OnlineNIC is down for 4 days

Unable to login to OnlineNIC membership. API is not working.

I have the same problem, since OnlineNic does not accept paypal so i have to added my credit card to online. I received fraud charge notification from my credit card last sunday, then I immediately blocked this credit card and asking our bank to help replace another card with a new card number. The old card is still received fraud charge someday (unsuccessful charge because blocked).

my id is 3xxxxx

it seems they are restoring missing domains only after you inform them. Please do check

It's actually 22.

After login as membership 2 days ago appeared "Under maintenance! Sorry by any inconvenience ...", after that appeared a database error, after that "Password or username error!" and now "Internal Server Error" !!!! Live support is a BOT with a message "System is currently on maintenance" OnlineNIC Support Center is not responding tickets after 2 days. Resellers support mail is not responding after 2 days. I need to renew domains and until now has been impossible to have a contact with OnlineNIC. What happens when a registrar disappear ?

Yes, you are right, now I understood why my registered card with onlinenic was charged somewhere in an Australian Restaurant yesterday. The bad thing is their support is not responsive, and sometimes the domains are to be renewed within this time... who will be responsible for the loss of domain?

Those posting the 2 digits from their ID, please also post in which of the 3 categories you belong, just to verify my theory and know where we are in the restoration (if it is made incremental). According to my theory: 1xxxxx = Clients who are restored and either working on a correct database or a database with issues (duplicate entries etc) 2xxxxx = Clients who can login but are not restored yet (who see "(27) can't get customer info" and "(15) Database operation failure" messages) 3xxxxx = Clients who can't login at all

Transfer out worked for one of my domains so far. Missing domains after they are restored have no whois info, and so far can't add whois info: (683) error updating registrant still waiting for replies to my tickets. i suppose they are overwhelmed. I wonder if after this hack they would increase their security.

How long has it been since you opened a ticket in their helpdesk? They have started to answering tickets some days ago.

Looks like Domain onlinenic.com is down as well. Any response from OnlineNIC Cannot log into account as well since few days.

The same happened to us. We have notified the ICANN. Please, do the same in order to obtain from them the fastest support.

mine is 26xxxx and getting the same error as stated

Still can't login : "Password or username error!" ... and retrieval of password is not possible because my domain is expired ... I have 2 e-mails replied to onlinenic-partner@onlinenic.com waiting by more than 24 hours

Over 24 hours ago. Prior attempts at sending mails to their designated partner's email address have gone unanswered. No matter how this issue is diced, this is deplorable. If you are able to reach any of their officials, in any way, please ask them to send me a private message here. This is more than urgent.

I'm 100% sure they've been hacked. I had to close my credit card registered on onlinenic.com because today someone used my credit card on gambling sites. They charged 15$ and my bank give me a warning about it. And i closed immediately my credit card. I have 5 friends who are in the same situation as me, money has been taken or tried to be withdrawn from their credit cards. We can't reach our panel and our domain details on onlinenic. Noone reply on chatbot and email. Everyone who has a credit card registered onlinenic's website, should immediately close their credit card. All of the credit card data was stolen i hope.

i also had an unauthorised charge on my card with online nic . Issue is that i cannot see what domains were in the panel now . I need to renew some domain names and want to transfer out some other domain names. Some are due for renewal. This is bad. I can get auth code from the panel but the domains are in locked state. Anyone has any updates pls post here

my user id is 22*** and I still get the error: Database operation failure.

Thanks God, replid ! I've been waiting for days , I guess they are overwhelmed They said they are continually restoring the domain DNS, I can see all my domains now. My ID is 579XXX I have a valid card with them, no information shows it was disclose.They did store card numbers without CVV ,however, the payment step requires CVV to proceed transaction everytime. How your guys card disclosed is still unkonw....... Back to normal for mine...

Would you be kind enough to share the Skype details with me so I could reach this regional manager? At this stage all and every assistance are sorely needed.

