Godaddy domain names being stolen! - Page 2 - DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

**ydnaemsti** · 10-07-2009, 12:09 AM

I actually do not blame the people that stole those domains. The problem lies with the registrars. It's 2009 and they did not figure out how to protect internet property. I would sue them. It's the easiest thing ever to actually secure domains.

**Poker** · 10-07-2009, 12:13 AM

that sucks...

If anyone is using a yahoo, msn or gmail account for your admin contacts stop it already...you own domain names ya dork

**raoul** · 10-07-2009, 12:16 AM

Quote:

Originally Posted by ydnaemsti

I actually do not blame the people that stole those domains. The problem lies with the registrars. It's 2009 and they did not figure out how to protect internet property. I would sue them. It's the easiest thing ever to actually secure domains.

I think the regitrars have a "nursing" role, there is no way, to stop stuipid users (yes they are) from doing stuipid things. If there is a hole in their system, YES the registrars should be held responsible, not in this case IMO.

**Doc Com** · 10-07-2009, 12:18 AM

Quote:

Originally Posted by Poker

that sucks...

If anyone is using a yahoo, msn or gmail account for your admin contacts stop it already...you own domain names ya dork

This has been mentioned so frequently on here.

Getting a secure, reliable, and safe email account is prudent. Plus it looks more professional if you have something that not anybody and everybody uses.

**ydnaemsti** · 10-07-2009, 12:24 AM

If I open up a registration company, I will certify that no domain will be stolen not matter what email you use or how stupid you are. There is a way, but I'll keep that for myself for now.

**raoul** · 10-07-2009, 12:30 AM

Quote:

Originally Posted by ydnaemsti

I actually do not blame the people that stole those domains. The problem lies with the registrars. It's 2009 and they did not figure out how to protect internet property. I would sue them. It's the easiest thing ever to actually secure domains.

Quote:

Originally Posted by ydnaemsti

If I open up a registration company, I will certify that no domain will be stolen not matter what email you use or how stupid you are. There is a way, but I'll keep that for myself for now.

sure there are ways, and there are registrars that have good reputiation "not one stolen domain in x years"

the problem here is that the OWNER (the broker) pushed the domain to the scammers account...

how to stop that? Its just a stuipid action, because he not checked escrow account, but assumed it the email was real.

I can send you tonight an email from instpector.gadget@fbi.gov saying you will be deported to guatamo bay. Many people just not realize how internet works

untill the time everyone understand is (it will be never) there is NO way to stop such, or simular "hacking" "social engineering"

**ydnaemsti** · 10-07-2009, 12:39 AM

There is a way to stop it. Again, it's very easy. Did you ever see a stole house?

**raoul** · 10-07-2009, 12:43 AM

Quote:

Originally Posted by ydnaemsti

There is a way to stop it. Again, it's very easy. Did you ever see a stole house?

yes sure, in some countries its possible to steal a house.

...anyway compared to this case it would be better to state:
the last owner not readed the papers so good, the house sold for 0$ to the new owner (he got a post letter from "the notary"(the backside had a stamp on it "notary john doe")) he just opend the envelope signed it, and the buyer picked the papers up "to bring it to the notery"

**ydnaemsti** · 10-07-2009, 01:05 AM

You're assuming the owner has to do something (read the contract, or push the domain). Under my umbrella the owner is protected from him stupidity and if the umbrella fails, the domain is insured.

So to put this in terms of real estate: the seller misread the contract ($0), sold the house for nothing, but regain the money from the insurer who covered him on his mistake. All for a small fee.

**Rockefeller** · 10-07-2009, 04:31 PM

Quote:

Originally Posted by ydnaemsti

Guy is from Chicago IL.

His real name could be: luke zycki

You guys should check the IPs he sent those emails from and try to match IP addresses on DNForum in order to get his screen name here.

And this could be the address:
221 POPPY LN, BENSENVILLE, IL 60106

PM me, how did you find this info?

