Domain Hijacking Case: What Happened with ThatsNoMoon.com and Why It Matters

Domain hijacking the unauthorized takeover of a domain name is one of the most concerning risks in the domain ecosystem. Recently, a high-profile case involving the domain ThatsNoMoon.com brought this issue squarely into the spotlight, illustrating how a disgruntled founder allegedly seized control of a company’s domain, disrupted operations, and sparked a costly legal battle.

This article explores what happened, how domain hijacking works, the legal and operational impact, and key lessons for domain investors and business owners.

What Happened with ThatsNoMoon.com

In January 2026, three co-founders of video game studio That’s No Moon filed a lawsuit in a California court alleging that a former co-founder and ex-CEO hijacked the company’s main domain name ThatsNoMoon.com. According to the complaint, the former CEO allegedly took control of the domain and disabled access to the company’s website and corporate email accounts.

The domain had been originally purchased when the company was founded, with the understanding that it would be controlled by the company itself. However, after the co-founder’s departure in 2022, he retained administrative access. On January 6, it is alleged that he used this access to lock out the company’s internal IT team, interrupt email services, and leave the company’s online presence offline for two days while engineers worked to restore service.

During the outage, external visitors saw the company website redirect briefly to unrelated content. The lawsuit even claims that the hijacker listed the domain on GoDaddy Auctions at a price of $6,666,666, which the plaintiffs noted may have been chosen “for its Satanic connotation.”

Business and Operational Impact

The consequences of this alleged hijacking were severe:

• Website and email outages disrupted internal communication and external engagement.
• Payroll, HR, and business operations experienced interruption due to loss of email access.
• The company had to register a new domain (ThatsNoMoon.co) and migrate online operations to restore presence.
• The financial impact reportedly exceeded $1 million when considering costs related to downtime, communication breakdown, and remediation.

This illustrates that domain hijacking isn’t just a technical nuisance, it can disrupt business continuity and incur substantial financial loss.

What Is Domain Hijacking?

Domain hijacking is when someone gains unauthorized control over a domain name without the consent of its rightful owner. This can happen through:

• Compromised registrar accounts
• Weak account security or social engineering
• Exploitation of administrative access
• Registry or DNS control manipulation

Once control is obtained, the hijacker may change DNS settings, disable email, redirect web traffic, or resell the domain. Cases like ThatsNoMoon.com emphasize how critical secure control of domain accounts is.

Why Domain Hijacking Is a Serious Threat

Hijackers often exploit human or technical vulnerabilities:

• Compromised login credentials are a common vector.
• Social engineering attacks target account recovery options or registrar support.
• Weak use of security features like two-factor authentication (2FA) can leave accounts exposed.

Cybercriminals also use broader tactics like DNS hijacking, where attackers change DNS records at the provider level to redirect traffic without altering ownership a tactic highlighted by security researchers in previous domain infrastructures.

Legal and Trademark Dimensions

In the That’s No Moon case, the lawsuit includes allegations covering:

• Trademark infringement
• Cybersquatting
• Computer fraud
• Conversion (unauthorized control of property)
• Breach of contract
• Trespass to chattels (interference with company property)

These claims underscore the overlap between domain ownership disputes and broader legal issues such as intellectual property rights and contract obligations.

It also highlights the importance of trademark registrations: without prior trademark protection on the brand name, companies may face challenges in legal disputes over domain control a point mentioned in the lawsuit.

How to Protect Your Domain

This case offers several important lessons for domain owners and investors:

1. Enable Strong Security Measures

Use strong passwords, enforce two-factor authentication (2FA), and protect account recovery options. Weak security increases the risk of unauthorized access.

2. Keep Domain Registration Centralized and Controlled

Ensure that domain registrations are under the legal entity of the company, not an individual. This prevents ownership disputes if personnel changes occur.

3. Monitor Whois and Registrar Information

Regularly review domain registration and administrative contact data through services like Whois to ensure no unauthorized changes occur.

4. Register Trademarks Early

Trademark protection strengthens legal standing in ownership disputes and can deter bad actors from attempting cybersquatting or extortion.

Broader Implications for Domain Investors

The ThatsNoMoon.com incident highlights that domain investing whether for startups, brand builders, or aftermarket traders involves more than speculative pricing and sales trends. Secure ownership, access control, and legal readiness are equally critical to protecting domain assets.

Potential domain investors should also consider:

• Security practices of registrars
• The risks of personal vs corporate ownership
• The intersection between domain names and intellectual property law

Being prepared for worst-case scenarios can preserve not just financial value, but business continuity and brand reputation.

Conclusion: Lessons from ThatsNoMoon.com

The ThatsNoMoon.com hijacking case is a stark reminder that domain ownership is both a technical and legal responsibility. Unauthorized control of a domain can disrupt operations, incur significant financial losses, and escalate into protracted legal disputes.

For entrepreneurs, domain investors, and digital brands, the key takeaway is clear: secure your domain, protect access, and align your digital assets with strong legal safeguards to minimize the risk of abuse or exploitation.