The problem is very serious. We have not been able to manage our domains for 4 days. Many of them have expired. We are unable to renew. We can't reach phone, live support is bot. The suffering is growing.

Hi, We sent emails to globalsupport@icann.org and compliance@icann.org . I hope there will be a quick turnaround.

mine is 26**** Still its the same error

Me too, still cant login "Password or username error!"

Unfortunately I am unable to give you the skype account because you are a new member and unable to receive any private messages. Also notice that this is the EU regional manager, if you are located within the EU send me a PM when you have access to private messages.

I guess that "next week we are shutting down" they told the judge was more like "in 2 years" and it may have happened. https://domainnamewire.com/2021/07/2...ebook-lawsuit/ https://domainnamewire.com/2022/03/2...ybersquatting/ On the other hand, perhaps they are the latest in security breaches and are just down because of that. If Dish can't restore their operations by now, can only imagine the time for this if that is the case. (and the impact to the thousands of domains and potential name server changes to bad sites) But lets hope it isn't a breach . If they are down for good, there is a policy ICANN has for this type of situation and IIRC domains would be split up among some registrars and effectively transferred there.

I also got an attempted unauthorised charge on my cc. blocked the card. If anyone received any response from them for offline domain renewals please do post here Thanks

Now i can see my domain list, and i HAVE 27 DOMAINS MISSING FROM MY LIST. Anyone else with the same issue? I already complained to ICANN, before i discovered the missing domains, what should I do? These domains are for clients, and have websites on them.

Have you tried using the forgot password form on https://www.onlinenic.com/en/Home/forget.html ?

That's okay. Thanks.

I logged in briefly about 3 hours ago and the only thing functional was the "Auth Code link. I received the auth code on the email address. Now the site is down completely

Do let us know here if there is any response. None so far for me for a domain renewal

what is your client id?

Thank you very much, after reset to new password , now I can login to the panel. Many thanksssss.

Wow, what a problem! If OnlineNic disappears, does anyone know how long it can take to recover the domains?

Thanks for this . just sent them an email

it finally started and I renewed the domain from the control panel. My credit balance showed fine. A few domains are missing and .in and .asia domains are showing old expiry dates

I got my lost domains restored (without providing them that info) and also our custom DNS for them is now shown (it was missing). The strange thing is that in "add funds" menu I also see some of the given credit cards, so they have restored that info too (I have cancelled them). It would be nice for you to remove them from your account. I had stored 5 cards but I see only 2 of them, I wonder why.

Hi everyone. How do we go ahead with this?

Same here, no respond from them. Submitted request by sending email to them, it just created a ticket. No response to that after 48 hours. I wanted to transfer the domains, no luck! the issue is unlock domain is not working. Our user details vanished, credit card disappered. Their phone numbers are fake!!! Just move your domains ASAP, (if you can) How did you do that? We need them to unlock the domains. I believe ICANN can do that.

id 56xxxx update: I sent an email to onlinenic partners, and gave a list of the missing domains. Now they reappeared in my list but with the DNS changed to "Input DNS" - which means the DNS is empty, we have to add the DNS again. PHEWWW!!!!! What a relief !!

I doesn't look like a data leak,its more like a database rollback, I guess their creditcard database rollback to a year ago, which caused the incorrect creditcard info. And their domain database is rollback to one moneth ago, which makes apart of domain missing. I have one creditcard used for years so I don see the problem like yours.

Same here, unable to login to OnlineNIC membership from monday. API is also not working. As per my last discussion with him on live chat on Tuesday, they replied that the issue would be resolved in 24 hours. But after that no one available on livechat, Live support is a BOT and no one replying on ticket from last 24 hours. now there website down from last few hours. lets hope for positive

I was considering using them years ago. Glad I choose eNom instead.

I am now able to login to my account (29xxxx) and see/renew domains. Some domains are missing too, we are going to report it to them.