**biggedon** · 10-07-2009, 04:45 PM

Quote:

Originally Posted by Rockefeller

PM me, how did you find this info?

Quote:

Originally Posted by ydnaemsti

Guy is from Chicago IL.

His real name could be: luke zycki

You guys should check the IPs he sent those emails from and try to match IP addresses on DNForum in order to get his screen name here.

And this could be the address:
221 POPPY LN, BENSENVILLE, IL 60106

maybe same person here:

http://thepartstrader.com/details.php?id=6584

**Rockefeller** · 10-07-2009, 04:58 PM

Quote:

Originally Posted by biggedon

maybe same person here:

http://thepartstrader.com/details.php?id=6584

Tried the number, no good

**ydnaemsti** · 10-07-2009, 05:01 PM

That is the same person: Lukasz Zycki.

**Rockefeller** · 10-07-2009, 05:06 PM

Heres something interesting, this scammer uses the email meebooo1@yahoo.com for a legitimate email address, or at least he's emailed us from that email address in the pass using David Sanchez in the past. I know this is the scammer 100% using the email address, but not sure if he actually "owns" it. Anyway, I ran a reverse search (paid) on the email and it returned this:

John Sanchez
(248) 212-1555
48589 Wicker Creel Dr
Northville, MI 48168

**TheLegendaryJP** · 10-07-2009, 05:10 PM

More info, did a little backround

Print Your Report (630) 669-1440 Mobile
Z Lukasz
Bannockburn, IL 60015
Nextel Comm Inc

More info coming on Lukasz Zycki...

Print Your Report
Lukasz Zycki
221 Poppy Ln
Bensenville, IL 60106

Full-screen
Lukasz ZyckiMap data ©2009 Google - Terms of Use

Offender Details
1 of 5 records << Prev Next >>

Full Name: Zycki, Lukasz
Gender:
Race:
Date Of Birth: 01/1983
Height:
Weight:
Hair Color:
Eye Color:
State:
County: Dupage County

Available Offense Details
1 of 2 records << Prev Next >>

Description: Unlawful To Operate Motor Vehicle With Tinted Registration Plate Covers
Disposition:
Degree Of Offense:
Statute Violated:
Plea:
Arrest Date:
Disposition Date:
File Date: 04/06/2000
Other Details: Case Number: 2000tr049979
Birth Year: 1983
Legal Status: Closed
Balance Due Amount: $0.00
Agency: Wood Dale Police
Complaint Number: 000000146804

No bankruptcy records found for Lukasz Zycki in the state of IL

<< Prev Next >>

Marcin Zycki
221 Poppy Ln
Bensenville, IL 60106

Andriana Zycki
221 Poppy Ln
Bensenville, IL 60106

Tomasz F Zycki
221 Poppy Ln
Bensenville, IL 60106

3 Total Records

<< Prev Next >>

Dorota M Wolek
221 Poppy Ln
Bensenville, IL 60106

Marcin Zycki
221 Poppy Ln
Bensenville, IL 60106

Andriana Zycki
221 Poppy Ln
Bensenville, IL 60106

Tomasz F Zycki
221 Poppy Ln
Bensenville, IL 60106

6 Total Records

<< Prev Next >>

760 Roosevelt Rd
Hanover Park, IL 60133

760 Roosevelt Rd
Hanover Park, IL 60103

221 Poppy Ln
Bensenville, IL 60106

More offenses...

