GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   I got a major URL hijacked. I need help. Major Help. (https://gfy.com/showthread.php?t=417245)

Dildozer 01-15-2005 10:16 PM

All that work for $400
fucking retards

SmokeyTheBear 01-15-2005 10:17 PM

Quote:

Originally Posted by Shoplifter
It seems like a well planned event, hitting a high traffic domain on a long weekend. They can install toolbars at will until Tuesday.

To my mind it seems like something someone may have been working on for a while.

You have my real sympathy with this Sleazy, this is one of my nightmares made real.

I'm very curious how they did it. If the domain wasn't locked they would have to know your email, but if it was locked they would have to know the email and the Registrar password. Have you checked your machine for key loggers or any other trojans? They may have been able to pull and then decrypt your stored password file, then they would have been able to get them all at once.


Im pretty sure he got sleazy's passwords when he was previously hacked.

When the hun was hacked by the same guy he had the hun's passwords for everything, so if his email had the same password , he prob just waited till the right time.

SmokeyTheBear 01-15-2005 10:19 PM

Quote:

Originally Posted by Dildozer
All that work for $400
fucking retards


$400 a day is 12k a month. he was making a grand a day or more from the hun

UniversalPass Pete 01-15-2005 10:21 PM

You need to contact Icann, and open a dispute ticket, you may also need to go through an arbitration service, you also need to get in touch with the current registrar! :2 cents:

Let me know how it goes for you! you need to make sure you have your domains "Locked" with the current registrar!

pornguy 01-15-2005 10:27 PM

that is vry fucked up.
I would sue the registrar. The new one and the old one, if you were sure that you had it locked down.
Talk to an attorney. May be there is legal help after all.

Good luck! and very sorry to hear.

jonesy 01-15-2005 10:30 PM

Karma . . .

Shoplifter 01-15-2005 10:33 PM

Quote:

Originally Posted by SmokeyTheBear
Im pretty sure he got sleazy's passwords when he was previously hacked.

When the hun was hacked by the same guy he had the hun's passwords for everything, so if his email had the same password , he prob just waited till the right time.

So they are hacking home boxes? I didn't hear about the previous hack.

JayJay 01-15-2005 10:36 PM

This is why I don't fuck or play around with people on the boards ect..
You never know who they are

Thurbs 01-15-2005 10:38 PM

can't claim that I "did" it for legal reasons, but it should either DDOS out or atleast run out of B/W allotted on the hosting plan soon, which should have the account suspended. so either way, it'll go down, ev1 will notice and respond to your emails promptly im sure.

icq : 294518867 .. hope it helps. :winkwink:

69pornlinks 01-15-2005 10:40 PM

Quote:

Originally Posted by simple simon
You probably called someone an idiot one too many times huh? Karmas a bitch :1orglaugh


i would respect you more if you didn't 'happen' to make this your 1st post

SmokeyTheBear 01-15-2005 10:43 PM

Quote:

Originally Posted by Shoplifter
So they are hacking home boxes? I didn't hear about the previous hack.


no it was an exploit in phpbb or in php in particular that gave up root

SmokeyTheBear 01-15-2005 10:48 PM

hmmm sleazy whats up with this ???

http://66.115.134.22/stats

that page goes to hackers site , but the cache(on google) is your stats from september. How did he get your IP ?

SmokeyTheBear 01-15-2005 10:50 PM

that page is on natnet thus your site .. your ip must be pointing to the domain or something

SmokeyTheBear 01-15-2005 10:52 PM

http://66.115.134.22/

theking 01-15-2005 10:54 PM

Quote:

Originally Posted by SmokeyTheBear
hmmm sleazy whats up with this ???

http://66.115.134.22/stats

that page goes to hackers site , but the cache(on google) is your stats from september. How did he get your IP ?

Do not click on the link. I did and picked up several virus's. I am now running my virus scanner to clean my hard drive.

theking 01-15-2005 10:58 PM

In addition the link lead to a gallery...not stats.

SmokeyTheBear 01-15-2005 10:58 PM

hmmm that registrar is shady too..

qnic.com

they have a webmaster program that inserts iframes :) and their shit looks half ass..

Thurbs 01-15-2005 11:01 PM

that registrar is much like gandi.net and others, always spammers registrars.

SmokeyTheBear 01-15-2005 11:01 PM

Quote:

Originally Posted by theking
In addition the link lead to a gallery...not stats.


Yes i think thats fairly clear since i pointed that out above..

look at that thru google and you will get the real page..

sleazy that registrar is fucked.. the one the hacker has it on now doesn't even appear to be a real registrar , plus its asking for webmasters to put this on their website

http://195.42.181.32:8000/connect.cgi?id=1713

dont click that except to test , wow it downloads adware imagine that.

SmokeyTheBear 01-15-2005 11:03 PM

ok i can even see how that guy got your domain..

Go to qnic.com * this is completely safe..

now register as a new webmaster. once your in the webmaster zone they have a box for you to add any domain you want to your account to add the spyware to

Vox 01-15-2005 11:03 PM

Quote:

Originally Posted by SmokeyTheBear
hmmm that registrar is shady too..

qnic.com

they have a webmaster program that inserts iframes :) and their shit looks half ass..