The data leak is already verified by almost a dozen users here (including me) having fraudulent charges on their credit cards given to Onlinenic. I use Revolut and had 1 card only given to Onlinenic, someone tried to charge it abroad.

one question, was the site down 4 days ago or just today?

Folks, please submit a compliance form through ICANN using link below: https://icannportal.force.com/compli...eric-registrar That's advised by ICANN.

Mine is 18**** Looks normal now

I'm so pleased that they are now back online, got worried what would happen to our domains! So far no sign of a leak on my end but as gvard mentioned looks like some users have reported their details have been leaked.

Down since 7th March for sure. That’s when I tried to access

I filled this form yesterday. There has been no response. I wrote to them today on the email ids mentioned above and they asked me to fill this form.

Back to normal for mine...

[QUOTE=xenreseller;10394428] Just got a reply from their support. “During the upgrade process, the database was misoperated. The DB was definitely not hacked, and the data was not leaked. ” ok . . . . so what kind of the misoperation can be？？？But I'm just wondering if they got hacked, shouldn't the hacker change the DNS , hijack their domain and transfer out the domain, do something more worthy , instead of collecting some card numbers and send some failed transaction. Things are coming to be interesting.

I'm trying a contact from last 3 days ... I have a ticket waiting for 2 days, live chat has been a BOT last 3 days and I received an answer from support in onlinenic-partner@onlinenic.com but only asking by my Account ID 2 days ago !!! Now and last hours site onlinenic.com is unavailable with a "Internal Server Error" !!!

hey just received a DM reply from them on twitter asking me to reset the password

still many issues, like i am unable to set the dns for the .org i am unable to set the whois info for the domains that were missing and have reappeared unable to lock / unlock domains, getting errors for all the above. Transfer out still not working. I would give them credit that they are doing their best to get everything back in order. However they should have informed us, and kept us in the loop, as a sign of trust, instead of leaving us in the dark, until we discover that our cards were used on various websites fraudently. I am still not confident enough to add a card again to renew my domains, its scary, my cards were used at various websites. So i had to cancel my cards this morning and reorder new cards Any recommendations of a good domain registrar to transfer our domains to?

the cc data has surely been compromised .

The site is online now but giving the same error of database operation error. Looks like they are working on it🤞

what happened when you change it, is problem resolved?

Good for you, hopefully we will all be back to normal within a day or two.

that Cards on file of onlinenic got used elsewhere , it definately has got compromised. It cannot be a concidence for so many guys out here. And there has been absolutely no official communication from their side yet.

The page is online again, at least it is an indication that they are not going to close and are trying to restore the service. The problem is now that the list of registered domains is not displayed. Hopefully it will be resolved soon. And prepare to transfer domains for mental health...

I am receiving the same error after logging in with the new password (27) can't get customer info No response from them after the last message Have they asked anyone else to reset the password?

working now, but not full operational some missing domains too... wait to fix it soon.

Forever. We are waiting almost three days and still nothing. They are a complete disaster. Don't think so. They are still lying to us about what happend. Actually they didn't send a single explanation or post it on their web. Their social media feeds are "dead" for a long time. They don't answer the phones... Exactly. They were hacked 100% and hacker stole information from their DB. With this data you can't hijack DNS or change anything, this is just a DB dump. But hacker definitely have our cards data. Our cards have been charged on multiple occasions from unknown places. There is no doubt that cards leaked from onlinenic DB. The worst part is ignorance from onlinenic and lies, they are still acting like nothing has happened and this was just a "maintenance". They were not hacked, nothing was stolen... and yet they are still having problems, 10 days after initial hack. What is worse they proved that they don't care about security. When you type cc data they probably just record it to their db and then manually put it in PG. How crazy is that? They also don't have daily or hourly backup, since they restored db that was pretty old. This is a big red flag for me. Being with them for over 15 years and have over thousand domains. Can't wait to move away. My advice to everyone is to change password, if db was dumped and if they were lazy to properly salt the hashes then hacker will have no problem to reverse hash to real passwords and use them to login to user accounts. This was the first thing that onlinenic should advice to their users, whenever some breach happens you call all users to change passwords and set 2FA. Second thing, use only cards that you can control and have minimum amount of money, best will be single use cards or gift cards, anything that is not connected to your bank account. Limit the possible damage. It is very questionable if they just restored everything from backup without fixing the hole. If they didn't fix the problem then we can expect this thing to happen again. +1 +1