Available Offense Details
1 of 2 records << Prev Next >>

Description: Operate Uninsured Motor Vehicle
Disposition:
Degree Of Offense:
Statute Violated:
Plea:
Arrest Date:
Disposition Date:
File Date: 01/08/2002
Other Details: Case Number: 2002tr003354
Birth Year: 1983
Legal Status: Closed
Balance Due Amount: $0.00
Agency: Wood Dale Police
Complaint Number: 000000157145

Available Offense Details
1 of 3 records << Prev Next >>

Description: Drivers View Obstructed By Sign, Poster,window Application, Etc
Disposition:
Degree Of Offense:
Statute Violated:
Plea:
Arrest Date:
Disposition Date:
File Date: 02/27/2007
Other Details: Case Number: 2007tr026860
Birth Year: 1983
Legal Status: Active
Agency: Bensenville Police Depart
Next Court Location: Addison Field
Next Court Date: 04/09/2007
Complaint Number: 000000096707

Available Offense Details
1 of 1 records << Prev Next >>

Description: Speeding Over Statutory Limit 26-30
Disposition:
Degree Of Offense:
Statute Violated:
Plea:
Arrest Date:
Disposition Date:
File Date: 05/23/2008
Other Details: Case Number: 2008tr076552
Birth Year: 1983
Legal Status: Active
Balance Due Amount: $95.00 (as Of Date :: 06-05-2008)
Agency: Wood Dale Police
Next Court Location: Addison Field
Assigned Location: Addison Field
Next Court Date: 07/22/2008
Complaint Number: 000000201585

Available Offense Details
1 of 1 records << Prev Next >>

Description: Speeding Over Statutory Limit 15-20
Disposition:
Degree Of Offense:
Statute Violated:
Plea:
Arrest Date:
Disposition Date:
File Date: 06/15/2009
Other Details: Case Number: 2009tr086057
Birth Year: 1983
Legal Status: Closed
Agency: Bensenville Police Depart
Complaint Number: 000000109545|

**ydnaemsti** · 10-07-2009, 05:25 PM

Take the IPs he sent the email from and do 2 things:

1. Find the locations of those IP addresses within US
2. Tell admins to run scans on NP and DNForum to find the those IPs in here.

**TheLegendaryJP** · 10-07-2009, 05:27 PM

Quote:

Originally Posted by ydnaemsti

Take the IPs he sent the email from and do 2 things:

1. Find the locations of those IP addresses within US
2. Tell admins to run scans on NP and DNForum to find the those IPs in here.

He is clearly in IL, read above, its him. Secondly we now have several family members names that live at the same address, in the process of searching them out to get a valid number, this guy has never had a phone number other than a cell in his name.

This is the house, at LEAST 5-6 people live there all but one with the same last name.

http://maps.google.ca/maps?sourceid=...title&resnum=1

No worries Robert and Rocky we'll have this guy soon.

I believe he is Polish(?) any way I found a pic of a bunch of polish guys with his address mentioned, real " gangstas " in the pic, throwing up signs lol it has a matching addy BUT I wont link it because the site freezes my PC so may be dangerous/worm/trojans etc.

**Rockefeller** · 10-07-2009, 05:40 PM

Okay, I'm starting to tie things together here:

GD account that stole 4n.net, 29116963, admin email is domainguy25@rocketmail.com, BUT the password reset email on account is meebooo1@yahoo.com which I found after trying several times.

Meebooo1@yahoo.com did business with EscrowDNS.com back in November and used the name David Sanchez, the reverse look up shows "John Sanchez" as the email owner. We also received several emails saying "hi" which I passed off as spam right before 4n.net was stolen. They sent the emails to several different @escrowdns.com email addresses, probably trying to find one that would bounce, they setup a godaddy account using escrow@escrowdns.com BUT we have a catch all feature which will deliver all emails to us no matter what, as long as its @escrowdns.com. So we received his emails saying "Hi" and also emails from Godaddy saying the domain name was pushed, I immediatly attempted to login to that account by resetting the password at Godaddy to "steal" the domain name back, but they were too quick.

Anyway, meebooo1@yahoo.com or David Sanchez actually completed a transaction through us and was paid by Paypal to sample4u@gmail.com. Now I doubt a scammer would accept money into a stolen account so that must be the scammers actual Paypal address.

