SleazyDream Hi Jacker strikes again! - Page 2 - GoFuckYourself.com

Relish XXX · 02-05-2005, 03:27 PM

50 hijacked domains...

Nysus · 02-05-2005, 03:42 PM

This stuff is unreal.

Matt

Thurbs · 02-05-2005, 03:57 PM

again .. my advice, pay 2x for a registration handled by small small companies that dont use auto-authorization shit for domain settings. For the amount of times u'd realistically fool with your domain settings, why risk losing it for their fast service.

Muff · 02-05-2005, 04:12 PM

Good news...

The Domain Name is currently resolving to ns1.candidhosting.com & ns1.candidhosting.com, the Name Servers to whihc it was set prior to Transfer.

We have placed a Register Lock on the Domain Name so that no can make any changes to the Domain Name or have it Transferred Away.

You are advised to get in touch with the Transfer Dispute Department at the previous Registrar. They will in-turn contact our Transfer Dispute Specialist at DirectI, to investigate the case.

We understand your anxiety at this time, and hope this case is resolved soon. We appreciate your patience in the interim.

Kind Regards,

Andy
DirectI.com

looks like this matter will be resolved very soon

Drake · 02-05-2005, 04:43 PM

This is downright scary

BradM · 02-05-2005, 04:47 PM

Quote:

Originally Posted by Vox

Better yet, send in an anonymous tip to homeland security telling them that the company is a front for Al queda and other Muslim terrorists.

Yep.. someone should do that.

SleazyDream · 02-06-2005, 12:22 AM

hijackers should goto jail

rollinOn20s · 02-06-2005, 12:29 AM

The cocksucker who is stealing these domains should be shot and hung.

Muff · 02-06-2005, 08:49 AM

Looks like your assumptions proved to be right Smoky. The reseller was involved in this and not just the one individual according to DirectI

Quote:

Originally Posted by datat

Hi Erik,

We are aware of many unauthorized Domain Name Transfers carried out by this person and we had taken preventive measures against this Reseller and had Locked the Domain Name.

We need the Complaince Cell of the Previous Registrar to contact us in this matter so that we can jointly work towards resolving this case.

Kind Regards,

Andy
DirectI.com

Basic_man · 02-06-2005, 08:55 AM

Sorry to hear this man ! It suck big time !

donsimon · 02-06-2005, 09:26 AM

muff - shoot me an email at donny AT intercosmos.com and I'll take a look at everything in a few hours. Just let me know what domains were taken and I can find every bit of information about the problem.

directi is normally pretty good now since their CEO is the president of the domain registrars group.

Thanks.

Donny
directNIC.com

Daymare · 02-06-2005, 09:33 AM

what the fuck is up with directnic's PIECE OF SHIT security?!!??! If these domains were LOCKED, how were they transferred?

crockett · 02-06-2005, 09:57 AM

Quote:

Originally Posted by Daymare

what the fuck is up with directnic's PIECE OF SHIT security?!!??! If these domains were LOCKED, how were they transferred?

I would imagine the e-mail address was hacked and then the password was obtained in that manor. If that's the case it's not directnic's fault.

I think a easy way to combat this is, number one do not use the same e-mail that is in your whois info as your account info at your registrar.

Then number two I think the registrar should allow you to set up to 3 different e-mails for notification when any changes take place on your account. Registryfly does this and I'd say it would be pretty hard to hack 3 different e-mail accounts. Especially when the hacker wouldn't know two of them unless he gained access to the registrar's data base, but even then the data could be encrypted.

DarkJedi · 02-06-2005, 10:12 AM

Muff, can you please contact me ?
Same thing happened to me.
I'd like to talk to you.

icq 30 144 710

donsimon · 02-06-2005, 10:23 AM

Quote:

Originally Posted by Daymare

what the fuck is up with directnic's PIECE OF SHIT security?!!??! If these domains were LOCKED, how were they transferred?

Sorry, I had to respond to this one, since I wrote the security system myself. Our security system is one of the most secure systems around. It combines ease of use and multiple levels of security at the same time.

First you have the username/password system. Which we require the username and password to be a minimum of 6 characters and both are case sensitive. The password can not be based on any dictionary word, so even passwords like "bitch1" won't work. Now the only other option which I personally use myself is if we required people to have upper, lower, numbers and punctuation. But technically we have people that get confused on what a domain is much less trying to tell them that they have to use upper and lower case letters.

Now we do have some additional security built in, but I won't go into that part.

Then you have the transfer/domain security. Which allows somebody to lock down an individual domain or their entire account. Kind of speaks for itself.