I wrote them using tweeter account (@OnlineNICHelp) and get answers yesterday. They said "... service will be restored within few hours". Must be serious attack that need more than 3 days to solve it ��. Please fix it soon!

Change of password does not help . It still shows db operations failure inside

we have two accounts 32xxxxx can't login and can't request password reset link 35xxxx can login, see domains but they all have "INPUT DNS" link instead of NS entries and both registration and expiration date are 2023-03-10

Guys !!!!!! I'm suggesting check your domain auto renewal settings, I found one of mine was disabled. Your client is facing the risk of domain parking if domain cannot be renewed.

Some "backup" provider (domain/ssl) to recommend us if that take more time?

I renewed my 2 domains. I defined 4 cards yesterday. 3 were accepted today. 1 of them is "pending". I installed from accepted. and removed it from the system. I closed for shopping. I'm relieved for now.

not need. my domains ns name : "INPUT DNS" showing.. but working correctly. check website before, if need put ns name after.

Why do people still use this company? seriously? It took me about a week to realize A: their support is pretty much just 1 person, and really, really bad. B: their network is horribly slow. I mean, just responses from whmcs->onlinenic take a good 45 seconds in most cases C: their interface is horrible (when it has to be used). I had about half my domains in there in that first week, so very thankful that I got out of there, just before this, and never actually gave them CC info. I'm not surprised about the lies re: hack. They simply have no accountability, or, for that matter, proper support.

Onlinenic.com does not work from 3.3.2023. As control panel on onlinenic.com is not working we cant unlock domains and we cant access auth-code. Under that circumstances how is possible to migrate domains from Onlinenic.com to another registar ?

Hey how did you manage to renew the domains? Do let us know

were you able to renew the domains that expired a few days ago? In my case I cannot renew them, my panel shows 0 expired domains. How long does OnlineNic take to validate a new debit card?

Up until the incident, their partner live chat had one of the fastest responses I have seen so far. They also had given me our regional account manager's Skype and we could reach to him in case something was needed beyond the live chat support. Their ticketing system had several hours of response time, however it was scarcely needed. That might have been the issue with peering between them and your upstream provider. We also believe their network is slow, but it doesn't take more than 3-5 seconds to perform any EPP command. I second that, their interface is stuck at least a decade back. Other than that, which provider do you suggest which comes close to Onlinenic's pricing for .com .net .org domains?

I believe that you are right. First they claimed that they have some maintenance, but that was 4 days ago and now it's clear that they were hacked. Their database was dumped and all data stolen, and now hackers have all credit card numbers. We already had to terminate 3 cards as strange charges appeared today. All from funny places and store, like gambling, wine store... etc. I am sure that either they were hacked by some kid who is now using cards for gambling, wine and alcohol or cards are currently being sold on dark web. They are claiming that nothing was stolen and that they were not hacked but it is obvious that they are trying to hide the truth and lower the damage. We have couple of hundreds domains registered with them and this is a serious problem since we are unable to login and renew the domains and support is offline for the last 24h. Their company site was online but login to reseller account wasn't working. We will start with domain transfer to namecheap.com, they seem reliable and prices are fine. We have managed to login couple of hours ago and we can see all of our domains but the database is a mess, they are completely incapable. They are restoring data from a backup and managed to restore more then one backup so now we can see same domain twice or more times and each expiration date is old (incorrect). At least we can now login, unlock the domains, request authcode and start transfer. We will see how this will go. We have tens of domains that will expire in a next couple of days and if that happens our clients will be very mad and they will blame us for this. They should issue a notice and tell their users that they are working to fix the problem and admit what happened. Not sure how they think that they can hide that. There are around 400.000 domains under their management. Many users are affected.