4n.net was actually stolen once before and EscrowDNS helped return the domain name to its owner by intercepting the scammer. Before we found out he was a scammer he gave us his Paypal address which was servers24@gmail.com and went by the name "Ben". When you Google servers24@gmail.com there are several posts from 06-07 where the guy signs it with "Amir". The same scammer was trying to spread rumors around DP that we stole his domain name, he used the screen name "Sun431" over there and he purchased "signature space" from a member over there which now reads "Darmid.com" which has been used in the stolen domain names' whois.

If anyone can use this info to further track the scammer it would be greatly appreciated.

**TheLegendaryJP** · 10-07-2009, 05:45 PM

First house number retrieved and one more relative found, its been disconnected though :(

Still trying, unless they are all gypsys with throw away phones we'll get it eventually.

**south** · 10-07-2009, 05:52 PM

Quote:

Originally Posted by Rockefeller

Anyway, meebooo1@yahoo.com or David Sanchez actually completed a transaction through us and was paid by Paypal to sample4u@gmail.com. Now I doubt a scammer would accept money into a stolen account so that must be the scammers actual Paypal address.

4n.net was actually stolen once before and EscrowDNS helped return the domain name to its owner by intercepting the scammer. Before we found out he was a scammer he gave us his Paypal address which was servers24@gmail.com and went by the name "Ben". When you Google servers24@gmail.com there are several posts from 06-07 where the guy signs it with "Amir". The same scammer was trying to spread rumors around DP that we stole his domain name, he used the screen name "Sun431" over there and he purchased "signature space" from a member over there which now reads "Darmid.com" which has been used in the stolen domain names' whois.

If anyone can use this info to further track the scammer it would be greatly appreciated.

Given that there was a payment made through paypal, this should be relatively easy to follow the trail for law enforcement. The FBI has been cracking down publicly lately: http://latimesblogs.latimes.com/lano...federal-1.html

It should be simple for them to get the credit card or bank account info from paypal, then contact the financial institutions & follow the money from there. Has anyone called the feds yet on this?

10-07-2009, 05:06 PM	#34 (permalink)
Rockefeller Name: Justin Godfrey Last Online: 11-23-2009 03:48 PM iTrader: (361) Join Date: Apr 2005 Posts: 7,447 DNF$: 3,029 Location: Sheboygan, WI Country:	Heres something interesting, this scammer uses the email meebooo1@yahoo.com for a legitimate email address, or at least he's emailed us from that email address in the pass using David Sanchez in the past. I know this is the scammer 100% using the email address, but not sure if he actually "owns" it. Anyway, I ran a reverse search (paid) on the email and it returned this: John Sanchez (248) 212-1555 48589 Wicker Creel Dr Northville, MI 48168 __________________ Domain name newsletter

