ELIZABETH –A Union Township man pleaded guilty today to stealing a company’s Internet domain name and selling it over eBay for more than $110,000 to an unsuspecting buyer. This is the first known conviction for a domain name theft, Attorney General Paula T. Dow and Criminal Justice Director Stephen J. Taylor announced.
According to Taylor, Daniel Goncalves, 26, pleaded guilty to theft by unlawful taking, theft by deception, and computer theft, all in the second degree, before Superior Court Judge Stuart L. Peim in Union County. The charges were contained in a Nov. 16, 2009 state grand jury indictment.
Peim scheduled sentencing for May 6. Under the plea agreement, the Division of Criminal Justice will recommend that Goncalves be sentenced to five years in state prison. Goncalves will also be ordered to pay restitution.
Goncalves was arrested on July 30, 2009 by members of the New Jersey State Police Cyber Crimes Unit as a result of a State Police investigation into the theft of P2P.com, an Internet domain name. On that same date, troopers executed a search warrant at Goncalves’ residence and seized a large volume of business and computer records relevant to the domain name theft.
The domain naming system is a moderately regulated system of registrars who have received authority through ICANN (Internet Corporation for Assigned Names and Numbers) to register domain names for individuals and companies. Domain names are the readable addresses used by individuals and corporations to identify their presence on the Internet. For a set registration fee, the domain names are purchased for periods of up to 10 years by their registrants.
There is a large community of individuals who frequently refer to themselves as “domainers” who buy and sell domain names they speculate will become more valuable over time. Two and three letter domain names are particularly valuable as they are easy to remember and generate larger amounts of traffic, which produces revenue.
P2P.com, LLC, was formed by its owners, Marc Ostrofsky, and husband and wife Albert and Lesli Angel, expressly for the purchase and management of one domain name, P2P.com. Because of its short length and topical relation to the exploding Peer to Peer file sharing phenomenon, the domain name P2P.com was particularly valuable, with an estimated value of between $160,000 and $200,000 at the time of its theft.
The New Jersey State Police Cyber Crimes Unit initiated an investigation in October 2008 when representatives of P2P.com, LLC contacted them and asserted that their domain name had been stolen from their GoDaddy account in May 2006.
Deputy Attorney General Kenneth R. Sharpe prosecuted the case and represented the Division of Criminal Justice Major Crimes/Computer Analysis & Technology Unit at today’s guilty plea hearing. Detective Sgt. John Gorman led the investigation for the New Jersey State Police Cyber Crimes Unit.
P2P.com, LLC began investigating the matter privately in May 2007, when an individual in the “domaining” community observed irregularities in the P2P.com site content and advised the company. A check of the P2P.com, LLC corporate GoDaddy domain account revealed that the domain name had been transferred without their knowledge or consent almost a year earlier.
After investigating privately and consulting with law enforcement, the company concluded that the suspect was in New Jersey. P2P.com, LLC contacted Detective Sgt. Gorman of the New Jersey State Police, who began an in-depth investigation involving the analysis of thousands of pages of evidence.
In pleading guilty, Goncalves admitted that in May 2006, he illegally accessed the GoDaddy account belonging to P2P.com, LLC and initiated a transfer of the domain name to his personal GoDaddy account. Records obtained from GoDaddy verified that the same IP address utilized to log into the P2P.com, LLC account and initiate the transfer was used to log into Goncalves’ own GoDaddy account and receive the transferred domain, completing the theft.
IP addresses are assigned to all Internet users by their service provider and rarely change within a 24-hour period. The investigation found that attempts were made shortly thereafter to transfer the domain away from GoDaddy to a different registrar, but ICANN rules prohibited this transfer for 60 days. Nine days after the 60-day GoDaddy transfer prohibition was concluded, Goncalves moved the domain name to a different registrar.
Goncalves admitted that, after moving the domain name, he again waited the mandatory 60 days and listed the name for sale on eBay in September of 2006, where it was purchased for $111,211. The purchaser, a professional basketball player in the NBA, was unaware that the domain name was stolen.
Civil litigation is currently active regarding the ownership and money associated with P2P.com. At this time, the site has been returned to the original owners.
Connect with NJTODAY.NET
Join NJTODAY.NET's free Email List to receive occasional updates delivered right to your email address!