Check the whois
It's just a mail drop located in Delaware.
Fucking russians. :321GFY

KRL 01-15-2005 11:05 PM

Jesus Christ don't click any links posted in this thread.

WTF? I feel sorry for anyone without virus protection and on IE still.

:321GFY :321GFY :321GFY :321GFY

warlock5 01-15-2005 11:07 PM

Clearly this was a criminal act, I'd be contacting the FBI and making sure all involved parties got the message. The word also needs to be gotten out to other major tech news sites as it seems the new ICANN policy may have made this hacker's job easier.

GeorgeK 01-15-2005 11:07 PM

Does Sleazydream have ICQ or anything? (tried to send him some info, privately, but doesn't seem to be logged in) No need to clue in potential hijackers reading this board.

theking 01-15-2005 11:08 PM

Quote:

Originally Posted by KRL
Jesus Christ don't click any links posted in this thread.

WTF? I feel sorry for anyone without virus protection and on IE still.

:321GFY :321GFY :321GFY :321GFY

Well...as I stated...I clicked the one link and was warned of several different viruses. I am now running my virus scanner to make sure they are all taken care of and this process will take a couple of hours.

warlock5 01-15-2005 11:09 PM

Quote:

Originally Posted by KRL
Jesus Christ don't click any links posted in this thread.

WTF? I feel sorry for anyone without virus protection and on IE still.

:321GFY :321GFY :321GFY :321GFY

The host and registrar have to be assuming some major liability leaving a site like that up. If bulk spam can send people to prison for a decade then surely installing that bullshit on thousands of PCs can too.

SmokeyTheBear 01-15-2005 11:09 PM

what we all need to do is find a way to shutdown iframedollars.biz they are responsible for all of the hackers profit these days.

how can you hack thehun sleazy and yahoo in a month and they all point to iframedollars.biz and they are still running spyware..

KRL 01-15-2005 11:13 PM

Quote:

Originally Posted by theking
Well...as I stated...I clicked the one link and was warned of several different viruses. I am now running my virus scanner to make sure they are all taken care of and this process will take a couple of hours.

I had to shut down Firefox even. Fucking cock suckers. These guys should be taken out to the ocean and dumped for shark food.

Magg 01-15-2005 11:14 PM

the people who are doing ddos's... do it to the the actual site (easy-dater.com) and do it to the SPONSOR:

213.159.117.203

iframedollars.biz^

keep him from making money, and everyone else using them!

Thurbs 01-15-2005 11:14 PM

yah it kills firefox pretty fast.

KRL 01-15-2005 11:20 PM

Scott, I judy got an inside top level connection at Dotster for you through one of my domain guys.

He's one of the head execs at the company and you can use my friends name who knows him as the referral.

E-Mail me and I'll send you his contact info.

[email protected]

KRL 01-15-2005 11:44 PM

2 trojans detected so far running VirusScan.

:321GFY

BVF 01-15-2005 11:53 PM

Quote:

Originally Posted by SleazyDream
Does anyone here know HOW to get this site down?

http://www.blackvaginafinder.com/misc/smokeythebear.jpg

SleazyDream 01-16-2005 12:29 AM

Quote:

Originally Posted by SykkBoy2
for all of you FUCKING idiots ICQing me, I had nothing to fucking do with this shit...

Sleazy and I had our spat, but I would never do anything like this AT ALL

Sleazy, I hope you get this taken care of, it's some fucked up shit
I spoke to my buddy who has some domains with them and he only had the numbers already given in this and the other thread

i honestly don't believe you had anything to do with this

stevo 01-16-2005 01:02 AM

ev1 = old rachshack = wont do shit to help you out

SleazyDream 01-16-2005 01:13 AM

Quote:

Originally Posted by JayJay
This is why I don't fuck or play around with people on the boards ect..
You never know who they are


are you a complete and total fucking idiot?

few people knew i owned that url. they hit several other major gallery urls as well at the same time not owned by me. GFY had nothing to do with it - they went after traffic, pure and simple.

SleazyDream 01-16-2005 01:15 AM

Quote:

Originally Posted by SmokeyTheBear
what we all need to do is find a way to shutdown iframedollars.biz they are responsible for all of the hackers profit these days.

how can you hack thehun sleazy and yahoo in a month and they all point to iframedollars.biz and they are still running spyware..

who runs iframedollars.biz?

SleazyDream 01-16-2005 01:17 AM

Quote:

Originally Posted by thurbs
can't claim that I "did" it for legal reasons, but it should either DDOS out or atleast run out of B/W allotted on the hosting plan soon, which should have the account suspended. so either way, it'll go down, ev1 will notice and respond to your emails promptly im sure.

icq : 294518867 .. hope it helps. :winkwink:

ev1 doesn't want to do anything. i don't think they will run out of bandwidth - this was obviously planned and prepared for

amaze 01-16-2005 01:31 AM

Quote:

Originally Posted by SleazyDream
who runs iframedollars.biz?

http://www.whois.biz/whois.cgi?TLD=b...h=Submit+Query

Odin 01-16-2005 01:32 AM

Quote:

Originally Posted by theking
Do not click on the link. I did and picked up several virus's. I am now running my virus scanner to clean my hard drive.

