So this kid stole my best domain on namecheap

Status
Not open for further replies.
C

Crynos

New member
Dec 12, 2006
975
9
0
Philadelphia
This kid, whose email resides on this site: Make money online (not a dickroll, despite the suspicious title text), did the same gmail filter trick on me that happened to ricdes. Although, this time he transferred my domain out from namecheap. Anyone ever dealt with namecheap regarding this? What else should I be doing to get my domain back?
 


no judgment from me brother. i just want to better understand the circumstances of these exploits.
 
I'm probably an idiot for accessing my gmail account from the shitty school computers. I think I caught it early though, so I'm hoping namecheap is helpful with getting this resolved.
 
any chance anyone can drop a link or more info on this exploit? not the details on how to do it but how it works and how to prevent it? i dont use namecheap but for some of my domains that aren't for developing purposes i dont use whois privacy as well :\
 
projectv3 said:
any chance anyone can drop a link or more info on this exploit? not the details on how to do it but how it works and how to prevent it? i dont use namecheap but for some of my domains that aren't for developing purposes i dont use whois privacy as well :\
Click to expand...
WARNING: Google’s GMail security failure leaves my business sabotaged | David Airey » graphic designer, logo designer

IMPORTANT: If you use GMail, it’s absolutely vital that you check your account settings now.
Here’s what to do:
When logged into GMail, click on the ’settings’ tab in the upper right of the screen. Then check both the ‘Filters’ and the ‘Forwarding and POP’ sections. This is what I only just found in my ‘Filters’ tab:
The following filters are applied to all incoming mail:
Matches: transfer-approval.com
Do this: Forward to ba_marame_pooli@yahoo.com, Skip Inbox, Delete it
Matches: from:(transfer-approval.com)
Do this: Forward to ba_marame_pooli@yahoo.com, Skip Inbox, Delete it
​
I have absolutely no idea who’s email address that is, but it seems to me that some of my personal emails were bypassing my inbox entirely, instead being forwarded to the yahoo.com address.
Click to expand...
 
  • Like
Reactions: projectv3
I think it was just my gmail that got phished, because the filters only deleted it, they didn't forward it to another email address.
 
Wow, I did a little looking around, and it's actually the exact same kid who stole ricdes domain. Weird coincidences, I'm hoping I can get it resolved like ricdes.
 
I doubt it, as I'd never seen the site before, and I don't believe it was a program, I believe I was phished or trojaned in some way.

I pmed ricdes to hopefully figure out how to deal with this guy.
 
I believe the gmail filter issue was fixed, however if filters were injected prior to the fix; they may still reside. The reason many people are seeing the issue now is when a domain expires, the registrar may send an email (which the attacker receives).
 
If it is the same fuck, it's time to form a strike force and go fuck this guy up.
 
Can't you just ask for a cancel form like the other guy did with godaddy ? I suppose if you can prove you are the righteous owner it shouldn't be a prob
 
Status
Not open for further replies.
Top Bottom