The definition of domain hijacking is: "to gain (temporarily) control a domain" which could be either through:
- Stealing the legal and/or technical ownership of a domain (for example by transferring the domain to another registrar);
- Gaining control of the registered name servers and pointing the domain to another endpoint;
What are known domain hijacking methods?
For example to claim an expired administrative email address and request a domain transfer at the domain registrar. Or, to use phishing techniques.
I suppose the Extensible Provisioning Protocol (EPP) is somehow related to protection against this?