Then if somebody attempts to transfer a domain away that is on normal transfer security we send you an email asking you if you want us to approve it or not. And this email actually goes to 2 different contacts, the person who owns the account and the admin contact of the domain.

So please don't call something a PIECE OF SHIT, when you don't have a clue what you are talking about. Let's not talk about different domain registrars, every registrars is good or bad about something.

Donny
directNIC.com

Muff · 02-06-2005, 10:27 AM

Donny. Sent you an email.

Talking to Dark Jedi now about his problem.

crockett · 02-06-2005, 10:33 AM

Quote:

Originally Posted by donsimon

Sorry, I had to respond to this one, since I wrote the security system myself. Our security system is one of the most secure systems around. It combines ease of use and multiple levels of security at the same time.

First you have the username/password system. Which we require the username and password to be a minimum of 6 characters and both are case sensitive. The password can not be based on any dictionary word, so even passwords like "bitch1" won't work. Now the only other option which I personally use myself is if we required people to have upper, lower, numbers and punctuation. But technically we have people that get confused on what a domain is much less trying to tell them that they have to use upper and lower case letters.

Now we do have some additional security built in, but I won't go into that part.

Then you have the transfer/domain security. Which allows somebody to lock down an individual domain or their entire account. Kind of speaks for itself.

Then if somebody attempts to transfer a domain away that is on normal transfer security we send you an email asking you if you want us to approve it or not. And this email actually goes to 2 different contacts, the person who owns the account and the admin contact of the domain.

So please don't call something a PIECE OF SHIT, when you don't have a clue what you are talking about. Let's not talk about different domain registrars, every registrars is good or bad about something.

Donny
directNIC.com

Just wondering when did this go into affect? my pass is and always was a combo of two dictionary words.. I think I'll change that now that I think about it. But seems old users were not made to use this system?

Would you conceder doing like I posted above and allow users to have 2 back up e-mail address to have notifications sent to on account changes? This way even if the main e-mail address gets hacked The user would still get a notification on the changes by the back up e-mail address.

Jayson · 02-06-2005, 10:36 AM

Quote:

Originally Posted by SmokeyTheBear

wtf this shit is too fucking much

one of the registrars involved in the hijackings is qnic.com

Originally when this started i looked at the site and it was like an affiliate program ( or more like a toolbar program ) that you could simply open an account add any domain you wanted and they would try to transfer it over , and pay you for how many toolbars you installed.

Shortly after sleazy got his domain stolen i looked again , and the now it looks like a regular registrar again * actually i tried in between that and they were just hooking up the new interface *

So in looking up some info on these scammers i notice this as the address.

501 Silverside Road suit 105
Wilmington, DE 19809

.
.
.

why do they all have the same address ?

This address is the address of a company incorporation service who also offers mail forwarding. This is the company - http://www2.valisinternational.com/?pg=defaultbody

Jayson

donsimon · 02-06-2005, 10:39 AM

Quote:

Originally Posted by crockett

Just wondering when did this go into affect? my pass is and always was a combo of two dictionary words.. I think I'll change that now that I think about it. But seems old users were not made to use this system?

Would you conceder doing like I posted above and allow users to have 2 back up e-mail address to have notifications sent to on account changes? This way even if the main e-mail address gets hacked The user would still get a notification on the changes by the back up e-mail address.

Unless you were one of the first 100 or so customers we had that should already be in there. but it does take into account what the percentage is of the password. We tried not to make it impossible to get around.

Actually, I'm thinking of something that is similiar to what you mentioned, but may be a little more than that. Since Tuesday is Mardi Gras here, I may not be able to implement it until later this week. But, yes, I will be implementing more security even though both of these occurences that have happened are completely different.

Donny

digifan · 02-06-2005, 11:01 AM

Quote:

Originally Posted by SmokeyTheBear

heres the site that offers the service

http://www.valis.org/usbpp/default.html

Huh.. they have been promoted on other adult boards too as an excellent service with this link:
http://www2.valisinternational.com/?pg=defaultbody

crockett · 02-06-2005, 11:01 AM

Quote:

Originally Posted by donsimon

Unless you were one of the first 100 or so customers we had that should already be in there. but it does take into account what the percentage is of the password. We tried not to make it impossible to get around.

Actually, I'm thinking of something that is similiar to what you mentioned, but may be a little more than that. Since Tuesday is Mardi Gras here, I may not be able to implement it until later this week. But, yes, I will be implementing more security even though both of these occurences that have happened are completely different.

Donny

yea I'm not sure how old my account is, the domain was registered in 2001. I bought a domain from a guy a year or two back because he was getting out of the biz so I took over his account. I've had the account since then, so he may have been one of your first customers.

