{"id":2627,"date":"2023-05-17T20:10:15","date_gmt":"2023-05-18T01:10:15","guid":{"rendered":"http:\/\/www.ishygddt.xyz\/~blog\/?p=2627"},"modified":"2023-05-30T18:37:32","modified_gmt":"2023-05-30T23:37:32","slug":"epp-transfer-issues","status":"publish","type":"post","link":"http:\/\/www.ishygddt.xyz\/~blog\/2023\/05\/epp-transfer-issues","title":{"rendered":"Weird issues trying to transfer a domain (XYZ's EPP infrastructure broken?)"},"content":{"rendered":"

tldr: XYZ infrastructure is literally collapsing, they couldn't transfer in one of their own<\/em> domains without a staff override.<\/p>\n

    \n
  1. Initial transfer attempt\n
      \n
    • Namecheap e-mails me the \u201ctransfer Authorization Code\u201d<\/li>\n
    • Gen.xyz web interface claims \u201cInvalid EPP Code\u201d<\/li>\n<\/ul>\n<\/li>\n
    • I contact Gen.xyz support\n
        \n
      • Gen.xyz staff tells me\u201cPlease request a new EPP code from Namecheap\u201d<\/li>\n<\/ul>\n<\/li>\n
      • I contact Namecheap support via web chat\n
          \n
        • \u201cI need a new EPP for my domain, ishygddt.xyz; XYZ support told me to request a new one because the one I was sent was invalid.\u201d<\/li>\n
        • Namecheap: \u201cFor your convenience, I have generated a brand new Auth\/EPP code and sent it to you.\u201d<\/li>\n
        • It, too, yields \u201cInvalid EPP Code\u201d<\/li>\n
        • Namecheap: \u201cAs I've checked, the Auth code is valid.\u201d<\/li>\n<\/ul>\n<\/li>\n
        • I return to pester Gen.xyz support\n
            \n
          • \u201cI'm trying to transfer my domain from Namecheap, but their EPP codes don't seem to work. The latest one they sent me is \u2026\u201d<\/li>\n
          • XYZ replies \u201cThank you for reaching out to the Support Team. I have manually created the order.\u201d\n
              \n
            • They put a different domain on my account<\/strong>, and invoiced me for it.<\/li>\n
            • I paid the invoice before noting their mistake \ud83e\udd26<\/li>\n<\/ul>\n<\/li>\n
            • \u201cI'm sorry, but on closer inspection, I was given the wrong domain. I'm trying to transfer in ishygddt.xyz (the domain which is in my e-mail address and which I was trying to register in previous screenshots), but the domain that was just put on my account is ishygodt.xyz\u201d<\/li>\n
            • \u201cApologies for the typo, I misread. I have created the order for the correct domain.\u201d<\/li>\n
            • I pay the (legitimate) invoice<\/li>\n
            • Status: \u201cPending Transfer\u201d… but also, disturbingly, still in my \u201cCart\u201d on-site. And opening the cart reminds me that the EPP I've entered is still invalid.<\/li>\n
            • After several days, it transfers over to GenXYZ!<\/li>\n<\/ul>\n<\/li>\n
            • I return again to pester Gen.xyz support, to request a refund\n
                \n
              • \u201cWhen resolving support ticket #\u2588\u2588\u2588\u2588, I was wrongly invoiced for this domain. I did not order this domain, and paying this invoice was a mistake on my part. Will you refund this? \u2026 ishygodt.xyz, with an \"o\"; I did not order it; invoice #\u2588\u2588\u2588\u2588 was unsolicited.\u201d<\/li>\n
              • After a few days, the refund arrives!<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n

                I have a creeping suspicion that they might be vulnerable to social-engineering attacks\u2026<\/p>\n","protected":false},"excerpt":{"rendered":"

                tldr: XYZ infrastructure is literally collapsing, they couldn't transfer in one of their own domains without a staff override. Initial transfer attempt Namecheap e-mails me the \u201ctransfer Authorization Code\u201d Gen.xyz web interface claims \u201cInvalid EPP Code\u201d I contact Gen.xyz support Gen.xyz staff tells me\u201cPlease request a new EPP code from Namecheap\u201d I contact Namecheap support …<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[97],"tags":[],"class_list":["post-2627","post","type-post","status-publish","format-standard","hentry","category-original-content"],"_links":{"self":[{"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/posts\/2627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/comments?post=2627"}],"version-history":[{"count":12,"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/posts\/2627\/revisions"}],"predecessor-version":[{"id":2731,"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/posts\/2627\/revisions\/2731"}],"wp:attachment":[{"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/media?parent=2627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/categories?post=2627"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.ishygddt.xyz\/~blog\/wp-json\/wp\/v2\/tags?post=2627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}