Matt's Models Hijacked? - GoFuckYourself.com

priest · 02-23-2003, 01:43 AM

I received this email tonight:

Attention all affiliates.
MattsModels.com domain has been hijacked by a hacking criminal thru Network Solutions/Verisign . Please point all traffic to http://www.mattsmodels.net untill we resolve this with problem with Network Solutions/Verisign. Also..please DO NOT send email to [email protected] ...instead send email to me at [email protected].
Thanks for your patience and understanding. Any input would also be appreciated. - Matt

cafeaulait · 02-23-2003, 03:04 AM

Mee too.

But what weird is if you go to the socalled new domain at www.mattsmodels.net then it just links back to mattsmodels.com when you hit the Enter button. Weird. Seems fishy to me.

G

angelsofporn · 02-23-2003, 03:34 AM

Registrant:
Murathanogullarindan, Murat (MATTSMODELS-DOM)
Nuri Pamir Cad. No. 11/9
Kolej-ANKARA, TR 06280
TR
looks like they own the domain now

angelsofporn · 02-23-2003, 03:36 AM

i would be on a flight to india right now to straighten out the little indian fuck who wanted to screw around

delia · 02-23-2003, 03:38 AM

What is this? Is this true? Or is it just a joke or a way to get more traffic?

Mr.Fiction · 02-23-2003, 03:41 AM

Quote:

Originally posted by angelsofporn
i would be on a flight to india right now to straighten out the little indian fuck who wanted to screw around

With domain stealing, a lot of the time it's Americans who use whois addresses in other countries so they can hide who they really are. We've dealt with a number of these type of cases.

Oliver Klozov · 02-23-2003, 03:43 AM

Oh man that really sucks!

Does anyone know Matt? Does he ever post on GFY?

I would love to hear the story of what happened?

I sure hope it's not because he just forgot to renew his domain name.
That would really, really suck.

Mr.Fiction · 02-23-2003, 03:46 AM

I wonder how they took over the domain. It looks like he was using a normal email address, though it was at the domain itself. Maybe someone got ahold of the nameservers somehow and redirected the mail so they could transfer the name? Anyone know anymore details on what specifically happened?

Network Solutions will probably tell him that it's not their problem and he'll have to get a lawyer to get this resolved.

justsexxx · 02-23-2003, 03:47 AM

Damn you see it more and more......

Andre

02-23-2003, 03:47 AM

matt is cool as shit

if he wants to fuck the dude up who stole his shit, i have his back

Mr.Fiction · 02-23-2003, 03:53 AM

Quote:

Originally posted by justsexxx
Hi,

You see it more and more that domain hyacking. My question is, when you are not with Verisign, or directnic, are you "more" safe?

Andre

You are more safe, in theory, if you are with a company who cares about their customers and tries to resolve fraud issues.

If Network Solutions knows that a name is stolen, they often won't do anything about it. Even if you can prove it to them, they won't give the name back to you. They tell you to sue the other guy who stole it. If you deal with another registrar, one who cares about your business, then they can take the name back from the thief once you prove it's stolen and give it back to you. They can then tell the thief to sue them or you if he has a problem with a stolen name being given back to the real owner.

If the name gets transferred out of your registrar by the thief before you can stop it, then you are really fucked. Once there are two registrars involved, you better get a lawyer and be patient if you ever want your name back.

That name is still at Network Solutions it looks like, so they could give it right back to him. I doubt they will. It did not expire, it shows a 1999 registration date.

flashfreak · 02-23-2003, 03:55 AM

Quote:

Originally posted by angelsofporn
i would be on a flight to india right now to straighten out the little indian fuck who wanted to screw around

better Turkey... Ankara is in Turkey...

ServerGenius · 02-23-2003, 03:58 AM

Quote:

Originally posted by angelsofporn
i would be on a flight to india right now to straighten out the little indian fuck who wanted to screw around

What will you be doing in India?.......Last time I checked Ankara
is in Turkey!

DynaMite

Oliver Klozov · 02-23-2003, 03:58 AM

Quote:

Originally posted by Mr.Fiction

.........It did not expire, it shows a 1999 registration date.

How do you know that it did not expire?

