I got a major URL hijacked. I need help. Major Help. - Page 3 - GoFuckYourself.com

Dildozer · 01-15-2005, 10:16 PM

All that work for $400
fucking retards

SmokeyTheBear · 01-15-2005, 10:17 PM

Quote:

Originally Posted by Shoplifter

It seems like a well planned event, hitting a high traffic domain on a long weekend. They can install toolbars at will until Tuesday.

To my mind it seems like something someone may have been working on for a while.

You have my real sympathy with this Sleazy, this is one of my nightmares made real.

I'm very curious how they did it. If the domain wasn't locked they would have to know your email, but if it was locked they would have to know the email and the Registrar password. Have you checked your machine for key loggers or any other trojans? They may have been able to pull and then decrypt your stored password file, then they would have been able to get them all at once.

Im pretty sure he got sleazy's passwords when he was previously hacked.

When the hun was hacked by the same guy he had the hun's passwords for everything, so if his email had the same password , he prob just waited till the right time.

SmokeyTheBear · 01-15-2005, 10:19 PM

Quote:

Originally Posted by Dildozer

All that work for $400
fucking retards

$400 a day is 12k a month. he was making a grand a day or more from the hun

UniversalPass Pete · 01-15-2005, 10:21 PM

You need to contact Icann, and open a dispute ticket, you may also need to go through an arbitration service, you also need to get in touch with the current registrar!

Let me know how it goes for you! you need to make sure you have your domains "Locked" with the current registrar!

pornguy · 01-15-2005, 10:27 PM

that is vry fucked up.
I would sue the registrar. The new one and the old one, if you were sure that you had it locked down.
Talk to an attorney. May be there is legal help after all.

Good luck! and very sorry to hear.

jonesy · 01-15-2005, 10:30 PM

Karma . . .

Shoplifter · 01-15-2005, 10:33 PM

Quote:

Originally Posted by SmokeyTheBear

Im pretty sure he got sleazy's passwords when he was previously hacked.

When the hun was hacked by the same guy he had the hun's passwords for everything, so if his email had the same password , he prob just waited till the right time.

So they are hacking home boxes? I didn't hear about the previous hack.

JayJay · 01-15-2005, 10:36 PM

This is why I don't fuck or play around with people on the boards ect..
You never know who they are

Thurbs · 01-15-2005, 10:38 PM

can't claim that I "did" it for legal reasons, but it should either DDOS out or atleast run out of B/W allotted on the hosting plan soon, which should have the account suspended. so either way, it'll go down, ev1 will notice and respond to your emails promptly im sure.

icq : 294518867 .. hope it helps.

69pornlinks · 01-15-2005, 10:40 PM

Quote:

Originally Posted by simple simon

You probably called someone an idiot one too many times huh? Karmas a bitch

i would respect you more if you didn't 'happen' to make this your 1st post

SmokeyTheBear · 01-15-2005, 10:43 PM

Quote:

Originally Posted by Shoplifter

So they are hacking home boxes? I didn't hear about the previous hack.

no it was an exploit in phpbb or in php in particular that gave up root

SmokeyTheBear · 01-15-2005, 10:48 PM

hmmm sleazy whats up with this ???

http://66.115.134.22/stats

that page goes to hackers site , but the cache(on google) is your stats from september. How did he get your IP ?

SmokeyTheBear · 01-15-2005, 10:50 PM

that page is on natnet thus your site .. your ip must be pointing to the domain or something

SmokeyTheBear · 01-15-2005, 10:52 PM

http://66.115.134.22/

theking · 01-15-2005, 10:54 PM

Quote:

Originally Posted by SmokeyTheBear

hmmm sleazy whats up with this ???

http://66.115.134.22/stats

that page goes to hackers site , but the cache(on google) is your stats from september. How did he get your IP ?

Do not click on the link. I did and picked up several virus's. I am now running my virus scanner to clean my hard drive.

theking · 01-15-2005, 10:58 PM

In addition the link lead to a gallery...not stats.

SmokeyTheBear · 01-15-2005, 10:58 PM

hmmm that registrar is shady too..

qnic.com

they have a webmaster program that inserts iframes

and their shit looks half ass..

Thurbs · 01-15-2005, 11:01 PM

that registrar is much like gandi.net and others, always spammers registrars.

SmokeyTheBear · 01-15-2005, 11:01 PM

Quote:

Originally Posted by theking

In addition the link lead to a gallery...not stats.