Sounds good on the e-mail thing, what I mentioned is just pretty basic stuff. I'm sure a lot could be done to at least put a stop to guys that are hacking e-mail account to gain access.

02-05-2005, 03:27 PM	#51
Relish XXX Confirmed User Join Date: Dec 2004 Location: www.adultlabel.com Posts: 4,904	50 hijacked domains... __________________

02-05-2005, 03:42 PM	#52
Nysus Confirmed User Industry Role: Join Date: Aug 2001 Posts: 7,817	This stuff is unreal. Matt __________________ What name is pr0 / Untouched Markets using these days? Untouched Markets - pr0 - Refund My Money Now Someone owes me $2,000 because they didn't do any work that was paid for pointing at pr0 / William / UntouchedMarkets See https://gfy.com/fucking-around-and-business-discussion/948258-untouchedmarkets-pr0-refund-money-post16744521.html and for more detailed see https://gfy.com/fucking-around-and-business-discussion/948645-re-recent-bullshit-drama-explained-detail-pr0-untouched-markets.html

02-06-2005, 12:22 AM	#57
SleazyDream I'm here for SPORT Industry Role: Join Date: Jul 2001 Location: Phone # (401) 285-0696 Posts: 41,470	hijackers should goto jail __________________ This dog, is dog, a dog, good dog, way dog, to dog, keep dog, an dog, idiot dog, busy dog, for dog, 20 dog, seconds dog! Now read without the word dog.

02-06-2005, 12:29 AM	#58
rollinOn20s Confirmed User Join Date: Nov 2004 Location: ontario Posts: 2,006	The cocksucker who is stealing these domains should be shot and hung. __________________ Trade With xApsters Thumb TGP's Today - Some Of The Biggest and Best On The Net!

02-06-2005, 08:55 AM	#60
Basic_man Programming King Pin Industry Role: Join Date: Oct 2003 Location: Montreal Posts: 27,360	Sorry to hear this man ! It suck big time ! __________________ UUGallery Builder - automated photo/video gallery plugin for Wordpress! Stop looking! Checkout Naked Hosting, online since 1999 !

02-05-2005, 03:57 PM	#53
Thurbs The Thrilla in Manila Join Date: Sep 2004 Location: Thurbs' Lagoon, Christmas Island Posts: 4,785	again .. my advice, pay 2x for a registration handled by small small companies that dont use auto-authorization shit for domain settings. For the amount of times u'd realistically fool with your domain settings, why risk losing it for their fast service.

02-05-2005, 04:12 PM	#54
Muff Confirmed User Join Date: Mar 2001 Location: Toronto Posts: 1,782	Good news... The Domain Name is currently resolving to ns1.candidhosting.com & ns1.candidhosting.com, the Name Servers to whihc it was set prior to Transfer. We have placed a Register Lock on the Domain Name so that no can make any changes to the Domain Name or have it Transferred Away. You are advised to get in touch with the Transfer Dispute Department at the previous Registrar. They will in-turn contact our Transfer Dispute Specialist at DirectI, to investigate the case. We understand your anxiety at this time, and hope this case is resolved soon. We appreciate your patience in the interim. Kind Regards, Andy DirectI.com looks like this matter will be resolved very soon

02-05-2005, 04:43 PM	#55
Drake Hello world! Industry Role: Join Date: Mar 2003 Posts: 12,508	This is downright scary

02-06-2005, 09:26 AM	#61
donsimon Registered User Join Date: Oct 2002 Location: New Orleans Posts: 27	muff - shoot me an email at donny AT intercosmos.com and I'll take a look at everything in a few hours. Just let me know what domains were taken and I can find every bit of information about the problem. directi is normally pretty good now since their CEO is the president of the domain registrars group. Thanks. Donny directNIC.com

02-06-2005, 09:33 AM	#62
Daymare Confirmed User Industry Role: Join Date: Feb 2002 Posts: 2,674	what the fuck is up with directnic's PIECE OF SHIT security?!!??! If these domains were LOCKED, how were they transferred?

02-06-2005, 10:12 AM	#64
DarkJedi No Refunds Issued. Industry Role: Join Date: Feb 2001 Location: GFY Posts: 28,300	Muff, can you please contact me ? Same thing happened to me. I'd like to talk to you. icq 30 144 710

02-06-2005, 10:27 AM	#66
Muff Confirmed User Join Date: Mar 2001 Location: Toronto Posts: 1,782	Donny. Sent you an email. Talking to Dark Jedi now about his problem.