ServerGenius · 02-23-2003, 03:58 AM

Quote:

Originally posted by flashfreak

better Turkey... Ankara is in Turkey...

Damn you beat me to it LOL

DynaMite

Mr.Fiction · 02-23-2003, 04:02 AM

Quote:

Originally posted by Oliver Klozov

How do you know that it did not expire?

I assume you are asking how you can tell that it didn't expire and get re-registered.

Two reasons:

1. There have been no normal domain drops for the last 20+ days, so no one could have re-registered it in the last few weeks even if it did expire.

2. When a name is re-registered, the registration date would be the date when the new owner registered it, within the last few days, not a date 4 years in the past.

Also, the expiration date is in September, which would make no sense.

Oliver Klozov · 02-23-2003, 04:06 AM

Quote:

Originally posted by Mr.Fiction

I assume you are asking how you can tell that it didn't expire and get re-registered.

Two reasons:

1. There have been no normal domain drops for the last 20+ days, so no one could have re-registered it in the last few weeks even if it did expire.

2. When a name is re-registered, the registration date would be the date when the new owner registered it, within the last few days, not a date 4 years in the past.

Also, the expiration date is in September, which would make no sense.

Very interesting I did not know that, or maybe I did and just never put it together.

You learn something new everyday, thanks for the info.

flashfreak · 02-23-2003, 04:10 AM

Quote:

Originally posted by DynaSpain

Damn you beat me to it LOL

DynaMite

I'll share the prize with you

Mr.Fiction · 02-23-2003, 04:17 AM

Quote:

Originally posted by Oliver Klozov

Very interesting I did not know that, or maybe I did and just never put it together.

You learn something new everyday, thanks for the info.

The part about the drops stopping is a very rare occurrence. They changed the expiration policy on .net and .com names recently, and we are nearing the end of a 30 day period where almost zero domains in those TLD's were released. Pretty crazy month. Notice that I've been posting more on GFY.

Filter · 02-23-2003, 05:23 AM

hijack it back!

xerox · 02-23-2003, 05:24 AM

Isnt this the same thing that happened with Gary Kremen and sex.com? If so Matt can sue for a few million

cafeaulait · 02-23-2003, 05:30 AM

Quote:

Originally posted by xerox
Isnt this the same thing that happened with Gary Kremen and sex.com? If so Matt can sue for a few million

"sex.com" was awarded damages for lost typein traffic, I doubt MattsModels.com would warrant the same

I just don't understand why in the email he sent out to affiliates about the hi-jack it says change your links to mattsmodels.net but then that is just a splashpage back to mattmodels.com???

xerox · 02-23-2003, 05:33 AM

Check the html source, that should answer ur question, he not of updated it to the new site

Juggernaut · 02-23-2003, 05:35 AM

Quote:

Originally posted by Mr.Fiction

I assume you are asking how you can tell that it didn't expire and get re-registered.

Two reasons:

1. There have been no normal domain drops for the last 20+ days, so no one could have re-registered it in the last few weeks even if it did expire.

2. When a name is re-registered, the registration date would be the date when the new owner registered it, within the last few days, not a date 4 years in the past.

Also, the expiration date is in September, which would make no sense.

That sounds pretty much right, if whoever it was that "hijacked" this domain, it would seem they just went to the domain manager inside mydomain.com and changed the details to the current whois info.

SGS · 02-23-2003, 05:40 AM

Stats, dates and everything else is all over the place at Network Solutions over the last few days as they put the new (paid for) instant DNS manager service into place.

LiveDose · 02-23-2003, 05:54 AM

Quote:

Originally posted by Juggernaut

That sounds pretty much right, if whoever it was that "hijacked" this domain, it would seem they just went to the domain manager inside mydomain.com and changed the details to the current whois info.

Though when I've transfered domains to other registars before they expire the original registration date has been kept in the record. So it could have been completely transfered to someone else...

Juggernaut · 02-23-2003, 06:09 AM

Quote:

Originally posted by LiveDose

Though when I've transfered domains to other registars before they expire the original registration date has been kept in the record. So it could have been completely transfered to someone else...

