Approximately 30 days after the Jan 19, 2010 emails were sent and intercepted (see previous blog posts and Exhibits A-V), the domain thieves began the deliberate process of deleting WRTA's stolen domain name (ReligiousTravelAssociation.com).
Domain thieves initiated the deletion process of the domain name around Feb 22, 2010. This deletion was a full 8 months PRIOR to the stolen domain name's natural expiration date of Oct 28, 2010 (which WRTA had pre-paid with its financial resources through this October date).
Among the reasons the thieves began the deletion process of the domain name was to destroy among other things evidence of their domain theft and email interception/theft.
Financial gain may have also been a part of the deletion process, as WRTA re-purchased its stolen domain name 6 months later (Aug 2010) for $500 from an unknown domain broker.
WHAT TO LOOK FOR?
The images below are in chronological order of the events as they happened in Jan-Feb 2010.
+ This shows the instructions from GoDaddy.com regarding how to delete a domain name.
+ This is a record of the stolen domain name showing/listing the most recent update as Jan 20, 2010. Furthermore, the record shows a natural expiration date of Oct 28, 2010.
+ The registrar status of the domain shows no signs of a redemption period, deletion, etc.
+ This screenshot shows that domain thieves have begun the deliberate premature deletion process of the stolen domain name. As seen in the record, it shows that as of Feb 22, 2010 - the domain is now in the "redemption period". Yet again, the natural expiration date as seen here isn't until Oct 28, 2010.
This is the last screen shot on record and available from Google cache featuring content on the stolen domain before the content was removed due to the deletion of the domain by the thieves.
Google search of the stolen domain on Feb 25, 2010.
Screenshot of the stolen domain of ReligiousTravelAssociation.com as it appeared on Feb 26, 2010. Due to the deletion of the domain by the thieves, there is no longer content on the stolen website as seen in this image.
Google search of the stolen domain on Feb 28, 2010.
Domain records show the "pending deletion" of the stolen domain name on March 25, 2010. The domain record also shows "Acquire this Domain Name".
Domain record as seen on March 26, 2010 for the cybersquatted domain ReligiousTravelAssociation.ORG.