My domain was just hijacked

SexyTeenGals · 2004-09-30, 05:40 PM

Hi,
Please let me know if this is not the appropriate place to put this.

My original site www.kinkyhotbabes.com was just hijacked and I have currently lost control of that domain. The site can still be viewed at the ip address http://66.172.74.128/

As you can see whoever did this doesn't seem to be very bright, I guess he thinks that money just falls in your lap in this business. There is absolutely no way he's going to be making money with the cutup index page ( that still contains many of my affiliate links and links to my 2257 and Free Tour page that he didn't copy over )

Unfortunately, right now I must accept the fact that all the time and effort I have invested over the past 2 years for the development of the entity Kinky Hot Babes is now useless. Irregardless of legal resolution, day by day this domain is now becoming more worthless.

Any traffic from Google from the historic database is going to disappear over the next 30 to 60 days, if not sooner, and any recent gallery submissions are most likely just going to turn into site blacklistings because the content can't be accessed from the domain name.

I came here because I know that this is where most of you big boys ( and gals ) like to play. Tommy if you're around I want to say hi to you again. Maybe you remember me if I mention working with Les as a reviewer for JJJs TGP. These gusy gave me my start in this business back in 2002 and I have always been grateful for the experience.

The only major related experience that I know of like this is when this happened to sex.com. My understanding is that legal resolution took 6 years of court cases.

Does anyone have any advice for me on this issue?
Is there a recommended lawyer ( or law firm ) that I should contact about this?

Thank you so much for your attention.
I really need all the help I can get here.

Dr Bizzaro · 2004-09-30, 06:00 PM

Let me guess.....Go Daddy?

That sucks. Happened to me not once, but twice a few years back. (At Networksolutions) Not fun. Although the DNS was never switched over. (We caught it in time both time.) Took about 4 days each time to get things back on track.

SexyTeenGals · 2004-09-30, 06:09 PM

Wow - I'm sorry to hear about that Dr Bizarro.
At least I now know that this type of thing has happened to someone that I know runs top notch sites.

Did you attempt to do anyting about it? Or did you decide that it wasn't worth the trouble?

Linkster · 2004-09-30, 06:18 PM

Did the actual domain name get stolen or are they just redirecting something on the server? The reason I ask is that the domain whois doesnt show any mods made to it since 2002

Although its hosted at Exmasters so that should be easy to get taken down - the whois shows an IP of 81.31.38.25 which hosts that domain and 49 others at Exmasters - and again the DNS doesnt look like its been updated recently?

Dr Bizzaro · 2004-09-30, 06:38 PM

Quote:

Originally posted by SexyTeenGals
Wow - I'm sorry to hear about that Dr Bizarro.
At least I now know that this type of thing has happened to someone that I know runs top notch sites.

Did you attempt to do anyting about it? Or did you decide that it wasn't worth the trouble?

They guy who did it was in another country. What could I do?
I was just glad I got it back and they never assumed full control.

At the time he (they) were targeting a lot of bifgger sites. I remember hearing story after story about it. It was about 5 years ago now. Damn, time flies...

SexyTeenGals · 2004-09-30, 06:46 PM

It has been hijacked.

The details of the dns are being hidden.
This happened lightning fast. There was an update propogation order issued for 27 Sep 2004 and on the 28th I noticed intermittent 403 access errors.

Once I realized what was happening I contacted my registrar for that domain ( thankfully most of my other domains are on a different registrar ). Dan the owner of Profit Gate http://www.profitgate.net/ which is my registrar for kinkyhotbabes.com originally thought that it could be handled from his end before the propogation made it all the way through but the changes were locked out from the new registrar level from namecheap.com ( which is the enom.com reseller that this went through ).

My attempts at contacting namecheap.com and exmasters.com have resulted in no response. Dan is willing to help me from his end in any way he can by contacting these companies. Unfortunately, just like a case of trying to report copyright abuses, at this level most people immediately default to the word "legal". They're more concerned about protecting their corporate entity than they are about doing the right thing. A good example of that is the ongoing legal battle over pirated songs and movies.

I have the email address that was used to initiate the transfer request, but I don't think it would be appropriate to post that in a forum. I'll just say that it is a yahoo email account. Which I know for a fact will take a legal injuction ( or other legal action ) to produce any type of action from them.

