PDA

View Full Version : Mark Anderson / Domain Thief


AcidMaX
06-10-2004, 04:01 PM
Anyone know this guy? Somehow this asshole within minutes took my domain gaypervs.com from Go Daddy (yes I know I will be transferring the rest of my domains over the next few days).

Anyhow here is the information on this turd on the new whois.
anderson, mark
mrjervay16@yahoo.com
2129 rhine st apt 3b
pittsburgh, Pennsylvania 15212
United States
3127764438

I called Go Daddy who said I needed a court order to stop this guy, so I called my attorney. Funny thing is I am driving to PA on Friday night just outside Pittsburgh so this guy might get a visit from me.

If you have any info please let me know I will be calling a family relative who works for an attorney in PA as well to see about criminal prosecution of this guy.

Anyone with information please email me at andy@stressmedia.com and let me know. Also if you are submitting to Gay Pervs you might as well stop as it looks like the site is already gone and not much is going to happen for a while to get it back.

Greenie
06-10-2004, 04:23 PM
Yet another reason to NOT use GoDaddy |banghead|

AcidMaX
06-10-2004, 04:31 PM
I am transferring all my domains right now.

Bill
06-10-2004, 04:31 PM
That's a shame Andy. I was wondering what had been happening with your site.

It's probably fake whois info, domain theives rarely use real info, just info that looks real.

go-fucking-daddy, the registrar that warms the hearts of theives the world over...

DangerDave
06-10-2004, 06:05 PM
Why is this GoDaddy's fault?

Lets get the whole story?

Andy HOW did this guy get your domain?
It doesnt just happen by accident?

DD

Ramster
06-10-2004, 06:23 PM
That's what I don't understand. Everyone seems to jump on GoDaddy but when I bought a domain recently the email that is registered with GoDaddy gets an email to confirm the desire to allow the transfer of the domain. If you didn't change your own email within GoDaddy how can the transfer go through?

Seriously, I want to know.

AcidMaX
06-10-2004, 06:23 PM
DD I have no idea how the hell he got the domain. I was sitting here and I happened to look at my email when I seen a request come in to UNLOCK my domain.

I quickly logged into godaddy to see what the fuck was going on. When I logged in I saw a message showing "Changing Accounts In Progress".

So I jumped on the phone to Godaddy support. The first women I spoke to said there was nothing they could do. I asked for a supervisor and when I spoke to "Bobby" who is a supervisor he said the only way I could stop this guy is with a court order and that the whois information had already updated on whois.godaddy.com. I got the information from there and I called my attorney. He said it would be a federal matter because it was across state lines and that the best thing for me to do would be to contact the Prosecutor in Pittsburgh, PA.

I have an aunt that works for an attorney and I just happen to be on the way to PA this weekend so I will run by the address listed (which does exist in PA, wether its really his address I dont know).

Basically Dave, I have no idea who this guy is and no one, not even my wife had ever accessed my godaddy acct. So either he brute forced my acct password or got it from within godaddy or someone withing godaddy fucked up. Those are the only options. I quickly changed my acct passwords and even spent the money to transfer my domains to another registrar. Obviously I am not the only one this has happened to.

So to answer your question DD.

1. It IS GoDaddys fault because they transferred a domain to another acct without my authorization at all.

2. I am not sure how he got the domain but it was one of the 3 ways I mentioned above, all my domains were LOCKED in my acct as they always are.

I think the only thing that saved me is that I had my domains scattered across 3 GoDaddy accts and that was the only good one in that bunch or I would have really been fucked.

If you are looking for further proof let me know I have screenshots from my acct and screen shot of it saying the words I stated above, invoices for the domain purchase (the original one), a printout of the whois info, people I spoke to within GoDaddy etc. IMHO this is clearly GoDaddys fault, they did NO authorization before transferring the domain to another acct.

