email that says : "your domain is about to being transfer, if you dont cancel the transaction it will be transfered within 5 days".
- Then after that, the domain is transfered.
As you see, still having to accept the domain transfer from the owner to the winning registrar.
Is there any registrar accepting all this automatically without confirmations?
Right that clears it up for me. I thought if the domain was not locked then anyone can just transfer it and it is up to the owner to save it.
That's somewhat what happened to panix.com. Panix was unlocked at dotster prior to it being
hijacked.
You can read about it at [circleid.com...] .
Is there any registrar accepting all this automatically without confirmations?
This has happened in the past, but due to registrar error or malpractise, rather than as a matter of policy.
Of course, in a case of identity theft it would be absolutely possible to steal a domain (by taking control of the admin contact's email). I would have thought this would be a criminal offence, like other theft or fraud.
Best wishes,
Andy.