This topic describes the frequently asked questions about domain security.

Did Alibaba Cloud stop providing domain privacy protection services?

To comply with temporary regulations issued by the Internet Corporation for Assigned Names and Numbers (ICANN), and compliance requirements stated in General Data Protection Regulation (GDPR), Alibaba Cloud WHOIS no longer provides personal information about domain holders. Relevant services were therefore suspended beginning May 25, 2018.

Can I modify domain information after I enable the update prohibition lock?

You must disable the update prohibition lock before you modify domain information.

Note After domain information is modified, enable the update prohibition lock again.

For more information, see Update prohibition lock service.

After a domain expires, does the update prohibition lock remain effective?

The update prohibition lock is effective only if the domain name is within the validity period. The update prohibition lock expires as the domain name expires. After the update prohibition lock expires, it no longer prohibits your domain name from being modified.

After you renew or redeem your domain name, we recommend that you enable the update prohibition lock again.

For more information, see Update prohibition lock service.

How do I diagnose and handle DNS hijacking?

DNS servers are used to resolve domain names. When you visit a website or website service through its domain name, the DNS server resolves the domain name to the corresponding IP address. Requests must be rerouted to the correct server to retrieve the requested information.

DNS hijacking is a type of DNS attack in which DNS queries are incorrectly resolved or blocked. Users are directed to unexpected or malicious sites.

Solutions:

  • Run the nslookup command on a Windows host, and dig command on a Linux host to check whether the domain name is resolved to the correct IP address.
  • Use an external tool to verify errors and collect error information.
  • Inform the ISP of the returned results at the earliest opportunity. You can also change DNS servers to Alibaba Cloud DNS servers: 223.5.5.5 and 223.6.6.6, and then check whether the domain name can be resolved correctly.
  • If you need to consume a service urgently, visit the IP address directly.
Note If you are in mainland China, call the following numbers to report errors to your ISP:
  • China Mobile: 10086.
  • China Telecom: 10000.
  • China Unicom: 10010.

How do I pass SMS verification?

When you configure resolution settings in the Domains console, if the system requires you to enter your phone number, it indicates that you are using an unfamiliar computer or network. Risk control is triggered.

If your phone number is working properly, but no verification code is received, try the following solutions:

  • It may take some time to send the verification code to your phone. If you do not receive a verification code after a certain period of time, request the system to send the verification code again.
  • Make sure that your phone can receive messages. For example, check whether you have overdue payments.
  • Check whether messages are blocked by third-party security software, for example, 360 Mobile Security.
  • If you failed to resolve the problem with the preceding solutions, transfer the SIM card to another phone and try the preceding solutions again.

What can I do if my domain name is stolen?

If the stolen domain name is hosted on Alibaba Cloud, Alibaba Cloud immediately takes measures to recover the domain name. Scenarios and solutions:

  • The stolen domain name is hosted on Alibaba Cloud.
    • Call 95187 to report the problem to Alibaba Cloud. Alibaba Cloud takes precautions, such as domain locks, to prevent the domain from being transferred to another registrar, or domain information from being modified.
    • You must also submit identity documents that can verify your identity as the domain holder.
  • The stolen domain name has already been transferred to another registrar.
    • Contact Alibaba Cloud

      If your domain name is stolen, contact Alibaba Cloud at the earliest opportunity. Report the domain information, including whether it has been transferred to another domain registrar, to Alibaba Cloud. Alibaba Cloud immediately takes measures to recover your domain name. You can require Alibaba Cloud to contact the registrar to which the domain is transferred to lock the domain. This prevents the domain from being transferred to another registrar, or the domain information from being modified.

    • Contact the registrar to which the stolen domain is transferred

      If the stolen domain has already been transferred to another registrar, you can directly contact the registrar, or require Alibaba Cloud to contact the registrar. Submit a statement to the registrar and provide evidence. After the registrar receives the statement, you have three business days to submit verification materials, including identity documents that verify your identity as the domain holder, and a statement. Registrars outside mainland China typically require evidence and statements to be in English.

    • Wait for the registrar to complete the investigation

      After the registrar receives the verification materials, it verifies the materials and starts an investigation. The investigation typically takes a week. If the registrar confirms that the domain name is transferred without your consent, Alibaba Cloud creates an account at the registrar. The registrar transfers the domain to this account.

    • You can contact Alibaba Cloud for the username and password of the account, which allows you to manage the domain name. You can choose to keep the domain name under the account, or transfer the domain name to Alibaba Cloud again.