AcidMaX
06-10-2004, 06:26 PM
Originally posted by Ramster
That's what I don't understand. Everyone seems to jump on GoDaddy but when I bought a domain recently the email that is registered with GoDaddy gets an email to confirm the desire to allow the transfer of the domain. If you didn't change your own email within GoDaddy how can the transfer go through?

Seriously, I want to know.

Ramster, thats the thing, the only thing I can think of is he got into my acct and transferred. My email in my go daddy acct was not changed, yet when this happened all I saw was an "Unlock notice"


Dear Valued Go Daddy Customer,

This notification is generated automatically as a service to you.
. . . . . . . . . . . . . . . . . . . . . . .

We have received a request that the status be changed to:

Unlocked

for the following name(s):

GAYPERVS.COM


I never touched that domain and quickly went in to look at the domain when I saw it was being transferred. I never got 1 email to confirm this move at all.

Bill
06-10-2004, 06:29 PM
Well. I was just joking Dave; admittedly a callous joke. But, when one hears about domain theft, godaddy is the registrar more often than not.

I've never heard of a domain theft from my registrar.

I would be interested in hearing more also. I assumed Acidmax was careless with his password or his password choice. Thats usually what it boils down to.

Doesn't godaddy have a locking function that requires an email confirmation? Most good registrars do. I have a few names there and I believe I have them locked.

AcidMaX
06-10-2004, 06:31 PM
Originally posted by Bill
Well. I was just joking Dave; admittedly a callous joke. But, when one hears about domain theft, godaddy is the registrar more often than not.

I've never heard of a domain theft from my registrar.

I would be interested in hearing more also. I assumed Acidmax was careless with his password or his password choice. Thats usually what it boils down to.

Doesn't godaddy have a locking function that requires an email confirmation? Most good registrars do. I have a few names there and I believe I have them locked.

Granted my password was not super hard, but it was not super easy either. And my username was not something I ever used anywhere else.

Not to mention Go Daddy didnt confirm the change via email or anything or with a secret transfer password. Nothing, just let it go.

MrMaryLou
06-10-2004, 06:43 PM
Looks like this is the same guy :(

http://www.greenguyandjim.com/board/showthread.php?s=&threadid=7933

Bill
06-10-2004, 06:54 PM
Acidmax, can you think over your activities for the past few weeks and look for ways in which you might have been phished or keylogged?

Have you responded to any emails that from godaddy, for instance?

It would be interesting to see how godaddys login responds to brute force attacks. Do they force a 24 hour wait after 3 false entries, or do they just passively accept hundreds or thousands of login attempts? Anybody know?

I have heard it speculated that godaddys internal security has allowed hackers to steal id/passes in bulk. No evidence, just speculation, based on the frequency of thefts from godaddy.

Keylogging spyware also seems like a likely possibility.

AcidMaX
06-10-2004, 06:59 PM
Originally posted by Bill
Acidmax, can you think over your activities for the past few weeks and look for ways in which you might have been phished or keylogged?

Have you responded to any emails that from godaddy, for instance?

It would be interesting to see how godaddys login responds to brute force attacks. Do they force a 24 hour wait after 3 false entries, or do they just passively accept hundreds or thousands of login attempts? Anybody know?

I have heard it speculated that godaddys internal security has allowed hackers to steal id/passes in bulk. No evidence, just speculation, based on the frequency of thefts from godaddy.

Bill I have not even logged into godaddy for a few mos so I am not sure how he got in. Although according to some ICQ conversations this "Mark Anderson" has been used before for other domain hijackings and such as well so I am doing what I can to track the guy down. I use firewalls etc and up until a couple weeks ago I was even on dialup and satellite which there is no way the guy could have gotten into because the ip changed on my end every time I logged on just about.

Greenie
06-10-2004, 07:28 PM
Maybe it's no GoDaddy, but you have to admit, 90% of a the time that someone posts that their domain was stolen, it's registered at GoDaddy.

Plus, for them to say they need a court order from the original owner to stop the transfer when I doubt very heavily that they got a court order to transfer the domain IMHO stinks.