Yes i think thats fairly clear since i pointed that out above..

look at that thru google and you will get the real page..

sleazy that registrar is fucked.. the one the hacker has it on now doesn't even appear to be a real registrar , plus its asking for webmasters to put this on their website

http://195.42.181.32:8000/connect.cgi?id=1713

dont click that except to test , wow it downloads adware imagine that.

SmokeyTheBear · 01-15-2005, 11:03 PM

ok i can even see how that guy got your domain..

Go to qnic.com * this is completely safe..

now register as a new webmaster. once your in the webmaster zone they have a box for you to add any domain you want to your account to add the spyware to

Vox · 01-15-2005, 11:03 PM

Quote:

Originally Posted by SmokeyTheBear

hmmm that registrar is shady too..

qnic.com

they have a webmaster program that inserts iframes

and their shit looks half ass..

Check the whois
It's just a mail drop located in Delaware.
Fucking russians.

KRL · 01-15-2005, 11:05 PM

Jesus Christ don't click any links posted in this thread.

WTF? I feel sorry for anyone without virus protection and on IE still.

warlock5 · 01-15-2005, 11:07 PM

Clearly this was a criminal act, I'd be contacting the FBI and making sure all involved parties got the message. The word also needs to be gotten out to other major tech news sites as it seems the new ICANN policy may have made this hacker's job easier.

GeorgeK · 01-15-2005, 11:07 PM

Does Sleazydream have ICQ or anything? (tried to send him some info, privately, but doesn't seem to be logged in) No need to clue in potential hijackers reading this board.

theking · 01-15-2005, 11:08 PM

Quote:

Originally Posted by KRL

Jesus Christ don't click any links posted in this thread.

WTF? I feel sorry for anyone without virus protection and on IE still.

Well...as I stated...I clicked the one link and was warned of several different viruses. I am now running my virus scanner to make sure they are all taken care of and this process will take a couple of hours.

warlock5 · 01-15-2005, 11:09 PM

Quote:

Originally Posted by KRL

Jesus Christ don't click any links posted in this thread.

WTF? I feel sorry for anyone without virus protection and on IE still.

The host and registrar have to be assuming some major liability leaving a site like that up. If bulk spam can send people to prison for a decade then surely installing that bullshit on thousands of PCs can too.

SmokeyTheBear · 01-15-2005, 11:09 PM

what we all need to do is find a way to shutdown iframedollars.biz they are responsible for all of the hackers profit these days.

how can you hack thehun sleazy and yahoo in a month and they all point to iframedollars.biz and they are still running spyware..

KRL · 01-15-2005, 11:13 PM

Quote:

Originally Posted by theking

Well...as I stated...I clicked the one link and was warned of several different viruses. I am now running my virus scanner to make sure they are all taken care of and this process will take a couple of hours.

I had to shut down Firefox even. Fucking cock suckers. These guys should be taken out to the ocean and dumped for shark food.

Magg · 01-15-2005, 11:14 PM

the people who are doing ddos's... do it to the the actual site (easy-dater.com) and do it to the SPONSOR:

213.159.117.203

iframedollars.biz^

keep him from making money, and everyone else using them!

Thurbs · 01-15-2005, 11:14 PM

yah it kills firefox pretty fast.

KRL · 01-15-2005, 11:20 PM

Scott, I judy got an inside top level connection at Dotster for you through one of my domain guys.

He's one of the head execs at the company and you can use my friends name who knows him as the referral.

E-Mail me and I'll send you his contact info.

[email protected]

KRL · 01-15-2005, 11:44 PM

2 trojans detected so far running VirusScan.

BVF · 01-15-2005, 11:53 PM

Quote:

Originally Posted by SleazyDream

Does anyone here know HOW to get this site down?

SleazyDream · 01-16-2005, 12:29 AM

Quote:

Originally Posted by SykkBoy2

for all of you FUCKING idiots ICQing me, I had nothing to fucking do with this shit...

Sleazy and I had our spat, but I would never do anything like this AT ALL

Sleazy, I hope you get this taken care of, it's some fucked up shit
I spoke to my buddy who has some domains with them and he only had the numbers already given in this and the other thread

i honestly don't believe you had anything to do with this

stevo · 01-16-2005, 01:02 AM

ev1 = old rachshack = wont do shit to help you out

SleazyDream · 01-16-2005, 01:13 AM

Quote:

Originally Posted by JayJay

This is why I don't fuck or play around with people on the boards ect..
You never know who they are

are you a complete and total fucking idiot?

few people knew i owned that url. they hit several other major gallery urls as well at the same time not owned by me. GFY had nothing to do with it - they went after traffic, pure and simple.