10-07-2009, 05:10 PM	#35 (permalink)
TheLegendaryJP Last Online: Today 10:52 AM iTrader: (35) Join Date: Jul 2005 Posts: 3,167 DNF$: 6,340 Country:	More info, did a little backround Print Your Report (630) 669-1440 Mobile Z Lukasz Bannockburn, IL 60015 Nextel Comm Inc More info coming on Lukasz Zycki... Print Your Report Lukasz Zycki 221 Poppy Ln Bensenville, IL 60106 Full-screen Lukasz ZyckiMap data ©2009 Google - Terms of Use Offender Details 1 of 5 records << Prev Next >> Full Name: Zycki, Lukasz Gender: Race: Date Of Birth: 01/1983 Height: Weight: Hair Color: Eye Color: State: County: Dupage County Available Offense Details 1 of 2 records << Prev Next >> Description: Unlawful To Operate Motor Vehicle With Tinted Registration Plate Covers Disposition: Degree Of Offense: Statute Violated: Plea: Arrest Date: Disposition Date: File Date: 04/06/2000 Other Details: Case Number: 2000tr049979 Birth Year: 1983 Legal Status: Closed Balance Due Amount: $0.00 Agency: Wood Dale Police Complaint Number: 000000146804 No bankruptcy records found for Lukasz Zycki in the state of IL << Prev Next >> Marcin Zycki 221 Poppy Ln Bensenville, IL 60106 Andriana Zycki 221 Poppy Ln Bensenville, IL 60106 Tomasz F Zycki 221 Poppy Ln Bensenville, IL 60106 3 Total Records << Prev Next >> Dorota M Wolek 221 Poppy Ln Bensenville, IL 60106 Marcin Zycki 221 Poppy Ln Bensenville, IL 60106 Andriana Zycki 221 Poppy Ln Bensenville, IL 60106 Tomasz F Zycki 221 Poppy Ln Bensenville, IL 60106 6 Total Records << Prev Next >> 760 Roosevelt Rd Hanover Park, IL 60133 760 Roosevelt Rd Hanover Park, IL 60103 221 Poppy Ln Bensenville, IL 60106 More offenses... Available Offense Details 1 of 2 records << Prev Next >> Description: Operate Uninsured Motor Vehicle Disposition: Degree Of Offense: Statute Violated: Plea: Arrest Date: Disposition Date: File Date: 01/08/2002 Other Details: Case Number: 2002tr003354 Birth Year: 1983 Legal Status: Closed Balance Due Amount: $0.00 Agency: Wood Dale Police Complaint Number: 000000157145 Available Offense Details 1 of 3 records << Prev Next >> Description: Drivers View Obstructed By Sign, Poster,window Application, Etc Disposition: Degree Of Offense: Statute Violated: Plea: Arrest Date: Disposition Date: File Date: 02/27/2007 Other Details: Case Number: 2007tr026860 Birth Year: 1983 Legal Status: Active Agency: Bensenville Police Depart Next Court Location: Addison Field Next Court Date: 04/09/2007 Complaint Number: 000000096707 Available Offense Details 1 of 1 records << Prev Next >> Description: Speeding Over Statutory Limit 26-30 Disposition: Degree Of Offense: Statute Violated: Plea: Arrest Date: Disposition Date: File Date: 05/23/2008 Other Details: Case Number: 2008tr076552 Birth Year: 1983 Legal Status: Active Balance Due Amount: $95.00 (as Of Date :: 06-05-2008) Agency: Wood Dale Police Next Court Location: Addison Field Assigned Location: Addison Field Next Court Date: 07/22/2008 Complaint Number: 000000201585 Available Offense Details 1 of 1 records << Prev Next >> Description: Speeding Over Statutory Limit 15-20 Disposition: Degree Of Offense: Statute Violated: Plea: Arrest Date: Disposition Date: File Date: 06/15/2009 Other Details: Case Number: 2009tr086057 Birth Year: 1983 Legal Status: Closed Agency: Bensenville Police Depart Complaint Number: 000000109545\| __________________ Gregory.com $99k obo Last edited by TheLegendaryJP; 10-07-2009 at 05:22 PM.. Reason: Automerged Doublepost

10-07-2009, 05:40 PM	#38 (permalink)
Rockefeller Name: Justin Godfrey Last Online: 11-23-2009 03:48 PM iTrader: (361) Join Date: Apr 2005 Posts: 7,447 DNF$: 3,029 Location: Sheboygan, WI Country:	Okay, I'm starting to tie things together here: GD account that stole 4n.net, 29116963, admin email is domainguy25@rocketmail.com, BUT the password reset email on account is meebooo1@yahoo.com which I found after trying several times. Meebooo1@yahoo.com did business with EscrowDNS.com back in November and used the name David Sanchez, the reverse look up shows "John Sanchez" as the email owner. We also received several emails saying "hi" which I passed off as spam right before 4n.net was stolen. They sent the emails to several different @escrowdns.com email addresses, probably trying to find one that would bounce, they setup a godaddy account using escrow@escrowdns.com BUT we have a catch all feature which will deliver all emails to us no matter what, as long as its @escrowdns.com. So we received his emails saying "Hi" and also emails from Godaddy saying the domain name was pushed, I immediatly attempted to login to that account by resetting the password at Godaddy to "steal" the domain name back, but they were too quick. Anyway, meebooo1@yahoo.com or David Sanchez actually completed a transaction through us and was paid by Paypal to sample4u@gmail.com. Now I doubt a scammer would accept money into a stolen account so that must be the scammers actual Paypal address. 4n.net was actually stolen once before and EscrowDNS helped return the domain name to its owner by intercepting the scammer. Before we found out he was a scammer he gave us his Paypal address which was servers24@gmail.com and went by the name "Ben". When you Google servers24@gmail.com there are several posts from 06-07 where the guy signs it with "Amir". The same scammer was trying to spread rumors around DP that we stole his domain name, he used the screen name "Sun431" over there and he purchased "signature space" from a member over there which now reads "Darmid.com" which has been used in the stolen domain names' whois. If anyone can use this info to further track the scammer it would be greatly appreciated. __________________ Domain name newsletter

