Urgent Help 2 Accounts Hacked - DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

**SigRent.com** · 10-22-2005, 05:23 PM

Hello,

I just awoke this morning to receive 5 e-mails saying that my domains have been pushed to an account dominero on enom.
I then checked my domainsite account and it seems the same person had hacked into that and stolen 118 of my domains from there.
The domains that had been pushed are worth in excess of over $11,000 not really sure what i should do how can i get them back someone must of hacked into my account.
If you need more details one of the domains was 5L.org.
Your help is muchly appreciated this is the first time something like this has happened and its not really a great feeling.

Here are some details about the offender:

Dominero Association
Stu Turbain
15654 Calle 65
lima, peru 167
PE
Phone: 1082883743
Phone Code: 51 Peru
Fax:
Email Address: studominero@yahoo.com

Thanks

Morgan

Mr. Deleted · 10-22-2005, 05:36 PM

man these are alway on a weekend. But as soon as you can, contact enom to get them back. They should disable pushes on weekends

Mr. Deleted · 10-22-2005, 05:41 PM

http://www.ic3.gov/ https://tips.fbi.gov/

**SigRent.com** · 10-22-2005, 05:43 PM

Okay i will try and get them back through the registrar if not i will contact the police and let them file a claim on the domains.
Just want to get them back.

Just added some info about the person.

**jojoyohan** · 10-22-2005, 05:55 PM

You should also make sure to change your passwords.

**SigRent.com** · 10-22-2005, 06:27 PM

Yes will do so in the future right now though im really just wanting to get my domains back.
ASAP

**jdk** · 10-22-2005, 07:48 PM

I'd change your password right now so he doesn't take anymore or take them again if you get them back.

**SigRent.com** · 10-22-2005, 07:54 PM

With my DomainSite account he has gone into it changed the password and contact details so that isnt able to be done.
Will do it with enom though.

**jdk** · 10-22-2005, 08:00 PM

If there is anything I can do to help let me know.

**SigRent.com** · 10-22-2005, 08:30 PM

Okay thank you

britishbulldog · 10-22-2005, 08:35 PM

How does this happen ? im getting worried,i thought that the registrars were unhackable ?

**Jonathan** · 10-22-2005, 08:53 PM

They got his password somehow. I'm sure they didn't hack two registrars and target him specifically.

**SigRent.com** · 10-22-2005, 08:55 PM

Yes i feel that they had gotten my password and gotten into both accounts.

I didnt think anything could get worse but over night the guy managed to get into my Godaddy account and steal the 40 or so domains from there.
Havent received a reply from any of the registrars yet.

**Dave Zan** · 10-23-2005, 08:47 PM

Quote:

Originally Posted by britishbulldog

How does this happen ? im getting worried,i thought that the registrars were unhackable ?

Ideally, they are. In reality, a determined hijacker will at least try to find the
weakest spot and exploit it.

Unfortunately, such a thing happened in this case.

SigRent, is it possible the contact email address or how the domain accounts
were accessed before were compromised? Really wonder how the hacker got
your password.

I'd hate to also think a social engineering attack occurred. (knock on wood...)

Meanwhile, Sig, make as much noise as you can with the other registrars who
have your domain names. At the very least, they'll lock them up and prevent
further things from being done to them pending resolution.

**seeker** · 10-24-2005, 06:52 AM

contact and call all registrars.
since you found out about this right away, you will probably get all your names back relatively fast.

However, make sure you have somewhere a list fo all domains, in case he pushes the names into different sub/sub/sub/accounts.

**SigRent.com** · 10-24-2005, 07:50 PM

Okay just got my domains back from Enom, and i contacted domainsite they have them on a registry hold hopefully ill get them back in the next few days.
This is what godaddy has written though they have been the most unhelpful of the lot so far.

Thank you for your email. Per the UDRP, registrars are prohibited from making changes to a domain name without direction from a court or arbitration forum. If you are unable to come to a satisfactory agreement with the current registrant, you may wish to go through a court or arbitration forum (such as WIPO, The World Intellectual Property Organization, domain.disputes@wipo.int).

When we receive notice of a pending legal dispute we will lock the domain name so that it cannot be transferred or otherwise modified.

Likewise, when we receive a decision, we will update the domain name accordingly.

Please let us know if we can help you in any other way.

**seeker** · 10-25-2005, 01:50 AM

that is why Godaddy is such a disaster. They are an immature company that is not geared towards people who have more than 1 domain.

**mole** · 10-25-2005, 10:29 AM

Quote:

Originally Posted by SigRent.com

Okay just got my domains back from Enom

Yes, you can always depend on eNom when you need help most. You can forget about the Daddy, bad rep when it comes to helping resolve theft.

**SigRent.com** · 11-01-2005, 04:21 PM

Okay it has been over a week since i have given an update, things arent looking as good the hacker has replied to domainsite saying he purchased them via cheque from myself, which of course isnt true.
They wrote me an e-mail saying that if he can provide proof they will push the domains back to him, this could be easy as he can just purchase a check and forge my signiture.
It would be greatly appreciated if some people could write to scott[at]domainsite.com and let him know i am the respectful owner and that i did not sell them to this guy.

Thanks

**Dave Zan** · 11-01-2005, 06:36 PM

Contact user "Owen". It might help if you can secure whois.sc copies of the
domains' past WHOIS details.