DavidM
06-10-2004, 08:08 PM
It does seem as if a lot of these are occuring at GoDaddy... which is curious...

But it is sad. Again there are many ways your password, even if it was soemthing like "Ary7UxC8" could be obtained. One thing to really watch out for is using the same password that you use in other places (like partner accoutns, toplists, etc). Many people do this. But you can't trust everyone these days. Others: keyloggers, trojans, sniffing, server side security, fake emails directing you to a fake site set up to take your password, etc.

I personally won't use them (Go Daddy) though because of what they supposedly said to you: "get a court order or we can do nothing". Was that really all they basically said? Not even an investigation was promised?

Sorry to hear of your problems. :( Good luck.

Surfn
06-10-2004, 08:15 PM
I predict that this is not the last time we hear something like this about GoDaddy |sad|

grandmascrotum
06-10-2004, 08:56 PM
Well, shit.

I've seen the other threads, but I was placing my trust in the locking system. But if the support won't react to an owner saying to stop the transfer... that's not good.

Meanwhile, TotalNIC won't let me transfer my domain at all "to prevent fraud".

So... what other domain registrars offer $8 domains? And are trustworthy?

Torn Rose
06-10-2004, 09:39 PM
Originally posted by grandmascrotum
So... what other domain registrars offer $8 domains? And are trustworthy?

You get what you pay for.

$0.02

grandmascrotum
06-10-2004, 09:50 PM
Here is the relevant bit from Godaddy's Uniform Domain Dispute Resolution Policy (as approved by ICANN)
https://www.godaddy.com/gdshop/legal_agreements/show_doc.asp?isc=&se=%2B&from_app=&mscssid=&pl_id=1&prog_id=GoDaddy&pageid=UNIFORM%5FDOMAIN

If it's a standard ICANN thing, then perhaps the same thing will happen at every registrar.

5. All other disputes and litigation

All other disputes between you and any party other than us regarding your domain name registration that are not brought pursuant to the mandatory administrative proceeding provisions of Paragraph 4 shall be resolved between you and such other party through any court, arbitration or other proceeding that may be available.

6. our involvement in disputes

We will not participate in any way in any dispute between you and any party other than us regarding the registration and use of your domain name. You shall not name us as a party or otherwise include us in any such proceeding. In the event that we are named as a party in any such proceeding, we reserve the right to raise any and all defenses deemed appropriate, and to take any other action necessary to defend ourselves.

i.e. they wash their hands of it.

Ideally this should not prevent them from taking action against a thief WHILE THE THEFT IS TAKING PLACE...?

I'm going to write to Godaddy and ask what their procedures are...

I'm also wondering if this page helps people to hack into passwords...
https://www.godaddy.com/gdshop/faq/faq.asp?isc=&se=%2B&from%5Fapp=&prog%5Fid=GoDaddy&topic%5Fid=54&topic%5Fid=54&faq%5Fid=145&topic=Resetting+Your+Password&rhl=hp%5Fts%5Fpassword

Cleo
06-10-2004, 09:54 PM
I used GoDaddy to register some domains names that had no value where I just wanted cheap. I hated their admin with all the advertisements and non of the time saving features that I'm use to. Guess I'm spoiled by DirectNic's admin.

I would never use GoDaddy for domain names that I care about after all the horror stories that I've heard.

AcidMaX
06-10-2004, 10:25 PM
Yes they really said get a court order. I called within minutes of it being transferred from my account. I gave the women my domain and she said "Is your name mark anderson?" I said no and gave her my account number. She then said there was nothing she could do once it was in the other persons account (which is also with godaddy). You would think that they could see my acct and it just moved, or maybe confirm ips? I mean this happened and they didn't lift a finger. The supervisor "Bobby" even said, you need a court order. When I asked for the guys information he said "Wait for the whois information..." (like that is always accurate.)

