Domain Hijacked .. Sponsors can you help me find this person?
 

So ... some ass-hat hacked into my Namecheap account and changed the email address on my account and then transferred my domain to themselves via Godaddy. Namecheap could care less and told me to contact Godaddy who of course didn?t give a crap either, and since the domain was locked they weren't able to tell me any information about who this person is. The domain is hosted, and the site is up (my old crappy design and all) however they removed my links and put up their own. I was hoping someone might be able to give me some advice as to what I should do next, or that the sponsors that are being used may be able to do something to help me identify this individual. I was able to get some (probably bogus) information via google since I have the guys email address from my namecheap account, but that's all I was able to come up with. Here are some of the sponsors they are using on the site ?

Paper Street Cash
Pimp Roll
Vivid
FTV
Movie Room
AEBN
Sic Cash
Porn Access
Platinum Bucks
Sunny Dollars
NS Cash

I understand that this is my fault for picking a crappy password and that there probably isn?t much I can do about it now but I?d at least like to try to identify this guy (even if it?s just to make myself feel better about losing my domain). I know I?m not a big contributor to this board or to the industry, but I?ve been around trying to make a few bucks for almost 8 years and am just sick about losing one of the first sites I ever had, and the only one that ever really made me any money. I'll be on and off icq all day (556777036) .. Any help would be greatly appreciated!

Give some more info so someones whose curiousity you may have sparked, has enough info to do something.

List the url, list his ref code, there isnt enough info to even start to look into it.

And bump for ya. Good Luck.

good luck im sure the sponsors will let you know something

Baxter over on MP got 2 of his domains stolen via namecheap and they were working to return them. Wonder why they aren't helping you?

that sucks, it's also namecheap responsability and they should help you solve the issue

be vigilante on the phone, they will help you

Here are some ref codes/gallery links I got off of the site -

the domain is pornstarindex.org
the email address I have for them is [email protected]

Paper Street Cash - galleries....paperstreetcash.com...nats=MzIxODo3Oj E,0,0,0
Pimp Roll ? pimp3247
Vivid - ...secure.vivid.com...MTAyOTY2LjEuMS41My4wLjAuMC4w
FTV -1969281
Movie Room - 102045
Sic Cash - 25172
Porn Access - adv_id=16841
Platinum Bucks - 247847
Sunny Dollars - aid=4214
NS Cash - 100028


Thanks!

With that info, hopefully some of those programs will look into it and help out. Also, you need to be a bit more active with namecheap and put a boot up their ass to get your domain back. Don't settle for "it's not our problem".

Wow; that is outright theft, and you should treat it as such. Sure, there will be an army of GFY IANALs advising that you are fucked, but go with your gut and find a legal avenue of recourse before exacting vigilante justice.

bump for you

That's a pretty low NSCash id.

wow this sucks ... but is that really your domains account hacked? you cannot access your domains account? or was hacked your ftp account with easy username:password combination? and if they kept your designs, looks like they are only at ftp and replaced your links with their and they was hoping you will not found out ... :2 cents: but i am not good in english and i dont understand whole thread ...

I've emailed/live chatted with about 4 support techs and keep getting the samed canned responses. I am working on finding contact information for someone higher up who may be more helpful.

Thanks for the responses!

Faith

Namecheap usually sends out an email noticing the OLD email addy that the contact info has changed... didn't that happen in your case or did you just saw it too late?

good luck... hope you get it back and find the identity of the person. Get a lawyer and start the lawsuits

Thats serious business not to be taken lightly!!

That is your best bet and only way to get it back. Might take a few months but you will get it back. I have been down this road before.

godaddy will put the domain back in your account and let the 2 of you work it out in court. tell namecheap to do the same thing.

That is theft plain and simple. There is plenty you can do and if you are unsure what route to take let a lawyer work it for you. Don't just back down. Would you let someone keep your car if they stole it from you? Same thing.

That sucks, I hope somebody will be able to help you.

Do you really want to do business with a Registrar or sponsor who passes out personal account information upon request?

that's a good point... but if you establish a domain name I am sure there is a track record to confirm the site is yours...