Yeah that's right, but in this case, I simply think this "Murat" person who is the new registered contact for the domain, may have just taken over the username that Airwood Media owned with mydomain.com (a guess)

Because the details in the whois information have a date that isn't even close to today's date. Domains are usually in yearly blocks.

http://mail.kirmizi.com/login.cgi - is the login server for [email protected] who happens to be the registered contact for mattsmodels.com and I'm sure that is the same email attached to the account held with mydomain.com

Anyone have a knack at gaining access to such things?

TomsPics · 02-23-2003, 06:21 AM

Are my domains safe from these fuckers if im using directnic? if not im willing to transfer this is like the 5th domain ganking story i heard about this week.

LiveDose · 02-23-2003, 06:22 AM

Quote:

Originally posted by TomsPics
Are my domains safe from these fuckers if im using directnic? if not im willing to transfer this is like the 5th domain ganking story i heard about this week.

Make sure you have HIGH SECURITY set in the customer settings area.

TomsPics · 02-23-2003, 06:26 AM

Transfer Security Settings Updated!
It may take up to 15 minutes for all changes to take effect.

Whew ;d

justsexxx · 02-23-2003, 06:39 AM

Also, isn't it a good idea, to have your WHOIS email, another email then you use to login to your registrar?

That way it makes no sense anymore to hack your email account you use in the whois....

Andre

xerox · 02-23-2003, 06:52 AM

It was probably easy to hijack mattsmodels, all you have to do to transfer a domain is print out a form on netsol.com, sign it and fax it in with the new contact info, netsol doesnt check their resources they just transfer it, thats why they suck ass. they dont even require you to fax in your ID to verify! They just trust a signature. I recommand godaddy and doster

Calvinguy · 02-23-2003, 07:29 AM

Does Network Solutions have a simular function as Directnic to lock the domains from being transfered?

stocktrader23 · 02-23-2003, 08:18 AM

I bought a website from someone that was hosted on network solutions/verisign. We couldn't get the fuckers to switch the name over so I decided to redirect it to a new site. I went into their domain forwarding and typed in the site to forward to, paid $10, and pointed that domain to my site. Mind you I did all this without a username, password, or proof of ID. I could have pointed any domain on network solutions to my site in a few minutes.

FUCK VERISIGN

Juggernaut · 02-23-2003, 08:27 AM

Paying for it with a credit card I assume? - that is a form of ID...

LiveDose · 02-23-2003, 08:53 AM

Quote:

Originally posted by Calvinguy
Does Network Solutions have a simular function as Directnic to lock the domains from being transfered?

Do yourself a favor and transfer your names away from network solutions before someone else does it for you... network solutions is a lousy company and they are not secure as far as domains go.

strobi · 02-23-2003, 09:12 AM

Oh no another one! Makes me shiver just thinking about it! Hope I can get some support form the big guys around here if that happens! Bad luck

besterman · 02-23-2003, 10:15 AM

check out this article (kinda old from 2000) but seems to still apply:

http://www.securiteam.com/securityne...tep_guide.html

Cindyff · 02-23-2003, 10:26 AM

Matt is not only a nice guy he is an experienced webmaster his site was doing very well last time i talked to him . So if this is true its a real bad day for Matt.

I am going to phone him now and get the skinny thats if he is out of bed yet its only 9.20 here in CA

Rochard · 02-23-2003, 10:30 AM

First mistake: Network Solutions/Verisign.

I can't believe anyone still uses them.

Cindyff · 02-23-2003, 11:04 AM

He's out of town , so i guess we will have to wait until Monday .

Good luck Matt

Cindy xx

SGS · 02-23-2003, 11:37 AM

Its amazing with more and more stories like this and quite a few of us out there making several hundred thousand dollars a year from each site that we run that there are still more posts asking for the cheapest registrar rather than the most secure.

What is *the* most secure registrar?

Splicer · 02-23-2003, 11:45 AM

Quote:

Originally posted by RocHard
First mistake: Network Solutions/Verisign.

I can't believe anyone still uses them.

Exactly.

It's expensive and insecure as you can see.

DeanCapture · 02-23-2003, 12:21 PM

Quote:

Originally posted by Oliver Klozov
Oh man that really sucks!