I want any information on this guy I can get. And as i was sitting here thinking about people acting like its my fault for a possible lax password, thats bullshit. Theft is theft. This guy should burn and so should Go Daddy for fucking their paying customers out of their domains. The people getting fucked just get kicked while they are down.

Andy

AcidMaX
06-10-2004, 10:49 PM
Is fetishcrawler.com still taken by this guy? I have some more inside information on this dude and I am looking for affiliate programs to check out some of the sites this guy has hijacked and to provide me with details if they can (All done anonymously of course.) I already have a few other aliases this guy uses as well as email addresses. I am working on getting details about this guys accounts he pays with. If those of us who have gotten screwed by this guy work together I think we can get him.

If fetishcrawler.com is owned by this guy and the design there is his, then I think he reads this board and knows us. Just look around his sites and you can see some unique things. Just observations, but this dude pissed me off. Now its all about principle. Dude is gonna pay the piper, and I hope there are some honest affiliate programs out there who are willing to lend a hand. If we can hit him in the pocket, he might come out of the woordwork, cause if he is scamming webmasters no doubt he is scamming programs too.

Bill
06-11-2004, 01:02 AM
Andy, if it seems that we were holding you at fault, I can see how you might feel that way, but nobodies faulting you, it's more like we are wondering out loud what we can do to protect ourselves from the crime that happened to you.

You have my apologies if I sounded as if I blamed you, that wasn't my intention. I was trying to be fair, and not overly blame godaddy. (altho my personal opinion about godaddy is not good)

I think it's an excellent idea to try to get this guy. I'm sure a lot of people feel the same way.

doublep
06-11-2004, 05:38 AM
Originally posted by Bill
I assumed Acidmax was careless with his password or his password choice. Thats usually what it boils down to.


99 times out of 100 this is case.

When you are choosing passwords make sure they are at least 8 characters long - with #s and symbols like $ ! & (if supported) plus letters in upper and lower case

Don't make it easy to guess - don't make it a variation of a password already in use - don't make it related to your name, your business, date of birth, pets name, hobby, address... etc... Use a password generator!! Change your passwords a couple times per year

If you write your passwords down store them in a secure location (a locked safe for example) away from the computer.. if you store them on your computer use an encryption utility..


Hope you get your domain back Acidmax - best of luck to you :-)

grandmascrotum
06-11-2004, 07:09 AM
I sent an email to Godaddy today asking for reassurance in the matter of domain theft.

Here is their reply:

Response from IAN H.
06/10/2004 10:11 PM

I will answer your questions in the order you posed them:

1. What are Godaddy's procedures for dealing with a complaint of fraudulent domain transfer or domain theft while it is happening? For example, if I found that an unauthorized person had unlocked my domain with the intent to change the registrant details, and I immediately rang and requested Godaddy to stop or reverse the changes, what procedures would be followed?

In this case a Go Daddy representative would assist you as the customer with logging into your account, making the neccesary changes to the domain and changing the password.

2. What documentation does Godaddy accept as proof of domain ownership e.g. invoices?

The registrant listed in the Who Is database must match one of the following:

Goverment issued photo identification

or if a company is listed under Registrant:

A copy of business license
Tax certificate (number alone is not acceptable)
"Doing Business As” documentation
Fictitious Name documentation
Articles of Incorporation

3. What action is Godaddy taking to ensure that their site remains secure from hackers and password thieves?

Go Daddy servers are monitored on a twenty four hour basis. We consistently update our site and software with the latest technology in an effort to thwart any attacks of that nature. Also Go Daddy maintains a SSL certificate, based on virtually unbreakable 128-bit encryption, we also are the Certificate Authority for the SSL certificate.

4. Will Godaddy implement a 24 hour waiting period between the unlocking of a domain and any further action on that domain name?

At this point I am not aware of any plans to implement this waiting period. However I will present it to our developers for consideration.

5. Will Godaddy consider allowing users to add a secondary, hidden email address, to circumvent thieves from changing the primary email and therefore preventing warnings from getting through?