When did this happen? The last update to the domain is showing as DECEMBER

Domain Name:PORNSTARINDEX.ORG
Created On:14-Dec-2002 20:29:35 UTC
Last Updated On:01-Dec-2008 00:32:00 UTC
Expiration Date:14-Dec-2009 20:29:35 UTC
Sponsoring Registrar:GoDaddy.com, Inc. (R91-LROR)

If so they've had it for over half a year.

do a search of his linking codes, then maybe you can find more of his sites

Yes, it was in December - but I just recently became aware of the issue. The domain was set on auto-renew .. and unfortunately (this is an explanation, not an excuse..) I have a "full plate" and just assumed that everything was running smooth as most of the sites I own are on "autopilot" and I've never had any issues before. I guess that's what I get for assuming, right?

I appreciate all of your suggestions, the information that some of you have messaged me privately, and all of the different points of view that you're giving - even if I don't like what some of you are saying, lol. (HighEnergy - I hadn't even thought of that, and you're right even if it is kind of a "double edged sword".)

There is something that just aint right about your story.

If you contact namecheap and explain it step by step, they will change the access of the account so you can log back in.

Then you contact the new domain register and explain it to them. They will more than likely return the domains after looking in to the details

If they dont, you contact contact a legal office. Stop fucking around on GFY and rely on us to fix your situation

Your domains were stolen 9 months ago? are you fucking kidding?

In that case I would expect it was because you forgot to renew the domains(because auto-renew dont always work) and someone else picked them up for free. Either way - you are fucked

If the accuser is reputable and can prove that he was solen from then yes.

Are you sure the domain didn't drop and someone else picked it up when it dropped?

I was never locked out of my account - my username and password are (were, obviously I've changed them now) the same, it was the e-mail address on the Namecheap account that was changed. Namecheap does NOT notify you when this happens, they send a link for you to verify the change to the NEW e-mail address.

As the whois record shows, the domain expires on 12/14/09 - it WOULD have expired on 12/14/08. The last update on the whois is on 12/01/08, so that's 8 months ago. I didn't forget to renew my domain, it was transferred out of my account and then renewed at the new registrar (I assume?). Thanks for the input Kris.

After they switched linking codes, your checks would have stopped coming. You didn't notice that?

If your registrar account is linked to a free email like gmail or yahoo, change the email account password too.

People hack the free email account and send a password reset to it sometimes.

Good luck man, that sucks.

So you only had one domain in the account? Your namecheap account was hacked and they only changed the email but not the password on the account? Have tried emailing the alleged suspect and gotten any reply?

CYF - good advice and already done, along with a virus scan and I'm in the process of changing the passwords to every.single.site I have a login for (fun!)

lazy - Correct, just the one domain. They changed the email associated with the account but not my login name or password. I did drop an email to the address and haven't gotten a response (not expecting one either ..) I've also called all of the phone numbers I've found or have been given for this individual and surprise, surprise they were ALL wrong numbers.

Seems someone was a pretty big dick for a domain with less than 100 hits a day.

So they would have also had to know your username besides your password in order to get into your account. I have heard that popular free email accounts like Yahoo can be hacked with software...this is why it is best that you always delete any emails with passwords in them. Also using a combination of upper and lowercase and numbers can't hurt.

I do know when you receive or transfer domains with godaddy the other person has your user name...so you basically just gave away half of your security. It seems as technology keeps moving forward cyber security is lagging for sure.

You should check out some of the domain forums, I remember reading about someone losing $50,000 worth of domains stolen from his account. I guess it might be a good idea to start printing out your domain name receipts, and print or screen capture your whois pages for more proof.

Not being rude, but I note your post count is 16, plus you have not posted the domain name of the site.

My question is, how do we know your simply trying to make problems for somone inicent?

I find it hard to belive that somone can move a domain so easily.

allanuk - I'm sorry that my low post count somehow makes me untrustworthy. Maybe I will hang around here and post some more, everyone seems pretty friendly ..

Anyways, If you look above you will see that I *did* post the domain of the site. I would think that it should be harder to steal a domain from somebody also, but apparently that is not the case. A quick google search will confirm that this happens more often than you would think.

So this account only had one domain in it? Or this was the only domain they messed with?

When I had a lot of domains in the past, I would let a bunch drop...and by accident I let one I wanted drop...and before I even realized someone else had already had it...not sure if he backordered the name....or he picked it up after redemption period. But the 1st thing that came to my mind was foul play.

hmm ... that's a big FAIL on namecheaps part.
It is disclosed semi-clearly in their step-by-step instructions though. So if your acct login is highjacked namecheap is absolved of any liability.

ref: http://namecheap.simplekb.com/kb.sho...8&categoryid=0