Domain hackers Alert.

[jayu]

The domains as shown below were transferred illegaly on 13,14,15 April,2008 by unknown domain hacker.
The original legal owner is Goi Media(Heongho Kim),he reported all suspected fraud to the cybercrime police and consulted a lawyer about the case.

Currently,the cybercrime police investigate this case seriously.
The owner submitted the domain list to the police,and opened to the public to prevent the hacker from reselling them.

Therefore,the legal owner warned anyone not to purchase these domains,or any buyer will be involved this case.

My email address, poscon@gmail.com is changed by the hacker so I can not control it now.
The hacker's IP address is exposed as 70.85.98.202 and 216.131.118.9.
The hacker use this email, domain.pofi@gmail.com in his whois information.

Please contact us if you know the hacker,etc.
The owner's email is poscos@gmail.com.



The domain list stolen by hacker.
list:
---------------------------------------------------
Cypack.com --> GoDaddy.com
---------------------------------------------------
illu.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
neoo.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
bogy.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
veko.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
chah.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
mopi.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
admy.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
jeef.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
skyfish.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
gtgame.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
konet.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
gtoy.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
cdcm.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
keti.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
latt.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
xran.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
lave.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
anbu.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
jasu.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
morr.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
acct.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
sibe.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
jins.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
ftc.net poscon@gmail.com Go Daddy Software,.. 2008-04-14 2008-04-14 Federal Trade Commision(Already has been SOLD)
microgreen.com poscon@gmail.com Go Daddy Software,.. 2008-04-14 2008-04-14
gmeil.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmailcom.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmaii.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
frgoogle.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmile.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmill.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
wowmart.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
youworld.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13

---------------------------------------------------
domainca.com --> GoDaddy.com
---------------------------------------------------
3004.COM
DESIGNK.COM
DTWS.COM
GMDX.COM
HZHZ.COM
ICOZ.COM
JNSP.COM
REEX.COM
YESM.COM
GEHO.COM
WIHY.COM
SMSLIFE.COM
COJI.COM
OSSY.COM
MUKS.COM Ki
IZIP.COM



Cypack.com --> Dotster.com
---------------------------------------------------
junto.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13
bestland.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13
uspace.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13
postdata.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13


Cypack.com --> eNom.com
---------------------------------------------------
achannel.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
texo.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
rentsale.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
advision.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
blak.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13



Cypack.com --> Moniker.com
---------------------------------------------------
eeee.com poscon@gmail.com Moniker Online Ser.. 2008-04-13 2008-04-13
egf.com poscon@gmail.com Moniker Online Ser.. 2008-04-13 2008-04-13



Cypack.com --> Name.com
---------------------------------------------------
openclub.com poscon@gmail.com Name.com LLC 2008-04-15 2008-04-15
everygame.com poscon@gmail.com Name.com LLC 2008-04-15 2008-04-15


Cypack.com --> Network Solutions
---------------------------------------------------
gns.net poscon@gmail.com Network Solutions,.. 2008-04-13 2008-04-13



Cypack.com --> Rebel.com
---------------------------------------------------
freesociety.com poscon@gmail.com Rebel.com Services.. 2008-04-15 2008-04-15


Cypack.com --> register.com
---------------------------------------------------
cznet.com poscon@gmail.com register.com, Inc. 2008-04-13 2008-04-13
elli.com poscon@gmail.com register.com, Inc. 2008-04-13 2008-04-13
gtoys.com poscon@gmail.com register.com, Inc. 2008-04-13 2008-04-13


enom.com --> eNom.com
---------------------------------------------------
RoyalTV.com

[pcproffenno]

Quite a few valuable names there. I hope you can get them back somehow. Best of luck and let me know if I can help out somehow.

I am pretty sure I saw a Ossy.com thread here the other day, but right now I can't locate it.

[stevo]

This sale held some of those names. iZip.com caught my eye.

http://www.dnforum.com/f529/12-great...ad-293139.html

[DomainMagnate]

many of these are for sale.
some just sold here
http://www.dnforum.com/f529/12-great...ad-293139.html

jayu, that's a lot of domains, can you provide some proof that they were stolen?

[kamil]

Mods can check who is that PM buyer and stop him paying for these names before making things clear...

[Banned: domain newbie]

how is mapmaker member from 2003 with only 7 recent posts, i would like to ask again if there is a bug with joindate

mapmaker is online, so we shall expect something soon

[rentdn]

I noticed that something fishy was doing on that thread

http://www.dnforum.com/f529/12-great...ad-293139.html

and cancelled my offer , Seller behaved very strangely via pm - Now I can see why

[mapmaker]

This mother****er was my partner !
Hey ernest if you dont go to solve this problem today with me...I'll going to share all domains password in the FORUM !

Never mind they are for both !

Just wanted to learn you who is the winner

Dont forget

All add my msn domain_mm@hotmail.com

maybe we had a party today !!!

[rentdn]

how is mapmaker member from 2003 with only 7 recent posts, i would like to ask again if there is a bug with joindate

mapmaker is online, so we shall expect something soon

I don't think it is a bug , probably he just upgraded his membership before making sales thread

[FuseFX]

Mods can check who is that PM buyer and stop him paying for these names before making things clear...

