Plumpfluffycubs.com — 20 days, unresolved: domain held by a third party, DNS zone abused for SEO spam on Netlify infrastructure

Support
1

This is now day 20 of an unresolved case, and I am escalating it publicly because e-mail support has not produced a single concrete action.

Facts. My team is mariedejean09, my project is friendly-mousse-d81c73. The domain plumpfluffycubs.com is set as my primary domain and has been stuck in “Pending DNS verification” from the start. The DNS page of my team is empty. I have never had control of this domain, despite being told by e-mail that it had already been transferred to my account. That statement was simply false, and it cost me two weeks.

Until a few days ago, the zone was being used against me: apex and wildcard pointing to 37.1.220.245, an offshore VPS and not a Netlify IP, with hundreds of numeric subdomains serving scraped spam content indexed by Google. This ran on an NS1 zone attached to your DNS platform while I, the legitimate owner of the project, had no access to it whatsoever.

Current state. The zone now answers empty: NS dns1-4.p09.nsone.net, SOA parked.nsone.net. The registry delegation at Name.com still points to dns1-4.p08.nsone.net, so a zone I cannot reach still exists. Registrar Name.com, created 2025-03-13, expires 2027-03-13, status clientTransferProhibited, last changed 2026-02-09. Nothing at registrar level has moved. The abuse stopped; my ownership problem did not.

Please do not ask me for a verified-for-netlify TXT record. I have read the guides. I cannot create any DNS record, because the zone is not mine — that is the entire issue.

What I require, with an answer to each numbered point:

  1. The identity of the Netlify team currently holding plumpfluffycubs.com, and immediate release of that domain.
  2. Deletion of every remaining NS1 zone for this domain on your side, p08 and p09 included.
  3. Revocation of all access still held by the previous account holder over this domain and over my project friendly-mousse-d81c73.
  4. The exact procedure to move the registration to my team despite the clientTransferProhibited lock, including who at Name.com must act and on what basis.

Please treat this as a security and abuse case, not a configuration question, and escalate it to someone with the authority to release the domain. I would like a substantive reply within 48 hours. I will provide my account e-mail privately on request.

2

Hi, @Marie_Dejean. We have replied on the support ticket and the issue should be resolved now.