Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a domain name that I have registered for a long time. Due to a combination of bad luck and oversight, the domain name expired and was rebought by somebody else. I am attempting to buy the domain name back, but I am not sure if I will be able to.

My domain is associated with a google apps account. Could the new owner of the domain in theory recreate an existing email address and intercept future emails people attempt to send to me?

For example, if my current email is, could the new domain owner create and receive future emails people try and send to me?

share|improve this question
Connect the existing account if its possible to a new domain. If you are worried about him getting email directed towards you, he can only recieve new email, not any existing email. Make everyone aware of your new domain for the time being. – Ramhound May 14 '12 at 16:23
@Ramhound, thanks. I know he can only receive new email (that's the problem). My internal users are aware of the problem, but I obviously can't set up an auto-responder to new incoming emails... I plan on finding a new domain if I can't get the old one back. – Natan May 14 '12 at 20:05
up vote 6 down vote accepted

Since you don't own the domain, all of what is done with it can't be yours, including the emails.

Since the new owner possess the domain, he can manage the MX DNS of this domain (used for Email services) and do whatever he wants to do with this, including creating any, redirect them to whatever/whoever he wants, etc.

So he's able to create one of your old email, and use it. It's not an attack since he's the owner.

The only "timelapse" you have is the DNS propagation. But I assume that if you get back your domain, it won't be made in less than hours after the purchase.

To be clear : He's now the owner, so he can do whatever he wants on it.

share|improve this answer
I was afraid of that. Makes a lot of sense, thanks! – Natan May 14 '12 at 15:19
Sorry about that, but there's no solution except discussing with the new owner. Eventually negociating (at least) the redirection of your old email address to yours, even if you aren't the owner of the domain now. (Hope it's not "" or something like that!) – Cyril N. May 14 '12 at 15:22
I'm trying to contact him directly. I think the moral of the story is, don't let domain names expire. :) – Natan May 14 '12 at 20:06
I more than agree with that! :) Which registrar were you using? – Cyril N. May 15 '12 at 6:47
GoDaddy. They offer a service to try and broker a deal to purchase a registered domain name, we'll see where it goes. – Natan May 15 '12 at 10:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.