SleazyDream · 01-16-2005, 01:15 AM

Quote:

Originally Posted by SmokeyTheBear

what we all need to do is find a way to shutdown iframedollars.biz they are responsible for all of the hackers profit these days.

how can you hack thehun sleazy and yahoo in a month and they all point to iframedollars.biz and they are still running spyware..

who runs iframedollars.biz?

SleazyDream · 01-16-2005, 01:17 AM

Quote:

Originally Posted by thurbs

can't claim that I "did" it for legal reasons, but it should either DDOS out or atleast run out of B/W allotted on the hosting plan soon, which should have the account suspended. so either way, it'll go down, ev1 will notice and respond to your emails promptly im sure.

icq : 294518867 .. hope it helps.

ev1 doesn't want to do anything. i don't think they will run out of bandwidth - this was obviously planned and prepared for

amaze · 01-16-2005, 01:31 AM

Quote:

Originally Posted by SleazyDream

who runs iframedollars.biz?

http://www.whois.biz/whois.cgi?TLD=b...h=Submit+Query

Odin · 01-16-2005, 01:32 AM

Quote:

Originally Posted by theking

Do not click on the link. I did and picked up several virus's. I am now running my virus scanner to clean my hard drive.

Motherfucker, should of scrolled down and read this first. Thanks for the warning Smokey.

SmokeyTheBear · 01-16-2005, 01:39 AM

Quote:

Originally Posted by Chief

Motherfucker, should of scrolled down and read this first. Thanks for the warning Smokey.

Sorry

but if you are getting trojans from that your not protected , yu shouldnt be running i.e. with no patches as if you are your bound to get much worse things than that..

Those exploits are geared towards an affiliate program so they have to be very flexible..

updated i.e. shouldnt get anything from those pages.. ( you might get alerts from your virus protection programs but they wouldnt work anyways )

Odin · 01-16-2005, 01:42 AM

I think I am ok, running stuff now to make sure though. Am running Firefox, not IE though.

01-16-2005, 02:10 AM

karma is a bitch.

SleazyDream · 01-16-2005, 02:12 AM

Quote:

Originally Posted by Equinox

karma is a bitch.

excuse me FUCK FACE? please tell me dumbass who's business I've EVER fucked with?

sandman! · 01-16-2005, 02:17 AM

Quote:

Originally Posted by SleazyDream

excuse me FUCK FACE? please tell me dumbass who's business I've EVER fucked with?

Choker
Pichunter

If you ask a question an answer will be given.

JayJay · 01-16-2005, 02:21 AM

Quote:

Originally Posted by SleazyDream

are you a complete and total fucking idiot?

You just can't help yourself can you?
Wonder why we we cancelled advertising on your site not once but twice?

Like I said that's why I don't fuck with people on the boards.
Your attitude here can effect your business and your bottom line,
Like you are learning the hardway today

SleazyDream · 01-16-2005, 02:21 AM

Quote:

Originally Posted by sandman!

Choker
Pichunter

If you ask a question an answer will be given.

when did I EVER fuck with choker's business? Personally i think HE's an ASS, and he has his own opinions of me and my business that i don't agree with but I never once said there was a problem with his biz to my knowledge. I regurally endorse it as a great option to buy traffic from on here and to friends and associates.

ok, yes - i DID catch pichunter sending me hitbot traffic - mind you it was years ago......i suppose that did effect him, but he was cheating me. And I won't do business with him.

01-16-2005, 02:22 AM

Quote:

Originally Posted by SleazyDream

excuse me FUCK FACE? please tell me dumbass who's business I've EVER fucked with?

I'm sorry for your unfortunate hijack. All I tried to point out, is that karma is a whore. That's all. You love to put yourself in the spotlight wherever you go, whatever you do - and your attitudes come right with you. Maybe you've just called the wrong person an "idiot". Who knows.

Besides, if you are pushing millions of uniques a day across your visible domains, you better damned make sure you lock your anus down like Fort Knox would only do. And if you don't know how to do it (since you're a "marketer"), you damn better damn well have people who can do it for you.

Exposure and availability will always make you more susceptible to attacks and exploits of some sort.

