[Ominous]

I know domains can be hijacked by spoofing emails or using a fake passport, but can someone give me the full details on doing this/elaborate on it?

[Nefarious]

Tell them your account was stolen, make a fake ID, and that's basically it.

[Edward]

Tell them your account was stolen, make a fake ID, and that's basically it.

Note that this is normally reversible.

[Lain]

Note that this is normally reversible.

You could "transfer" the domains to another host

[Nefarious]

You could "transfer" the domains to another host

Yeah, I think namecheap does free transfers.

[Ominous]

What about brute forcing the administrative email account? How long would that take, without lockouts?

[Nefarious]

What about brute forcing the administrative email account? How long would that take, without lockouts?

I would assume there are lockouts, and the amount of time can not be determined.
But, it would go much faster if you used the full power of a VPS or Dedicated server.