Here is what my last receipt for the domain name looked like:
-------------------------------------------------------------------------
Product Created Expires Price
Domain Name
-------------------------------------------------------------------------
1 Year COM/NET/ORG Renewal 28-JAN-02 29-JAN-05 12.95
KINKYHOTBABES.COM
-------------------------------------------------------------------------

That was the expiration date just 4 days ago and the dns would have had the same information as www.sexyteengals.com just with a different registrar company.

I went so far as to actually copy and past the entire list from my registrar page when I contacted namecheap.com. I sent them and exmasters.com an email on the 28th when I realized what was going on and like I said there was no response.

I contacted a representative of enom.com yesterday and was basically told to contact legal@enom.com with the expectation that their answer will be the default 1999 ICANN Dispute Resolution for Arbitration. Which, by the way, is at the expense of the person initiating the complaint.

Well, that's just a few more details of basically what happened here. At the moment I'm pretty busy working up a list of which sponsors I need to contact about changing my account information with. That work alone is going to take probably a week of my time.

SexyTeenGals · 2004-09-30, 07:11 PM

Quote:

Originally posted by SexyTeenGals

That was the expiration date just 4 days ago and the dns would have had the same information as www.sexyteengals.com just with a different registrar company.

Hmmm, I don't know why that isn't showing complete dns information.

I guess a better example would be:
www.amateurcharms.com
Since it is with the same registrar company.

I registered my other domains through my reseller account with Wild West Domains.

Linkster · 2004-09-30, 07:14 PM

I noticed on the "new" page that the guy has an account with EMX - might contact Toolz there - the guys aff Id is fcrawler it looks like - would probably get a bunch of help from him

wasnt fetish crawler a domain that got hijacked earlier this year?

SexyTeenGals · 2004-09-30, 07:23 PM

Quote:

Originally posted by Linkster
I noticed on the "new" page that the guy has an account with EMX - might contact Toolz there - the guys aff Id is fcrawler it looks like - would probably get a bunch of help from him

wasnt fetish crawler a domain that got hijacked earlier this year?

Thanks for the good eye!
Do you have contact information so I can contact them?

I also looked for contact information for the site gallerypool.com where some of the links are being fed from but I couldn't find any contact information and it may just be a dummy site that this webmaster has setup.

Linkster · 2004-09-30, 08:11 PM

Might try PM'ing here - since he is a member here http://www.greenguysboard.com/board/...nfo&userid=499

SexyTeenGals · 2004-09-30, 08:55 PM

Quote:

Originally posted by Linkster
Might try PM'ing here - since he is a member here http://www.greenguysboard.com/board/...nfo&userid=499

Thanks Linkster

As a side note I think the biggest help that may come from this legally is the software license from JMB Software for the AutoGallery SQL site license.

It shows that I licensed that software for use on kinkyhotbabes.com on 23 Oct 2002; has my personal identity; and hostname and ip addresses.

I want to give them a shout out of thanks. They just changed the license for me so I can use the software on another domain. So I guess that www.pornnudewomen.com is going to be the replacement for kinkyhotbabes.com.

So now I need to migrate the 600 megabytes or so of content up to the new server. I may need to keep the integrity of the old site up for legal purposes. I just don't know which way to go at this point

Sigh!

msanchez · 2004-09-30, 09:00 PM

So what can be done to protect against this happening?

That sure sux to lose all your hard work.

Goodluck with whatever your possible reponses could be.

AcidMaX · 2004-10-01, 08:08 AM

I would almost bet that this is the same asshole that stole my domain and many others.

Let me get this straight though. He took the domain from namecheap or took it to namecheap? Mine was originally stolen from GoDaddy this year. Someone is supposedly going after this guy but I havnt heard anything else about it.

Andy

kalle7 · 2004-10-01, 12:30 PM

Really sorry to hear about your problem!!

Is this a problem that has happend often with GoDaddy? Makes me wonder if I need to change....

Thumbler · 2004-10-01, 01:08 PM

Quote:

Originally posted by kalle7

Is this a problem that has happend often with GoDaddy? Makes me wonder if I need to change....

In a word - yes

vicki · 2004-10-01, 02:08 PM

The best thing to keep this from happening again is to use the Domain Lock function! Its a free service from most reputable registrars I think .. I know it is at mine (domainnamesystems.com)

It locks the domain down and it can't be moved or highjacked without the owner manually 'unlocking' it first.

JenC · 2004-10-01, 02:12 PM

You can email Toolz here, he responds pretty fast:

support@evidz.com

SexyTeenGals · 2004-10-01, 02:27 PM

Quote:

Originally posted by AcidMaX
I would almost bet that this is the same asshole that stole my domain and many others.

