So this kid stole my best domain

Status
Not open for further replies.

ricdes

LIBTARD
Oct 16, 2007
1,702
44
0
Eesti
story:

As you all know, I've been blogging for years at Ricdes Dot Com | Gadgets, Tech, Games, Autos und Kurioses. Now, last week I decided to quit blogging and concentrate on aff marketing alone, but never intended to sell the site or transfer the domain whatsoever.

Yesterday I start to getting noticed on a strange post in fucked up german, trying to promote some vietnamese SEO contest. When I ping my site I notice that it is on a completely different server and that those nameservers are not mine. Fuck.

What I eventually find out is that some guy actually managed to get my freaking complex gmail password, reset my godaddy account and then used the hosting datasheet that was in my gmail to transfer the whole fucking domain tho his acc.

I called godaddy up, asking to undo this stuff but their supporters just told me to mail undo@godaddy.com. They havent answered me yet even though I provided them with the purchase receipt and my drivers license of that domain.

Now my question is: Does anyone of you guys know one of those upper animals at Godaddy? I don't care if he has my db and my content, I can take that down and am already in contact with his hoster for that. All I care about is to get my crown jewel domain back.

PS: I know I was fckin dumb to use godaddy in first place, funny thing is I was thikning about transferring all domains to namecheap last week but hesitated.

PPS: The guy was even dumber than me, entering his real email in the wp-dashboard and exposing some other stuff online. Like his username which usually is tuanfriend2005 and his freaking FLICKR account. I got owned by a vietnamese scriptkiddie.





If you want to spam him, here's his mail:
music989@gmail.com

and of course, if you know him just contact me and I'll get the rest done.
 


Just make a ready email which looks professional. Send it from a fake email sender. Send like from - security@FBI.com . Saying that he has got 24 hours to undo steps, or to face legal actions. it would screw him prob.
 
Huh, that is fucked up. Wish I could offer some help/advice but I got nothing. Keep on GoDaddy, because there's a window of opportunity to easily pull something back I think.

yeah, its like 14 days and it's been only 5 days. hopefully I can get this whole shit back together. But somehow I want also to smack this kid up, lol. Whatever... lets hope jon, barman, xmcp or nick have someone.
 
my site has been german all the time. those last 2 posts have been done by him and obviously translated with some google-translator or whatever. if you'd know german you'd notice. Plus, check my signature---> zeh german gadget blawg. got it? ;)
 
That sucks. You might be interested in this post where the guy's (popular) domain was hijacked by some kid who exploited a Gmail security issue. The kid held the domain for ransom, lol.

The whole thing made a lot of waves and the case was featured in the NYT, Lifehacker, etc. Google posted about it on their blog because Gmail was involved; they then claimed that the security hole had been fixed... Maybe it's not? The guy got his domain back eventually, with a little help from someone at GoDaddy. That part is in a follow-up post.

I think there are parallels between your case and his. You could try to contact him and ask him for Karen's email address (she's the one who helped speed things up at GoDaddy). You could find out if that Gmail vulnerability could be responsible for your case as well, and then "go public", if you know what I mean :)

Best of luck.
 
WTF @ Godaddy not replying! That's fucked up. Make sure you don't have any time deadlines to email or call X by.

Also, is he an affiliate or anything?
 
Get him banned on the affiliate networks he's a member of (if any).

Oh, and if you end up e-mailing Google to inquire about that security problem maybe mention his name and/or username and they can lock down his email, AdSense and all that other crap if he's got it.
 
tuanfriend2005.. may be Tran Gia Lam, poss dob 9/27/89..

Is this his friend: Giao lưu trực tuyến : Học tập tại Anh - Trang 2 - Diễn đàn tiếng Anh miễn phí

his site whois (methi.com): Dethi.com - De t Hi

anyone want to call Hanoi? haha.. this may be a false lead of course..

This guys email is all over the place, and although I can't decipher Vietnamese, it appears to me like several people/groups use the moniker, as opposed to one person.

Good luck gettting your domain back, what a mess..
 
Get on a plane to Hanoi.
Find this kid and beat the fuck out of him.
Hire him.
Bang some whores.
Return home.
 
I just contacted my google adwords rep with most of the information. Thanks guys for your help so far. I was thinking that I'd get bashed by the wf crowd but you guys have been pretty helpfull. thx
 
godaddy just gave me a response. They linked me to some form and asked for my license. Sent it back ///hoping...
 
Good luck. I had a domain taken in the middle of December and still haven't gotten it back.

Once you fill out that form they will fax the registrar it was transferred to, if it was transferred and they usually are, then they will just wait for a response.

I emailed them asking wtf was taking so long and got "Well register.com hasn't responded yet."

Best of luck, but for speedy justice you sort of have to steal it back.
 
holy shit, that sucks ass...

I'd keep on godaddy's ass about this... hopefully they'll get it back to you... tho, if it's been transferred to another registrar it might be difficult... since it was obviously stolen you should get it back at some point, but you might be in for a fight...

btw, if you haven't already, I'd try to contact the registrar it got transferred to and let them know that domain was stolen and they are facilitating criminal acts, etc... sending a letter or 2 from a law firm might get their attention...

stuff like this makes me happy that I have most of my domains at Moniker... since anytime I need something I can contact my support rep... being able to talk to a specific person who's familiar with me and my account is really nice...
 
It might be running out of Detroit.

7 ge-6-19.car3.chicago1.level3.net (4.71.100.9) 6.904 ms 6.671 ms 6.383 ms
8 ae-32-52.ebr2.chicago1.level3.net (4.68.101.62) 41.781 ms 44.667 ms 42.498 ms
9 ae-8-8.car1.detroit1.level3.net (4.69.133.241) 13.352 ms 12.867 ms 12.610 ms
10 ae-11-11.car2.detroit1.level3.net (4.69.133.246) 12.718 ms 12.871 ms 13.494 ms
11 4.53.74.58 (4.53.74.58) 46.065 ms 46.017 ms 51.732 ms
12 core1.acenet-inc.net (207.45.176.2) 58.455 ms 48.315 ms 47.712 ms
13 raven.securenet-server.net (207.45.186.82) 47.112 ms 56.459 ms 56.477 ms

Info on the server.

ricdes
Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8b mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at www . ricdes . com Port 80

Raven
Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8b mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at raven.securenet-server.net Port 80
 
Status
Not open for further replies.