Good luck getting shit straightened out.

sandman! · 01-16-2005, 02:28 AM

Quote:

Originally Posted by SleazyDream

when did I EVER fuck with choker's business? Personally i think HE's an ASS, and he has his own opinions of me and my business that i don't agree with but I never once said there was a problem with his biz to my knowledge. I regurally endorse it as a great option to buy traffic from on here and to friends and associates.

ok, yes - i DID catch pichunter sending me hitbot traffic - mind you it was years ago......i suppose that did effect him, but he was cheating me. And I won't do business with him.

thought i saw you saying shit about chokers traffic before.
I could be wrong.

I wont get into the pichunter thing proving hitbot traffic is not easy and not everyone will just take your word for it.
Plus many sites have been sent hitbot traffic that got passed along so its possible to get fake traffic in reality from allmost anyone nowdays

makefuckingmoney · 01-16-2005, 02:29 AM

1. lawsuit will do you nothing
2. id kiss so much ass at dotster its not even funny..till you get your domain..
3. move it to directnic asap. they are the best by far. I had a domain taken and had it back within minutes. thats right..minutes.

Honestly, ev1 probably cant legally do anything, unless they investigate who is hosting and find that the guy is using phoney info to even get hosted.

I think your probably screwed till Monday. And I dont think an attorney will get you back on any quicker than you can.

I hate to sound like a sourpuss but I think that is the reality you are facing. I would hold off on an attorney till monday afternoon after having talked to dotster on monday am.. remember that once you mention lawsuits and lawyers, people stop helping.

I have about 15 servers at ev1, if I thought it would help I would contact them, but in reality they will want proof or tell you that your battle is dotster. adware isnt illegal, but spam complaints may get him pulled which may not be a bad idea, flooding ev1 with phoney spam complaints would get him pulled.

it totally sucks but im just trying to give you the honest opinion and tomorrow will seem like one of the longer days youll have...i would take krl's info and go that route asap.

01-15-2005, 10:21 PM	#104
UniversalPass Pete Confirmed User Join Date: Dec 2004 Location: Los Angeles, CA http://www.universalpass.com Posts: 7,368	You need to contact Icann, and open a dispute ticket, you may also need to go through an arbitration service, you also need to get in touch with the current registrar! Let me know how it goes for you! you need to make sure you have your domains "Locked" with the current registrar! __________________ V4.0 It's Here! NOT JUST AVS ANYMORE! Teen Whore Fetish All Milf Sluts Real Asian Cunts All Latina Cunts Massive XXX Boobs All Out Anal Since 1997. ICQ: 107746038

01-15-2005, 10:27 PM	#105
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	that is vry fucked up. I would sue the registrar. The new one and the old one, if you were sure that you had it locked down. Talk to an attorney. May be there is legal help after all. Good luck! and very sorry to hear. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

01-15-2005, 10:30 PM	#106
jonesy Confirmed User Join Date: Jan 2003 Posts: 6,688	Karma . . . __________________ . Shooting Bikini Girls

01-15-2005, 10:48 PM	#112
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	hmmm sleazy whats up with this ??? http://66.115.134.22/stats that page goes to hackers site , but the cache(on google) is your stats from september. How did he get your IP ? __________________ hatisblack at yahoo.com

01-15-2005, 10:50 PM	#113
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	that page is on natnet thus your site .. your ip must be pointing to the domain or something __________________ hatisblack at yahoo.com

01-15-2005, 10:16 PM	#101
Dildozer Confirmed User Join Date: Jul 2002 Location: Montreal Posts: 7,519	All that work for $400 fucking retards

01-15-2005, 10:36 PM	#108
JayJay Confirmed User Join Date: Jun 2002 Posts: 3,739	This is why I don't fuck or play around with people on the boards ect.. You never know who they are

01-15-2005, 10:38 PM	#109
Thurbs The Thrilla in Manila Join Date: Sep 2004 Location: Thurbs' Lagoon, Christmas Island Posts: 4,785	can't claim that I "did" it for legal reasons, but it should either DDOS out or atleast run out of B/W allotted on the hosting plan soon, which should have the account suspended. so either way, it'll go down, ev1 will notice and respond to your emails promptly im sure. icq : 294518867 .. hope it helps.

01-15-2005, 10:52 PM	#114
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	http://66.115.134.22/ __________________ hatisblack at yahoo.com

01-15-2005, 10:58 PM	#116
theking Nice Kitty Industry Role: Join Date: Sep 2002 Location: The good old USA!!! Posts: 21,053	In addition the link lead to a gallery...not stats. __________________ When you're running down my country hoss...you're walking on the fighting side of me! FOR THE LYING LOWLIFE POSTING AS PATHFINDER...https://gfy.com/fucking-around-and-pr...athfinder.html

01-15-2005, 10:58 PM	#117
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	hmmm that registrar is shady too.. qnic.com they have a webmaster program that inserts iframes and their shit looks half ass.. __________________ hatisblack at yahoo.com

01-15-2005, 11:01 PM	#118
Thurbs The Thrilla in Manila Join Date: Sep 2004 Location: Thurbs' Lagoon, Christmas Island Posts: 4,785	that registrar is much like gandi.net and others, always spammers registrars.