Let me get this straight though. He took the domain from namecheap or took it to namecheap? Mine was originally stolen from GoDaddy this year. Someone is supposedly going after this guy but I havnt heard anything else about it.

Andy

He took it to namecheap.com which is a reseller for enom.com.

SexyTeenGals · 2004-10-01, 02:40 PM

Quote:

Originally posted by vicki
The best thing to keep this from happening again is to use the Domain Lock function! Its a free service from most reputable registrars I think .. I know it is at mine (domainnamesystems.com)

It locks the domain down and it can't be moved or highjacked without the owner manually 'unlocking' it first.

That's the best advice on protecting your domain.
My problem goes a little beyond that because my registrar account was hacked with a new email contact address from yahoo.com.

That was the only information that was changed but once he gained access to the registrar account that's pretty much it. This is something that most of us wouldn't think about having to keep an eye on and even if you do the system is setup so that when an update change is being made it apparently can't be stopped without another update change being accepted through the system.

Toolz · 2004-10-01, 03:13 PM

Dropped you an email re: this situation, give me a call at the office when you get a chance: 269-353-8781

SexyTeenGals · 2004-10-01, 03:45 PM

Quote:

Originally posted by Toolz
Dropped you an email re: this situation, give me a call at the office when you get a chance: 269-353-8781

Toolz,
Thanks so much for the help!

SexyTeenGals · 2004-10-01, 03:50 PM

Quote:

Originally posted by Linkster
wasnt fetish crawler a domain that got hijacked earlier this year?

This webmaster is using fetishcrawler as an email contact.
Has anyone else recently had their domain hijacked?
This person may end up being subject to a class action suit if we can find enough victims.

AcidMaX · 2004-10-01, 04:22 PM

This guy is already being pursued on many levels. I replied to your PM with some details. I try not to say too much about the progress on the boards because I believe the hijacker reads them.

Fetishcrawler I beleive was also hijacked from the "fotodela" character.

http://pp2k.com/fotodela.html

He has been tracked back to 2001 with stealing domain names and no one has been able to touch him, although this time there are people in Canada who are fighting this.

For those of you that think locking your domain name is going to solve this you are WRONG!!!

My domain WAS locked at GoDaddy. I only knew something was going on because I got the Unlock e-mail. I immediately called and GoDaddy said they could not do anything without a court order.

Don't think that registrar locks are foolproof because they are not, he got around mine.

Andy

vicki · 2004-10-01, 04:41 PM

Quote:

Originally posted by AcidMaX

My domain WAS locked at GoDaddy. I only knew something was going on because I got the Unlock e-mail. I immediately called and GoDaddy said they could not do anything without a court order.

holy cow!

Well I sure hope they catch this guy, stuff like this burns my blood

SexyTeenGals · 2004-10-20, 11:51 PM

I want to take the time to thank everyone for their emotional support, which was very helpful.

I also want to personally thank everyone that helped provide me with information about 'Fotodela' and making me aware of his actions.

After gathering the information I needed for further legal action against him I gave 'Fotodela' the opportunity to return control of kinkyhotbabes.com to me within 48 hours.

He responded an hour later with an account setup with namecheap.com so I could access the domain. Now I'm just waiting for the dns to update so I can get to work on repairing the damage done.

Thank you all so much!

2004-09-30, 05:40 PM	#1
SexyTeenGals Rock stars ... is there anything they don't know? Join Date: Sep 2004 Location: San Francisco Bay Area Posts: 13	My domain was just hijacked Hi, Please let me know if this is not the appropriate place to put this. My original site www.kinkyhotbabes.com was just hijacked and I have currently lost control of that domain. The site can still be viewed at the ip address http://66.172.74.128/ As you can see whoever did this doesn't seem to be very bright, I guess he thinks that money just falls in your lap in this business. There is absolutely no way he's going to be making money with the cutup index page ( that still contains many of my affiliate links and links to my 2257 and Free Tour page that he didn't copy over ) Unfortunately, right now I must accept the fact that all the time and effort I have invested over the past 2 years for the development of the entity Kinky Hot Babes is now useless. Irregardless of legal resolution, day by day this domain is now becoming more worthless. Any traffic from Google from the historic database is going to disappear over the next 30 to 60 days, if not sooner, and any recent gallery submissions are most likely just going to turn into site blacklistings because the content can't be accessed from the domain name. I came here because I know that this is where most of you big boys ( and gals ) like to play. Tommy if you're around I want to say hi to you again. Maybe you remember me if I mention working with Les as a reviewer for JJJs TGP. These gusy gave me my start in this business back in 2002 and I have always been grateful for the experience. The only major related experience that I know of like this is when this happened to sex.com. My understanding is that legal resolution took 6 years of court cases. Does anyone have any advice for me on this issue? Is there a recommended lawyer ( or law firm ) that I should contact about this? Thank you so much for your attention. I really need all the help I can get here. __________________ "I wish I took the blue pill"