Does anyone know Matt? Does he ever post on GFY?

I would love to hear the story of what happened?

I sure hope it's not because he just forgot to renew his domain name.
That would really, really suck.

I know Matt - I will see if I can get the lowdown on what happened

-later

Dean*

jimmyf · 02-23-2003, 12:59 PM

Quote:

Originally posted by SGS

What is *the* most secure registrar?

I've wondered this for a LONG time. I was going 2 transfer some domain's from

NetworkSolutions 2 DirectNic about 2 months ago, I'll be dam if i could figure

NetworkSolutions stuff out. Just threw up my hands and quit. Security they say, HELLO Think I know what it is, they make it so fucking hard people do what I did.

banshman · 02-23-2003, 01:10 PM

Mattsmodels.com is back up! Anyone have any word on what happened?

Banshman

Oliver Klozov · 02-23-2003, 01:28 PM

Quote:

Originally posted by banshman
Mattsmodels.com is back up! Anyone have any word on what happened?

Banshman

I don't think so dude click on that "enter" button.

Front page is up but the whois infomation is still wrong and once you click on the "enter" button you get some "under construction" page.

Far as I can see his site is not back up.

Who is infomation is.......

*WHOIS Record for
mattsmodels.com Back-order this name Make an unsolicited offer*

Registrant:
Murathanogullarindan, Murat (MATTSMODELS-DOM)
Nuri Pamir Cad. No. 11/9
Kolej-ANKARA, TR 06280
TR

Domain Name: MATTSMODELS.COM

Administrative Contact, Technical Contact:
Murathanogullarindan, Murat (AVCZQTNJFI) [email protected]

Nuri Pamir Cad. No. 11/9
Kolej-ANKARA, TR 06280
TR
312-462-9947

Record expires on 09-Sep-2010.
Record created on 09-Sep-1999.
Database last updated on 23-Feb-2003 15:15:18 EST.

Domain servers in listed order:

NS1.MYDOMAIN.COM 64.94.117.195
NS2.MYDOMAIN.COM 216.52.121.228
NS3.MYDOMAIN.COM 66.150.161.130
NS4.MYDOMAIN.COM 63.251.83.74

Calvinguy · 02-23-2003, 02:57 PM

Quote:

Originally posted by jimmyf
I've wondered this for a LONG time. I was going 2 transfer some domain's from NetworkSolutions 2 DirectNic about 2 months ago, I'll be dam if i could figure NetworkSolutions stuff out. Just threw up my hands and quit. Security they say, HELLO Think I know what it is, they make it so fucking hard people do what I did.

I'm trying to move a domain from netsol to directnic in this moment. It looks like you should go to directnic and enter the domains you wish to transfer and then reply to the approval email.

J.R. · 02-23-2003, 03:07 PM

Matt is a friend of mine.. I will contact him to
see whats up!

Halx · 03-06-2003, 03:00 PM

As an employee of Matt's I want to make it clear that we are back up and running. The guy who hijacked the domain was... ahem... gracious enough to give it back to us. Matt will be explaining the ordeal on the site in the weeks to come.

Let me say this now, though: Do not register your domain with a free mail account!

Rock on all you who were concerned.

02-23-2003, 01:43 AM	#1
priest Confirmed User Industry Role: Join Date: Aug 2002 Location: Los Angeles, California Posts: 140	Matt's Models Hijacked? I received this email tonight: Attention all affiliates. MattsModels.com domain has been hijacked by a hacking criminal thru Network Solutions/Verisign . Please point all traffic to http://www.mattsmodels.net untill we resolve this with problem with Network Solutions/Verisign. Also..please DO NOT send email to [email protected] ...instead send email to me at [email protected]. Thanks for your patience and understanding. Any input would also be appreciated. - Matt

02-23-2003, 03:38 AM	#5
delia Confirmed User Join Date: Feb 2003 Location: Europe Posts: 381	What is this? Is this true? Or is it just a joke or a way to get more traffic? __________________ ProAdult My number one AVS