Mods Can't -- only an admin can. Will buzz Jarred whenever he is online today.

I noticed that something fishy was doing on that thread

http://www.dnforum.com/f529/12-great...ad-293139.html

and cancelled my offer , Seller behaved very strangely via pm - Now I can see why

Please send me the copy of the PM.

This mother****er was my partner !
Hey ernest if you dont go to solve this problem today with me...I'll going to share all domains password in the FORUM !

Never mind they are for both !

Just wanted to learn you who is the winner

Dont forget

All add my msn domain_mm@hotmail.com

maybe we had a party today !!!

Please note that revealing any personal information is against the rules of the forum. Even though he or she may have done wrong but we don't want any legal hassles for us due to you sharing the passwords --which would be violation of your agreement with the registrar.

I don't think it is a bug , probably he just upgraded his membership before making sales thread

Or maybe phished or hacked the password of the original owner.

[FuseFX]

Put up a notice on the sales thread.

[FuseFX]

Also, the person is using http://strongvpn.com to hide his IP. Looks like a hacked account to me.

[rentdn]

Here is the conversation between us

1st msg from mapmaker

LLLLs Pack !

Hello,
I have 3 K offer.
He dont let me post his offer in the DNF !
I have his offer in the MSN !
Do you want offer more ?!

2-nd msg from mapmaker

dshop offers 3 K.... I want to have quick sell so I want to be sure you dont want offers more...

My reply

Re: Last PM ... !

No at this moment 2.5K is my best offer Thanks anyway for contacting me

3rd msg from mapmaker

OK Good Luck

4th msg from mapmaker

Funny Offers !!!

Hello,
Sorry Rentdn,
He said he will going to holidays then after 1 week he will funded his escrow !!!
loool
I dont accept his offer !
Your 2.5 K offers is highest offer right now......

My reply

M8 to be honest it's some kind of unprofessional approach to the business , which made me to suspect that there is something wrong with this name ( no offence )

Please tell me

1. From there this names where bought and when
2. What kind of escrow do you prefer
3. Are you ready to move the names first

Thanks

Last msg from mapmaker

All may cause for my bad english...
so sorry for it...

1-I dont bought these names....
We have them since many years ago (Goi Media Team)....
We have many LLLLs and LLLs .com & .net also more than 4000 cool domains....

So we decided to sell some of them in this forum

2-Not important for me...

3-Also Nope in this matter !!!

Regards

[Giode]

Man, I don't know how many times it has been mentioned, but if you have valuable domains don't use free email accounts. It's that simple!

[ebatcave]

He tried to set up an online chat with me to sell me the domains, but I told him I don't do IM chat, so that ended the conversation and I didn't purchase any.

[flujus]

And how this would prevent from Domains hijacks ??

[denny007]

I think mapmaker is simply another DNF hacked acocunt...

[Mr. Deleted]

And how this would prevent from Domains hijacks ??

gmail= a bug that allows it

[Banned: dshop]

Here is the conversation between us

1st msg from mapmaker

LLLLs Pack !

Hello,
I have 3 K offer.
He dont let me post his offer in the DNF !
I have his offer in the MSN !
Do you want offer more ?!

2-nd msg from mapmaker

dshop offers 3 K.... I want to have quick sell so I want to be sure you dont want offers more...

My reply

Re: Last PM ... !

No at this moment 2.5K is my best offer Thanks anyway for contacting me

3rd msg from mapmaker

OK Good Luck

4th msg from mapmaker

Funny Offers !!!

Hello,
Sorry Rentdn,
He said he will going to holidays then after 1 week he will funded his escrow !!!
loool
I dont accept his offer !
Your 2.5 K offers is highest offer right now......

My reply

M8 to be honest it's some kind of unprofessional approach to the business , which made me to suspect that there is something wrong with this name ( no offence )

Please tell me

1. From there this names where bought and when
2. What kind of escrow do you prefer
3. Are you ready to move the names first

Thanks

Last msg from mapmaker

All may cause for my bad english...
so sorry for it...

1-I dont bought these names....
We have them since many years ago (Goi Media Team)....
We have many LLLLs and LLLs .com & .net also more than 4000 cool domains....

So we decided to sell some of them in this forum

2-Not important for me...

3-Also Nope in this matter !!!

Regards

yes i talked with him.And i said him my highest offer is 3,000 USD , deal or not ?I gave him 20 mins to think , and after that he said ok , and i said him , i will go holiday so i can pay it 1 week later.He said no and i said good luck than .....
I dont think its a scammer because of the payment method is escrow and he can't take money before he gaves.

So i think he hacked and own his...He said me yesterday , i have mopi.com too also i have so many llll.com . I said ok let me think.After that , today i looked the theard which is him topic , and i saw his domain hackers alert post and i posted a msg via msn.I said , why you scam people ? He answered my im not a scammer etc... and i banned him in my msn

[Mr. Deleted]

ftc.net poscon@gmail.com Go Daddy Software,.. 2008-04-14 2008-04-14 Federal Trade Commision(Already has been SOLD)

first, this name does not have that email, and 2nd it is registered to the FTC, are you going to sue them?