2004-09-30, 06:00 PM	#2
Dr Bizzaro I'm not interested in the facts, I'm interested in my opinion. Join Date: Apr 2003 Location: Chicago Posts: 1,620	Let me guess.....Go Daddy? That sucks. Happened to me not once, but twice a few years back. (At Networksolutions) Not fun. Although the DNS was never switched over. (We caught it in time both time.) Took about 4 days each time to get things back on track. __________________ -DrBizzaro Make BIG $ selling text links! Sell Links and get $$

2004-09-30, 06:09 PM	#3
SexyTeenGals Rock stars ... is there anything they don't know? Join Date: Sep 2004 Location: San Francisco Bay Area Posts: 13	Wow - I'm sorry to hear about that Dr Bizarro. At least I now know that this type of thing has happened to someone that I know runs top notch sites. Did you attempt to do anyting about it? Or did you decide that it wasn't worth the trouble? __________________ "I wish I took the blue pill"

2004-09-30, 06:18 PM	#4
Linkster NO! Im not a female - but being a dragon, I do eat them. Join Date: Mar 2003 Location: Sex Delta Posts: 5,084	Did the actual domain name get stolen or are they just redirecting something on the server? The reason I ask is that the domain whois doesnt show any mods made to it since 2002 Although its hosted at Exmasters so that should be easy to get taken down - the whois shows an IP of 81.31.38.25 which hosts that domain and 49 others at Exmasters - and again the DNS doesnt look like its been updated recently? __________________ Pussy Chompers Porn Links NSCash

2004-09-30, 06:46 PM	#6
SexyTeenGals Rock stars ... is there anything they don't know? Join Date: Sep 2004 Location: San Francisco Bay Area Posts: 13	It has been hijacked. The details of the dns are being hidden. This happened lightning fast. There was an update propogation order issued for 27 Sep 2004 and on the 28th I noticed intermittent 403 access errors. Once I realized what was happening I contacted my registrar for that domain ( thankfully most of my other domains are on a different registrar ). Dan the owner of Profit Gate http://www.profitgate.net/ which is my registrar for kinkyhotbabes.com originally thought that it could be handled from his end before the propogation made it all the way through but the changes were locked out from the new registrar level from namecheap.com ( which is the enom.com reseller that this went through ). My attempts at contacting namecheap.com and exmasters.com have resulted in no response. Dan is willing to help me from his end in any way he can by contacting these companies. Unfortunately, just like a case of trying to report copyright abuses, at this level most people immediately default to the word "legal". They're more concerned about protecting their corporate entity than they are about doing the right thing. A good example of that is the ongoing legal battle over pirated songs and movies. I have the email address that was used to initiate the transfer request, but I don't think it would be appropriate to post that in a forum. I'll just say that it is a yahoo email account. Which I know for a fact will take a legal injuction ( or other legal action ) to produce any type of action from them. Here is what my last receipt for the domain name looked like: ------------------------------------------------------------------------- Product Created Expires Price Domain Name ------------------------------------------------------------------------- 1 Year COM/NET/ORG Renewal 28-JAN-02 29-JAN-05 12.95 KINKYHOTBABES.COM ------------------------------------------------------------------------- That was the expiration date just 4 days ago and the dns would have had the same information as www.sexyteengals.com just with a different registrar company. I went so far as to actually copy and past the entire list from my registrar page when I contacted namecheap.com. I sent them and exmasters.com an email on the 28th when I realized what was going on and like I said there was no response. I contacted a representative of enom.com yesterday and was basically told to contact legal@enom.com with the expectation that their answer will be the default 1999 ICANN Dispute Resolution for Arbitration. Which, by the way, is at the expense of the person initiating the complaint. Well, that's just a few more details of basically what happened here. At the moment I'm pretty busy working up a list of which sponsors I need to contact about changing my account information with. That work alone is going to take probably a week of my time. __________________ "I wish I took the blue pill"