I am not aware of plans to implement this. However I will present it to our developers for consideration.

Please let us know if we can help you in any other way.

Protect Your Privacy!

Sincerely,
Ian H.

GoDaddy.com
Customer Service Supervisor

General Support: 480-505-8877
Billing: 480-505-8855

---------

The first answer is what SHOULD have happened with AcidMax. The fact that it didn't happen means this answer doesn't reassure me much.

Perhaps those of us who still have Godaddy domains should also send emails expressing concerns about security. It may well make a difference.

AcidMaX
06-11-2004, 08:02 AM
The sad part is they did nothing to help, even with all of my documentation. Receipts, calling while happening etc. I would have gladly sent the articles of incorporation for my company, receipt, screenshots etc to get my domain back and they wouldnt do it.

The fact of the matter is they just dont care, they get their money either way and this guy is going to keep doing it as he things he is invincible.

Fonz
06-11-2004, 08:06 AM
yupz, that kind of support sucks big time. Don't they find it odd that it's always the same guy people complain about?
I transferred my most important domains to another registrar this week.

Ramster
06-11-2004, 08:07 AM
What's another good domain registrar?

Fonz
06-11-2004, 08:09 AM
Originally posted by Ramster
What's another good domain registrar? Registerfly.com ?

AcidMaX
06-11-2004, 09:51 AM
Right about now I am not sure who is a good registrar. All I know is that I changed all my passwords, changed registrars etc.

I have also been continuing to track this guy down and get more information on him.

Will let you know when I have more info but I think we are finally getting into where this guy lives, needless to say all the information on all the domains is bogus, but I think I am getting closer :)

Let me also just say that I beieve this guy to be the same person that stole domains from others on this board. Maybe he frequents this board? I believe he does.

Andy

Surfn
06-11-2004, 09:55 AM
Originally posted by Ramster
What's another good domain registrar?

http://www.domaindiscover.com/

Evil Chris
06-11-2004, 10:06 AM
Maybe he had a snapback on the domain.

AcidMaX
06-11-2004, 10:14 AM
Originally posted by Evil Chris
Maybe he had a snapback on the domain.

My domain wasnt expired or anything, so there is no way he could have gotten it without flat out stealing it and transferring it away to his internal godaddy acct.

spookyx
06-11-2004, 10:16 AM
Originally posted by Ramster
What's another good domain registrar?


I noticed a few replies but i would like to add to ramsters question. Whats a good
domain registrar that has a proven track record on matters like this.

|waves|

spacemanspiff
06-11-2004, 10:48 AM
It seems to me that the only way for someone to do this is to be able to log into your Hodaddy account, and to be able to recieve and respond to your email to authorize changes.

That's kind of a tough combination, and the only way I can think of to get access to all the passwords would be to get access to your pc.

Does this make sense, or am I missing something.

I'm not trying to be critical of ya Max. Just trying to get a handle on this thing. I think a "multiple email authorization" setup as mentioned earlier would work, or multiple passwords maybe.

AcidMaX
06-11-2004, 10:55 AM
I dont keep the information stored on my pc at all and I find it hard to believe he got access to my computer through dual firewalls, but if he did he is a genius.

I think he somehow got a list of godaddy accts or somehow was able to hack my godaddy acct that is all I can think of but im still stumped as to how he got my username for my godaddy acct its not something i use, so how he got the information is beyond me.

You and anyone else can be as critical as you wish, however the simple fact of the matter is that the domain was STOLEN from me and godaddy let it happen regardless of what proof I had.

As I stated before, I believe this guy is a visitor of this board, I am collecting information on him as I type this and will to continue to do so. It may take me some time to get this guy but I will get him and expose him.

It is not entirely godaddys fault, but they could have better security measures in place. To keep this from happening, like maybe a hidden email or secret password to transfer a domain.

My problem is with this guy Mark, Fred, Sergiy or whatever your real name is. I will find you and I do believe you read this message board.

