01/23/2007 03:44 PM

Not Masters of Their Domain Snatched by Cyber-Squatters


Google is searching for answers after its German domain name gets temporarily stolen.

Visitors to the German site of the popular Internet search engine Google were mystified when they typed the address into their browsers in the early hours of Tuesday morning. Instead of the familiar stripped-down Google home page, they saw a page with a message in German reading "No content has been provided for this domain," together with the logo of the German Internet service provider (ISP) Goneo.

Visitors to on Tuesday morning met with an unfamiliar sight. (Screenshot: Oliver Mengedoht)

Visitors to on Tuesday morning met with an unfamiliar sight. (Screenshot: Oliver Mengedoht)

Google's German domain name,, was temporarily "stolen" in the early hours of Tuesday. However, "the problem was solved within a short time," Google spokesman Stefan Keuchel told the German news agency DPA.

Google officials were initially unsure how their German domain name had gotten transferred to another owner. Keuchel emphasized that it was not a hacker attack, adding that Google was investigating what had happened.

Later on Tuesday it transpired that the transfer had been the result of a malicious ruse by unknown persons, who took advantage of a loophole in German domain name regulations.

"One of our customers ordered the domain name from us on Jan. 13," Goneo managing director Marc Keilwerth told SPIEGEL ONLINE. The order was processed completely automatically, he said: "Nobody actually looks at the orders." The customer had claimed to be the owner of, he said.

The order was then forwarded to Denic, the firm responsible for administering the .de country code domain. It then sent a transfer request to the Internet service provider. The ISP had apparently neglected to reject the request, as it should have done in order to prevent the "kidnapping."

In Germany, if the old domain name provider does not reject the transfer request, the transfer is automatically carried out after a few days -- even if the owner did not ask for it. "This procedure is very controversial," Keilwerth said. "This only happens with the .de domains." In the past, the domain name had been temporarily "stolen" from the popular auction Web site by the same means.

The transfer of to Goneo took place at 7:33 p.m. on Monday evening. However the change only became effective around 11 p.m., when the server data was updated.

"We suddenly started getting a whole lot of e-mails from people who thought we had hacked their computers, because they were suddenly getting a Goneo banner instead of as their browser home page," Keilwerth said.

Goneo immediately informed Denic about the "kidnapping." However they reportedly reacted by transferring the domain to another German provider, Favo, in a second case of domain theft. "Probably two transfer requests for were running in parallel," Keilwerth said. In any case, a hack was definitely ruled out, he said.

In the meantime, both transfers have been cancelled. Later on Tuesday, Google Inc. of Mountain View, California was once again listed as the owners of the domain name in Denic's domain database. Normal traffic to has resumed.


Related SPIEGEL ONLINE links:

All Rights Reserved
Reproduction only allowed with permission