Don't get involved in password change or transfer jobs right now. There are records from 3 months ago. There are domains in the domain list that dropped 3 months ago. I only loaded money for 2 active ones. I'm sorry for what happened.

example1 : my customer kxxxxxxi.com (expired 3 march), yesterday (10 march) morning renewed successfull. example2 : my customer txxxxxxo.com (expired 8 march), yesterday (10 march) morning renewed successfull. iam added my card (1) to payment settings. when? 7 or 8 march. confirmed 10 march morning.. iam added my another cards (3) to payment settings. when? 8 or 9 march. confirmed 10 march morning..

5 minutes (on average) just to get a human (??) response there that literally did nothing helpful. went through 3 providers actually, all had the same result, so, not the provider, it's them. Most likely because asia I don't mind that, it's that everything is just so out of place, improperly labeled, hidden so that it's hard for the customer to find it. They rely very heavily (obviously) on the user using API to access and change things Honestly, even though it a couple $$ more (and an EIG biz), I've had zero issues with resellerclub . It uses the stargate interface (which a few do), and I find it quick and easy to get around in. Not trying to derail this thread, by any means, but, if you are/were a customer of Onlinenic, it's a good idea to start looking elsewhere. Maybe not with my own suggestion, but anywhere. That much downtime for a registrar, their refusal to admit being hacked, and their blanket excuse is just , no, no, no.

I logged in finally, and all domains appear to be unlocked, but I couldn't transfer any. The gaining reguistrar said the domains were locked, and that they couldn't retrieve the admin email. I tried to unlock the domains, and nothing happened. Some domains are listed twice in the lock/unlock page. However, I was able to renew domains successfully, so at least that works.

I defined 1 card the previous day (restricted to shopping) but it said "pending". I identified 3 more cards yesterday. (limited to shopping) Last 3 cards confirmed at 11 am today. I opened one of the cards for shopping. I loaded money in a controlled manner. I closed the card again. and I renewed 2 domains.

I had some credit in my account, and i used that to renew domains. It worked without an issue.

While OnlineNIC goes up and down, somewhere... someone is still waiting for a reply on their RegisterFly ticket.

I just discovered that all my saved credit cards are not there anymore. So I wonder what that means. What's scary is that they have screenshots of all our cards back and front

Trying to understand how did you see the list of domains as its still giving the same database error

Mine is 25XXXX the panel looks fine, but some domains are missed!! unfortunately, one of them is an expired domain. which I don't know what has happened. Do you guys checked their API? I wonder if I could unlock domain through their API and the transfer it to another registrar. No response from OnlineNic on their tickets yet. Folks, disable your saved card immediately and try to re-create a card ASAP. All cards are stolen...

I got answer in less than 30 seconds 9 out of 10 times I chatted, the 10th time I got about a minute as response time. Once I provided them my ID and my account balance they did everything I asked for. I'm from Europe and today our renewals take ~1 second to complete. Maybe your upstream providers took the long way around throughout Europe for the connectivity? The API should be heavily used if you control hundreds or thousands of domains, since it should be linked to your domain management system and your clients communicate with it directly. Their approach is for this kind of use/volume. Moving away from one registrar to another is a huge pain. You don't know if a client wants to renew a domain, so the procedure needs to take place when the client pays for the renewal. Also the domain management system needs to be marked per domain individually to use the new API system. Multiply that by x100 or x1000 or x5000 and you will see that the more client base a reseller has the harder it is to move to another registrar.

I withdrew all the funds from my bank debit card. I have not blocked it because it is the only way I have to add funds to OnlineNic, they do not accept Paypal. I will add funds to my card if I need to renew a domain at OnlineNic. I still can't see my domains, I keep seeing the DB error, I assume that the restoration is progressive.