AcidMaX
06-11-2004, 10:57 AM
Originally posted by spacemanspiff
It seems to me that the only way for someone to do this is to be able to log into your Hodaddy account, and to be able to recieve and respond to your email to authorize changes.

That's kind of a tough combination, and the only way I can think of to get access to all the passwords would be to get access to your pc.

Does this make sense, or am I missing something.

I'm not trying to be critical of ya Max. Just trying to get a handle on this thing. I think a "multiple email authorization" setup as mentioned earlier would work, or multiple passwords maybe.

I think what you guys are missing is that this was an internal godaddy transfer. He didnt transfer to another registrar which would spawn an email. If he did change my email in the admin he was polite enough to change it back. So I believe that when transferring from godaddy to godaddy there is no email sent because you are in the admin which they assume is authorization.

spacemanspiff
06-11-2004, 11:26 AM
So if you transfer a domain from one godaddy account to another, there's no authorization email sent? That's bullshit.

You should be sent an email requesting authorization for any and all account changes. An email requesting a secret password, a secret handshake, a secret decoder ring, whatever it takes to make domains harder to steal.

Sounds like it would be just as effective to stand in your back yard and shout "I hereby lock my domains" as checking that box is.

Hell, why not have on option to make domains non-transferable, no matter what anyone does, including the owner.

AcidMaX
06-11-2004, 11:31 AM
Originally posted by spacemanspiff
So if you transfer a domain from one godaddy account to another, there's no authorization email sent? That's bullshit.

You should be sent an email requesting authorization for any and all account changes. An email requesting a secret password, a secret handshake, a secret decoder ring, whatever it takes to make domains harder to steal.

Sounds like it would be just as effective to stand in your back yard and shout "I hereby lock my domains" as checking that box is.

Hell, why not have on option to make domains non-transferable, no matter what anyone does, including the owner.

Like I said he could have changed my email address for the transfer then changed it back, but who knows. GoDaddy wont tell me shit. There is even a place for listing acct changes and it doesnt showthe domain being sent. It should say something like "Domain transferred to acct...." but it has nothing.

eman
06-11-2004, 12:23 PM
What if this person worked/works at Godaddy?

Of course he'd need to be operating under an alias ....



(edited to clarify muddled thinking in my spontaneously typed hypothesis - I'd be a great detective)

doublep
06-11-2004, 12:51 PM
Originally posted by eman
What if this person worked/works at Godaddy?

Of course he'd need to be operating under an alias ....

(edited to clarify muddled thinking in my spontaneously typed hypothesis - I'd be a great detective)

... or a great conspiracy theorist :D

Did you get my mail I sent this week eman? :)

eman
06-11-2004, 01:06 PM
Originally posted by doublep


Did you get my mail I sent this week eman? :)


No mate - must have missed it amongst the 600+ messages I'm getting daily |angry|

Send me a PM |waves|

Opti
06-12-2004, 02:21 AM
Originally posted by spookyx
I noticed a few replies but i would like to add to ramsters question. Whats a good
domain registrar that has a proven track record on matters like this.

|waves|

Surfn's domaindiscover.com suggestion isn't suitable as I would like to be able to make one off domain purchases without an initial $50 outlay each time (they want 2yr @ $25 for single new domain buys)

People keep mentioning directnic... has anyone had a problem there and found them helpful in resolving it?

Pusher
06-12-2004, 03:02 AM
This is making me very nervous |couch|

I'm considering transferring all my domains to Network Solutions...does anyone have opinions on them?

Thanks!

Opti
06-12-2004, 03:09 AM
Originally posted by Pusher
This is making me very nervous |couch|

I'm considering transferring all my domains to Network Solutions...does anyone have opinions on them?

Thanks!

see this thread
http://www.greenguyandjim.com/board/showthread.php?s=&threadid=8286

BlueQuartz
06-12-2004, 05:49 AM
Originally posted by Surfn
http://www.domaindiscover.com/

25$ a year and a two year minimum??? :(


www.domainnamesystems.com - is a GREAT registar I have been using them for over 5 years and I don't think I have ever seen ANYTHING bad posted about them.