02-23-2003, 03:43 AM	#7
Oliver Klozov Confirmed User Join Date: Jul 2001 Location: San Diego, Ca. USA Posts: 629	Oh man that really sucks! Does anyone know Matt? Does he ever post on GFY? I would love to hear the story of what happened? I sure hope it's not because he just forgot to renew his domain name. That would really, really suck. __________________ Babe-Bucks.com ICQ 895-80-702 oliversgirls at gmail.com

02-23-2003, 03:47 AM	#9
justsexxx Too lazy to set a custom title Join Date: Aug 2001 Location: The Netherlands Posts: 13,723	Damn you see it more and more...... Andre __________________ Questions? ICQ: 125184542

02-23-2003, 05:23 AM	#20
Filter Confirmed User Join Date: Oct 2002 Posts: 457	hijack it back! __________________ Get your site reviewed at pornliving.com

02-23-2003, 03:04 AM	#2
cafeaulait Confirmed User Industry Role: Join Date: Jun 2002 Posts: 587	Mee too. But what weird is if you go to the socalled new domain at www.mattsmodels.net then it just links back to mattsmodels.com when you hit the Enter button. Weird. Seems fishy to me. G

02-23-2003, 03:34 AM	#3
angelsofporn Confirmed User Join Date: Mar 2002 Location: CA Posts: 3,218	Registrant: Murathanogullarindan, Murat (MATTSMODELS-DOM) Nuri Pamir Cad. No. 11/9 Kolej-ANKARA, TR 06280 TR looks like they own the domain now

02-23-2003, 03:36 AM	#4
angelsofporn Confirmed User Join Date: Mar 2002 Location: CA Posts: 3,218	i would be on a flight to india right now to straighten out the little indian fuck who wanted to screw around

02-23-2003, 03:46 AM	#8
Mr.Fiction Confirmed User Join Date: Feb 2002 Location: Free Speech Land Posts: 9,484	I wonder how they took over the domain. It looks like he was using a normal email address, though it was at the domain itself. Maybe someone got ahold of the nameservers somehow and redirected the mail so they could transfer the name? Anyone know anymore details on what specifically happened? Network Solutions will probably tell him that it's not their problem and he'll have to get a lawyer to get this resolved.

02-23-2003, 03:47 AM	#10
esnem Guest Posts: n/a	matt is cool as shit if he wants to fuck the dude up who stole his shit, i have his back

02-23-2003, 05:24 AM	#21
xerox Confirmed User Join Date: Feb 2003 Posts: 672	Isnt this the same thing that happened with Gary Kremen and sex.com? If so Matt can sue for a few million

02-23-2003, 05:33 AM	#23
xerox Confirmed User Join Date: Feb 2003 Posts: 672	Check the html source, that should answer ur question, he not of updated it to the new site

02-23-2003, 05:40 AM	#25
SGS Confirmed User Industry Role: Join Date: Dec 2002 Location: Mallorca - Nottingham Posts: 5,176	Stats, dates and everything else is all over the place at Network Solutions over the last few days as they put the new (paid for) instant DNS manager service into place. __________________ See sig...

02-23-2003, 06:21 AM	#28
TomsPics Confirmed User Join Date: Aug 2002 Location: Detroit, MI Posts: 498	Are my domains safe from these fuckers if im using directnic? if not im willing to transfer this is like the 5th domain ganking story i heard about this week.

02-23-2003, 06:26 AM	#30
TomsPics Confirmed User Join Date: Aug 2002 Location: Detroit, MI Posts: 498	Transfer Security Settings Updated! It may take up to 15 minutes for all changes to take effect. Whew ;d

02-23-2003, 06:39 AM	#31
justsexxx Too lazy to set a custom title Join Date: Aug 2001 Location: The Netherlands Posts: 13,723	Also, isn't it a good idea, to have your WHOIS email, another email then you use to login to your registrar? That way it makes no sense anymore to hack your email account you use in the whois.... Andre __________________ Questions? ICQ: 125184542

02-23-2003, 06:52 AM	#32
xerox Confirmed User Join Date: Feb 2003 Posts: 672	It was probably easy to hijack mattsmodels, all you have to do to transfer a domain is print out a form on netsol.com, sign it and fax it in with the new contact info, netsol doesnt check their resources they just transfer it, thats why they suck ass. they dont even require you to fax in your ID to verify! They just trust a signature. I recommand godaddy and doster

02-23-2003, 07:29 AM	#33
Calvinguy Confirmed User Join Date: Oct 2002 Location: European Union Posts: 1,752	Does Network Solutions have a simular function as Directnic to lock the domains from being transfered?