01-15-2005, 11:03 PM	#120
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	ok i can even see how that guy got your domain.. Go to qnic.com * this is completely safe.. now register as a new webmaster. once your in the webmaster zone they have a box for you to add any domain you want to your account to add the spyware to __________________ hatisblack at yahoo.com

01-15-2005, 11:05 PM	#122
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	Jesus Christ don't click any links posted in this thread. WTF? I feel sorry for anyone without virus protection and on IE still. __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

01-15-2005, 11:07 PM	#123
warlock5 Confirmed User Join Date: Jan 2004 Location: Uranus Posts: 2,808	Clearly this was a criminal act, I'd be contacting the FBI and making sure all involved parties got the message. The word also needs to be gotten out to other major tech news sites as it seems the new ICANN policy may have made this hacker's job easier.

01-15-2005, 11:07 PM	#124
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	Does Sleazydream have ICQ or anything? (tried to send him some info, privately, but doesn't seem to be logged in) No need to clue in potential hijackers reading this board. __________________ I buy good domain names. Send lists to George (at) LOFFS.com

01-15-2005, 11:09 PM	#127
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	what we all need to do is find a way to shutdown iframedollars.biz they are responsible for all of the hackers profit these days. how can you hack thehun sleazy and yahoo in a month and they all point to iframedollars.biz and they are still running spyware.. __________________ hatisblack at yahoo.com

01-15-2005, 11:14 PM	#129
Magg Confirmed User Join Date: Feb 2004 Location: ICQ: 132497047 Posts: 4,467	the people who are doing ddos's... do it to the the actual site (easy-dater.com) and do it to the SPONSOR: 213.159.117.203 iframedollars.biz^ keep him from making money, and everyone else using them!

01-15-2005, 11:14 PM	#130
Thurbs The Thrilla in Manila Join Date: Sep 2004 Location: Thurbs' Lagoon, Christmas Island Posts: 4,785	yah it kills firefox pretty fast.

01-15-2005, 11:20 PM	#131
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	Scott, I judy got an inside top level connection at Dotster for you through one of my domain guys. He's one of the head execs at the company and you can use my friends name who knows him as the referral. E-Mail me and I'll send you his contact info. [email protected] __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

01-15-2005, 11:44 PM	#132
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	2 trojans detected so far running VirusScan. __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

01-16-2005, 01:02 AM	#135
stevo Confirmed User Join Date: Aug 2002 Location: Orlando, Florida Posts: 2,051	ev1 = old rachshack = wont do shit to help you out

01-16-2005, 01:42 AM	#142
Odin Confirmed User Industry Role: Join Date: Jan 2004 Location: au Posts: 2,545	I think I am ok, running stuff now to make sure though. Am running Firefox, not IE though.

01-16-2005, 02:10 AM	#143
X37375787 Guest Posts: n/a	karma is a bitch.

01-16-2005, 02:29 AM	#150
makefuckingmoney Confirmed User Join Date: Oct 2003 Posts: 3,277	1. lawsuit will do you nothing 2. id kiss so much ass at dotster its not even funny..till you get your domain.. 3. move it to directnic asap. they are the best by far. I had a domain taken and had it back within minutes. thats right..minutes. Honestly, ev1 probably cant legally do anything, unless they investigate who is hosting and find that the guy is using phoney info to even get hosted. I think your probably screwed till Monday. And I dont think an attorney will get you back on any quicker than you can. I hate to sound like a sourpuss but I think that is the reality you are facing. I would hold off on an attorney till monday afternoon after having talked to dotster on monday am.. remember that once you mention lawsuits and lawyers, people stop helping. I have about 15 servers at ev1, if I thought it would help I would contact them, but in reality they will want proof or tell you that your battle is dotster. adware isnt illegal, but spam complaints may get him pulled which may not be a bad idea, flooding ev1 with phoney spam complaints would get him pulled. it totally sucks but im just trying to give you the honest opinion and tomorrow will seem like one of the longer days youll have...i would take krl's info and go that route asap.