Sex.com Saga The Most Infamous Domain Theft in History

In the annals of internet history, few domain names have acquired the notoriety and legendary status of Sex.com, not just for its overt commercial potential, but for the astonishing legal and criminal saga that surrounded its theft, reclamation, and eventual sale. At the heart of the story lies one of the most brazen and consequential acts of domain hijacking ever perpetrated—a theft so audacious and complex that it exposed foundational weaknesses in early internet governance and reshaped the way registrars, courts, and digital entrepreneurs think about digital property rights.

The story begins in the mid-1990s, during the formative years of the commercial internet. Stephen Michael Cohen, a convicted fraudster with a history of legal troubles, managed to seize control of the domain name Sex.com from its rightful owner, entrepreneur Gary Kremen. Kremen had registered the domain in 1994 through Network Solutions, then the only domain registrar authorized to issue .com domains. He did so with the intent of developing it into an online classifieds service akin to Match.com or Craigslist, tailored around adult services. The domain was unused but legally his—a piece of virtual property established under the prevailing rules of the DNS.

What happened next remains one of the most staggering examples of early-era registrar insecurity. In 1995, Cohen forged a letter—on phony company letterhead—claiming that Kremen had abandoned the domain and authorized its transfer to Cohen’s company, Ocean Fund. Unbelievably, Network Solutions accepted the faxed letter without any verification or contact with Kremen. Within days, Cohen had gained administrative control over Sex.com and began monetizing the traffic with a series of adult content partnerships, banner ads, and email spamming operations that generated millions in revenue.

The domain, a single word of profound search relevance and commercial magnetism, quickly became one of the most valuable digital assets in existence. Its type-in traffic alone—people manually typing “sex.com” into their browsers—produced astronomical revenue with minimal marketing. Cohen, realizing the financial power of the domain, built an empire around it, raking in an estimated $100 million over several years. Meanwhile, Kremen, blindsided by the theft and astounded at the registrar’s complacency, began a protracted legal battle to reclaim his stolen property.

The court proceedings, which stretched over the better part of a decade, were as dramatic and convoluted as the theft itself. Kremen sued both Cohen and Network Solutions, alleging negligence and seeking the return of the domain along with damages. Network Solutions, for its part, argued that domain names were not “property” in the traditional legal sense and thus not subject to conventional protections or remedies. This position, common in the early internet era, allowed registrars to evade liability in many domain disputes by arguing that a domain was merely a contract for service, not a tangible asset.

However, the courts disagreed. In a landmark 2001 decision, a federal judge ruled that a domain name could indeed be considered property under California law and that Network Solutions had erred by transferring it without proper authorization. More importantly, the court found Cohen liable for conversion—a tort akin to theft—for his fraudulent acquisition of the domain. Kremen was awarded a $65 million judgment against Cohen, a staggering sum that underscored both the economic value of domain names and the egregiousness of the theft.

But collecting the judgment proved nearly impossible. Cohen had fled the country to Mexico, moving assets through a tangle of offshore accounts and shell corporations designed to frustrate creditors. For years, Kremen’s legal team pursued Cohen across borders, attempting to trace hidden funds, secure arrest warrants, and enforce judgments. At one point, Cohen was arrested in Mexico and extradited to the United States, only to be released on bond while continuing to defy court orders. He spent time in jail for contempt but never fully paid the damages. Some assets were recovered, including luxury items and a few million dollars, but the majority of the award remains unpaid.

The broader implications of the Sex.com saga rippled through the domain name industry. It exposed a critical vulnerability in registrar protocols—namely, the ease with which domain ownership could be transferred without due diligence or authentication. As a result of the scandal, registrars began adopting more rigorous transfer verification processes, including multi-factor authentication, email confirmations, and later, domain locking features to prevent unauthorized changes. ICANN, still evolving its policy frameworks at the time, came under pressure to standardize security requirements and better define the property status of domain names.

Moreover, the case helped shape the legal understanding of domains as valuable assets capable of being stolen, litigated over, and valued in court. It provided a framework for future disputes involving cybersquatting, hijacking, and domain theft, and gave legitimacy to domain portfolios as corporate assets worthy of investment, insurance, and legal protection. Kremen’s victory, partial though it was, also inspired a generation of domain investors and digital rights advocates to push for stronger user protections and clearer ownership norms in the digital space.

Eventually, after years of legal battles and partial recoveries, Kremen regained control of Sex.com. In 2006, he sold the domain for a reported $14 million to Escom LLC, a company hoping to build an adult entertainment hub. The sale was, at the time, one of the largest domain-only transactions in history, affirming the domain’s enormous intrinsic value even a decade after its theft. While Escom later filed for bankruptcy, and the domain passed through several owners in subsequent years, the Sex.com name retained its aura of both commercial potency and legal infamy.

Today, the Sex.com case remains a cautionary tale and a defining moment in the evolution of internet governance. It illustrates how digital property, though intangible, is subject to very tangible threats—and how legal systems must evolve to keep pace with the realities of a networked economy. In many ways, the saga of Sex.com was a story of the Wild West internet era: a place of opportunity, exploitation, and frontier justice. It forced a reckoning with the responsibilities of registrars, the vulnerability of digital assets, and the lengths to which people will go to control a name. Few domain names have ever told a story quite like it—and perhaps none ever will again.

In the annals of internet history, few domain names have acquired the notoriety and legendary status of Sex.com, not just for its overt commercial potential, but for the astonishing legal and criminal saga that surrounded its theft, reclamation, and eventual sale. At the heart of the story lies one of the most brazen and consequential…