02-23-2003, 08:18 AM	#34
stocktrader23 Let's do some business. Industry Role: Join Date: Jan 2003 Location: The dirty south. Posts: 18,781	I bought a website from someone that was hosted on network solutions/verisign. We couldn't get the fuckers to switch the name over so I decided to redirect it to a new site. I went into their domain forwarding and typed in the site to forward to, paid $10, and pointed that domain to my site. Mind you I did all this without a username, password, or proof of ID. I could have pointed any domain on network solutions to my site in a few minutes. FUCK VERISIGN __________________ Hands Free Adult - Join Once, Earn For Life "I try to make a habit of bouncing my eyes up to the face of a beautiful woman, and often repeat “not mine” in my head or even verbally. She’s not mine. God has her set aside. She’s not mine. She’s His little girl, and she needs me to fight for her by keeping my eyes where they should be."

02-23-2003, 08:27 AM	#35
Juggernaut Confirmed User Join Date: Jan 2003 Location: Brisbane, Australia Posts: 753	Paying for it with a credit card I assume? - that is a form of ID...

02-23-2003, 09:12 AM	#37
strobi Confirmed User Join Date: Nov 2002 Location: Belgium Posts: 7,383	Oh no another one! Makes me shiver just thinking about it! Hope I can get some support form the big guys around here if that happens! Bad luck

02-23-2003, 10:15 AM	#38
besterman Confirmed User Join Date: Jan 2003 Posts: 623	check out this article (kinda old from 2000) but seems to still apply: http://www.securiteam.com/securityne...tep_guide.html

02-23-2003, 10:26 AM	#39
Cindyff Confirmed User Industry Role: Join Date: Sep 2002 Location: California Posts: 1,187	Matt is not only a nice guy he is an experienced webmaster his site was doing very well last time i talked to him . So if this is true its a real bad day for Matt. I am going to phone him now and get the skinny thats if he is out of bed yet its only 9.20 here in CA

02-23-2003, 10:30 AM	#40
Rochard Jägermeister Test Pilot Industry Role: Join Date: Dec 2001 Location: NORCAL Posts: 75,145	First mistake: Network Solutions/Verisign. I can't believe anyone still uses them. __________________ “The choice is no longer between right or left. The choice is between normal and crazy.” - Sarah Huckabee Sanders

02-23-2003, 11:04 AM	#41
Cindyff Confirmed User Industry Role: Join Date: Sep 2002 Location: California Posts: 1,187	He's out of town , so i guess we will have to wait until Monday . Good luck Matt Cindy xx

02-23-2003, 11:37 AM	#42
SGS Confirmed User Industry Role: Join Date: Dec 2002 Location: Mallorca - Nottingham Posts: 5,176	Its amazing with more and more stories like this and quite a few of us out there making several hundred thousand dollars a year from each site that we run that there are still more posts asking for the cheapest registrar rather than the most secure. What is the most secure registrar? __________________ See sig...

02-23-2003, 01:10 PM	#46
banshman Confirmed User Join Date: Jan 2003 Location: The Mist Posts: 142	Mattsmodels.com is back up! Anyone have any word on what happened? Banshman

02-23-2003, 03:07 PM	#49
J.R. WantBoobs.com Industry Role: Join Date: Feb 2002 Location: Calif & Washington Posts: 3,472	Matt is a friend of mine.. I will contact him to see whats up!

03-06-2003, 03:00 PM	#50
Halx Registered User Join Date: Feb 2003 Location: SoCal Posts: 20	As an employee of Matt's I want to make it clear that we are back up and running. The guy who hijacked the domain was... ahem... gracious enough to give it back to us. Matt will be explaining the ordeal on the site in the weeks to come. Let me say this now, though: Do not register your domain with a free mail account! Rock on all you who were concerned. __________________ -Hal Airwood Media's 50/50 RevShare - free content! Matt's Models