10-07-2009, 05:45 PM	#39 (permalink)
TheLegendaryJP Last Online: Today 10:52 AM iTrader: (35) Join Date: Jul 2005 Posts: 3,167 DNF$: 6,340 Country:	First house number retrieved and one more relative found, its been disconnected though :( Still trying, unless they are all gypsys with throw away phones we'll get it eventually. __________________ Gregory.com $99k obo

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

10-07-2009, 12:09 AM	#21 (permalink)
ydnaemsti Platinum Lifetime Member Last Online: Today 10:52 AM iTrader: (-1) Join Date: Jul 2009 Posts: 157 DNF$: 10	I actually do not blame the people that stole those domains. The problem lies with the registrars. It's 2009 and they did not figure out how to protect internet property. I would sue them. It's the easiest thing ever to actually secure domains.

10-07-2009, 12:13 AM	#22 (permalink)
Poker Domains Biatch! Last Online: Today 01:27 AM iTrader: (13) Join Date: Oct 2002 Posts: 3,152 DNF$: 12,259 Location: Nirvana Country:	that sucks... If anyone is using a yahoo, msn or gmail account for your admin contacts stop it already...you own domain names ya dork

10-07-2009, 12:24 AM	#25 (permalink)
ydnaemsti Platinum Lifetime Member Last Online: Today 10:52 AM iTrader: (-1) Join Date: Jul 2009 Posts: 157 DNF$: 10	If I open up a registration company, I will certify that no domain will be stolen not matter what email you use or how stupid you are. There is a way, but I'll keep that for myself for now.

10-07-2009, 12:39 AM	#27 (permalink)
ydnaemsti Platinum Lifetime Member Last Online: Today 10:52 AM iTrader: (-1) Join Date: Jul 2009 Posts: 157 DNF$: 10	There is a way to stop it. Again, it's very easy. Did you ever see a stole house?

10-07-2009, 01:05 AM	#29 (permalink)
ydnaemsti Platinum Lifetime Member Last Online: Today 10:52 AM iTrader: (-1) Join Date: Jul 2009 Posts: 157 DNF$: 10	You're assuming the owner has to do something (read the contract, or push the domain). Under my umbrella the owner is protected from him stupidity and if the umbrella fails, the domain is insured. So to put this in terms of real estate: the seller misread the contract ($0), sold the house for nothing, but regain the money from the insurer who covered him on his mistake. All for a small fee.

10-07-2009, 05:01 PM	#33 (permalink)
ydnaemsti Platinum Lifetime Member Last Online: Today 10:52 AM iTrader: (-1) Join Date: Jul 2009 Posts: 157 DNF$: 10	That is the same person: Lukasz Zycki.

10-07-2009, 05:25 PM	#36 (permalink)
ydnaemsti Platinum Lifetime Member Last Online: Today 10:52 AM iTrader: (-1) Join Date: Jul 2009 Posts: 157 DNF$: 10	Take the IPs he sent the email from and do 2 things: 1. Find the locations of those IP addresses within US 2. Tell admins to run scans on NP and DNForum to find the those IPs in here.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)