2004-09-30, 07:14 PM	#8
Linkster NO! Im not a female - but being a dragon, I do eat them. Join Date: Mar 2003 Location: Sex Delta Posts: 5,084	I noticed on the "new" page that the guy has an account with EMX - might contact Toolz there - the guys aff Id is fcrawler it looks like - would probably get a bunch of help from him wasnt fetish crawler a domain that got hijacked earlier this year? __________________ Pussy Chompers Porn Links NSCash

2004-09-30, 08:11 PM	#10
Linkster NO! Im not a female - but being a dragon, I do eat them. Join Date: Mar 2003 Location: Sex Delta Posts: 5,084	Might try PM'ing here - since he is a member here http://www.greenguysboard.com/board/...nfo&userid=499 __________________ Pussy Chompers Porn Links NSCash

2004-09-30, 09:00 PM	#12
msanchez It is better to watch things then to do them Join Date: Sep 2004 Location: The Thumb Posts: 484	So what can be done to protect against this happening? That sure sux to lose all your hard work. Goodluck with whatever your possible reponses could be. __________________ I buy text links, clicked traffic, blog posts, and more! Hit me with a pm.

2004-10-01, 08:08 AM	#13
AcidMaX Programming till my fingers bleed. Join Date: Aug 2003 Location: Michigan Posts: 876	I would almost bet that this is the same asshole that stole my domain and many others. Let me get this straight though. He took the domain from namecheap or took it to namecheap? Mine was originally stolen from GoDaddy this year. Someone is supposedly going after this guy but I havnt heard anything else about it. Andy

2004-10-01, 12:30 PM	#14
kalle7 Hey, can you take the wheel for a second, I have to scratch my self in two places at once Join Date: Jan 2004 Location: Here and there... Posts: 182	Really sorry to hear about your problem!! Is this a problem that has happend often with GoDaddy? Makes me wonder if I need to change.... __________________

2004-10-01, 02:08 PM	#16
vicki Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos! Join Date: Aug 2003 Location: texas Posts: 75	The best thing to keep this from happening again is to use the Domain Lock function! Its a free service from most reputable registrars I think .. I know it is at mine (domainnamesystems.com) It locks the domain down and it can't be moved or highjacked without the owner manually 'unlocking' it first. __________________ <br> US, Canadian and Offshore merchant accounts<br> the FULL SCOOP on sponsors

2004-10-01, 02:12 PM	#17
JenC Stupid risks make life worth living Join Date: Aug 2003 Location: Eastern Seaboard Posts: 387	You can email Toolz here, he responds pretty fast: support@evidz.com __________________ THIS IS MY SIG - CLICK IT.

2004-10-01, 03:13 PM	#20
Toolz If something goes wrong at the plant, blame the guy who can't speak English Join Date: Sep 2003 Posts: 33	Dropped you an email re: this situation, give me a call at the office when you get a chance: 269-353-8781

2004-10-01, 04:22 PM	#23
AcidMaX Programming till my fingers bleed. Join Date: Aug 2003 Location: Michigan Posts: 876	This guy is already being pursued on many levels. I replied to your PM with some details. I try not to say too much about the progress on the boards because I believe the hijacker reads them. Fetishcrawler I beleive was also hijacked from the "fotodela" character. http://pp2k.com/fotodela.html He has been tracked back to 2001 with stealing domain names and no one has been able to touch him, although this time there are people in Canada who are fighting this. For those of you that think locking your domain name is going to solve this you are WRONG!!! My domain WAS locked at GoDaddy. I only knew something was going on because I got the Unlock e-mail. I immediately called and GoDaddy said they could not do anything without a court order. Don't think that registrar locks are foolproof because they are not, he got around mine. Andy

2004-10-20, 11:51 PM	#25
SexyTeenGals Rock stars ... is there anything they don't know? Join Date: Sep 2004 Location: San Francisco Bay Area Posts: 13	..::: SUCCESS :::.. I want to take the time to thank everyone for their emotional support, which was very helpful. I also want to personally thank everyone that helped provide me with information about 'Fotodela' and making me aware of his actions. After gathering the information I needed for further legal action against him I gave 'Fotodela' the opportunity to return control of kinkyhotbabes.com to me within 48 hours. He responded an hour later with an account setup with namecheap.com so I could access the domain. Now I'm just waiting for the dns to update so I can get to work on repairing the damage done. Thank you all so much! __________________ "I wish I took the blue pill"