Motherfucker, should of scrolled down and read this first. Thanks for the warning Smokey. :disgust

SmokeyTheBear 01-16-2005 01:39 AM

Quote:

Originally Posted by Chief
Motherfucker, should of scrolled down and read this first. Thanks for the warning Smokey. :disgust


Sorry :( but if you are getting trojans from that your not protected , yu shouldnt be running i.e. with no patches as if you are your bound to get much worse things than that..

Those exploits are geared towards an affiliate program so they have to be very flexible..

updated i.e. shouldnt get anything from those pages.. ( you might get alerts from your virus protection programs but they wouldnt work anyways )

Odin 01-16-2005 01:42 AM

I think I am ok, running stuff now to make sure though. Am running Firefox, not IE though.

X37375787 01-16-2005 02:10 AM

karma is a bitch.

SleazyDream 01-16-2005 02:12 AM

Quote:

Originally Posted by Equinox
karma is a bitch.

excuse me FUCK FACE? please tell me dumbass who's business I've EVER fucked with?

sandman! 01-16-2005 02:17 AM

Quote:

Originally Posted by SleazyDream
excuse me FUCK FACE? please tell me dumbass who's business I've EVER fucked with?


Choker
Pichunter


If you ask a question an answer will be given.

JayJay 01-16-2005 02:21 AM

Quote:

Originally Posted by SleazyDream
are you a complete and total fucking idiot?

You just can't help yourself can you?
Wonder why we we cancelled advertising on your site not once but twice?

Like I said that's why I don't fuck with people on the boards.
Your attitude here can effect your business and your bottom line,
Like you are learning the hardway today

SleazyDream 01-16-2005 02:21 AM

Quote:

Originally Posted by sandman!
Choker
Pichunter


If you ask a question an answer will be given.

when did I EVER fuck with choker's business? Personally i think HE's an ASS, and he has his own opinions of me and my business that i don't agree with but I never once said there was a problem with his biz to my knowledge. I regurally endorse it as a great option to buy traffic from on here and to friends and associates.

ok, yes - i DID catch pichunter sending me hitbot traffic - mind you it was years ago......i suppose that did effect him, but he was cheating me. And I won't do business with him.

X37375787 01-16-2005 02:22 AM

Quote:

Originally Posted by SleazyDream
excuse me FUCK FACE? please tell me dumbass who's business I've EVER fucked with?

I'm sorry for your unfortunate hijack. All I tried to point out, is that karma is a whore. That's all. You love to put yourself in the spotlight wherever you go, whatever you do - and your attitudes come right with you. Maybe you've just called the wrong person an "idiot". Who knows.

Besides, if you are pushing millions of uniques a day across your visible domains, you better damned make sure you lock your anus down like Fort Knox would only do. And if you don't know how to do it (since you're a "marketer"), you damn better damn well have people who can do it for you.

Exposure and availability will always make you more susceptible to attacks and exploits of some sort.

Good luck getting shit straightened out.

sandman! 01-16-2005 02:28 AM

Quote:

Originally Posted by SleazyDream
when did I EVER fuck with choker's business? Personally i think HE's an ASS, and he has his own opinions of me and my business that i don't agree with but I never once said there was a problem with his biz to my knowledge. I regurally endorse it as a great option to buy traffic from on here and to friends and associates.

ok, yes - i DID catch pichunter sending me hitbot traffic - mind you it was years ago......i suppose that did effect him, but he was cheating me. And I won't do business with him.

thought i saw you saying shit about chokers traffic before.
I could be wrong.

I wont get into the pichunter thing proving hitbot traffic is not easy and not everyone will just take your word for it.
Plus many sites have been sent hitbot traffic that got passed along so its possible to get fake traffic in reality from allmost anyone nowdays :(

makefuckingmoney 01-16-2005 02:29 AM

1. lawsuit will do you nothing
2. id kiss so much ass at dotster its not even funny..till you get your domain..
3. move it to directnic asap. they are the best by far. I had a domain taken and had it back within minutes. thats right..minutes.


Honestly, ev1 probably cant legally do anything, unless they investigate who is hosting and find that the guy is using phoney info to even get hosted.

I think your probably screwed till Monday. And I dont think an attorney will get you back on any quicker than you can.

I hate to sound like a sourpuss but I think that is the reality you are facing. I would hold off on an attorney till monday afternoon after having talked to dotster on monday am.. remember that once you mention lawsuits and lawyers, people stop helping.

I have about 15 servers at ev1, if I thought it would help I would contact them, but in reality they will want proof or tell you that your battle is dotster. adware isnt illegal, but spam complaints may get him pulled which may not be a bad idea, flooding ev1 with phoney spam complaints would get him pulled.

it totally sucks but im just trying to give you the honest opinion and tomorrow will seem like one of the longer days youll have...i would take krl's info and go that route asap.


All times are GMT -7. The time now is 01:32 PM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123