AFAIK there are 3 different types of clients: 1) Clients who are restored and either working on a correct database or a database with issues (duplicate entries etc) 2) Clients who can login but are not restored yet (who see "(27) can't get customer info" and "(15) Database operation failure" messages) 3) Clients who can't login at all It might have to do with the reseller ID. A reseller I know (ID 1xxxxx) calls to the first category, me (ID 2xxxxx) to the second and another reseller I know (3xxxxx) to the third. They might have started restoring access in an incremental reseller ID manner, if you can login and perform actions please state your first 2 digits to see where you belong (eg 25xxxx).

Still can't login, my reseller id : 51xxxx Password or username error!

Still unable to log into the reseller control panel. System gives "Password or username error". Could not fund account; could not renew domains. Their phones are not working; the live chat is not working and the support ticket is not attended to. Zero communication and feedback. This is getting worse than a nightmare. How can a registrar operate in this manner in 2023?

My card on onlinenic has a fraud charge yesterday, will suggest to suspend all your cards there. We still can't see our domains, able to get the auth code but can't initiate domain transfer as all domains are locked (previously unlocked) few of our recent renewed domains are become expired onlinenic seems to have restored their database from an old backup few of our recent registered domains are completely missing from our account (domain not found when we request for auth code)

System is showing wrong lock/unlock state, just select domain and click unlock and it will be unlocked, don't pay attention to what their system is saying. We did this and were able to start domain transfer. It means that they removed all cards from their database because they were compromised (read stolen), I guess that onlinenic was so "smart" and kept all card data in a database in a plain text form. Insane. And I remember when they removed PayPal, which we used till then because of higher security we asked them how secure is to enter and save all credit card data in to their system and they were like "no worries it's 100% safe". Yea right. Luckily we didn't believe that and issued a special card just for use with onlinenic. My advice to all is to immediately inform their banks and terminate the cards they used with onlinenic. This is the only safe thing to do. You can use Revolut virtual single use cards, this is what we do now. You can open Revolut account in a few minutes and you will have virtual single use cards that are destroyed after you make a payment. This is very safe. It looks like today thinks are getting better with onlinenic, they started answering the tickets and system is working almost fine. Don't know who will stay with them after all this. Try today, it looks that they managed to fix the system. My advice is to terminate cards that you used with onlinenic and use service like Revolut, in their app you can create unlimited number of single time use cards that you can use with Onlinenic and cards will be destroyed after first use. Mine were charged from some U.S. stores, I guess that cards were sold to many different people. Terminate the card, my advice. Try now, I think it's working, at least it works for us. Regarding cards read over my comments. They are very slow and will first direct you to conact Onlinenic... they will help but it will probably take some time, weeks or maybe months...

Woowwww , it's good luck for you.

@ finekeys , have you tried resetting your password?

I cannot see any domains. Has anyone managed to unlock domains? The auth code link is the only one that still works

Yes my userid is 26**** . Thanks for clarifying. Hopefully it gets restored soon for all IDs

We have managed to access our other account (we used the password reset form), domains are there, can renew and API is working We also got a reply on tickets from OnlineNIC

Thanks for the heads up. Unfortunately resetting password system also does not work. The resulting page comes up with "No match found, please check your input." error. Yet, the whmcs now links to their system, but without access to the control panel, the account cannot be funded and domains renewed.

i have tried renew but failed. i have tried transfer bu failed. my domains expired today.. I am in a difficult situation.. sleepless.. customers will call me.. I do not know what will I do.. (edit: i cannot add funds.. i cannot tried renew.. )

I have an available balance with Onlinenic. Hope that's still there

are domains being restored without communicating with them about the missing domains? It's worrying because I informed them about my 3 missing domains and they restored them in a few hours.

What are the first 2 numbers of your reseller ID? Maybe something other than 10xxxxx-29xxxxx?