Good luck AcidMax
I Really hope you get your domains back.

Evil Chris
06-12-2004, 08:40 AM
Originally posted by AcidMaX
My domain wasnt expired or anything, so there is no way he could have gotten it without flat out stealing it and transferring it away to his internal godaddy acct. That sucks. I hope you can get this straightened out Andy.

Pusher
06-12-2004, 10:03 AM
Thanks for the info, Opti

Originally posted by Opti
see this thread
http://www.greenguyandjim.com/board/showthread.php?s=&threadid=8286

Jim
06-12-2004, 11:38 AM
I am telling you guys...the best registrar I have found is directnic. As Cleo has said, their admin is the best you can find and I have never had a problem of anykind with them.

Surfn
06-12-2004, 01:10 PM
Originally posted by BlueQuartz
25$ a year and a two year minimum??? :( You get what you pay for.

CrazySy
06-12-2004, 02:22 PM
Originally posted by Opti
People keep mentioning directnic... has anyone had a problem there and found them helpful in resolving it? Been using them for long time but never had a single issue.

DangerDave
06-12-2004, 04:20 PM
Been using them for long time but never had a single issue.

I could say the same about GoDaddy

DD

ecchi
06-12-2004, 06:43 PM
I use http://www.registerfly.com never had any problems, but if you use them at peek times their site sometimes loads slowly.

JanTM
06-13-2004, 07:00 PM
I'm with DirectNic also - no problemos.... EVER!

I had a few with Registerfly once but I got fed up with their admin section. They still spam me every once in a while about domains about to expire - although I have long since tranfered them away.
I guess I don't have anything serious against them... I just don't like them.

RockDaddy
06-14-2004, 02:19 PM
I only read the first page of this thread so don't know if this has already been mentioned, but track him down through his sponsors. His checks go to a real address somewhere.

I had someone rip off my bank card a few years ago for a couple of thousand bucks, one of his purchases was a domain and hosting which I used to start contacting sponsors. Had him pinpointed in less than a day.

Bill
06-14-2004, 05:51 PM
How's the hunt for that mofo going, Andy?

Keep us informed, and let us know if you need help.

AcidMaX
06-16-2004, 12:59 PM
Well I was gone for 5 days visiting a sick grandfather, but the hunt continues. I have had a couple people email me with information they have on this guy. He is stealing from other webmasters so I am not the only one. So far I think I have tracked him down to stealing domains from approx. 5 webmasters. I will definitely keep everyone posted. I am sure it will be a slow process but I will get this guy.

Andy

Pazz
08-08-2004, 07:01 AM
Another victim of the hijackers :(

Some fucker(s) have "borrowed" a few domains ie replaced my whois info with their more than likely fake info. I only noticed when I did a whois on myself just for fun... it wasn't fun what I saw

AcidMaX: Are these names on you list?
John Franklin
55 Lakeview Drive
Nederland
Colorado 80466
United States
john4y2002@yahoo.com

Mike Hampton
229 FrenchRoad Ave
Queens
New York 10019
United States
koking99@yahoo.com

To make matters worse one is up for renewal in three days.

I don't want any more registar bashing just info on how I might get my property back.

AcidMaX
08-08-2004, 09:47 AM
Originally posted by Pazz
Another victim of the hijackers :(

Some fucker(s) have "borrowed" a few domains ie replaced my whois info with their more than likely fake info. I only noticed when I did a whois on myself just for fun... it wasn't fun what I saw

AcidMaX: Are these names on you list?
John Franklin
55 Lakeview Drive
Nederland
Colorado 80466
United States
john4y2002@yahoo.com

Mike Hampton
229 FrenchRoad Ave
Queens
New York 10019
United States
koking99@yahoo.com

To make matters worse one is up for renewal in three days.

I don't want any more registar bashing just info on how I might get my property back.

Those names specificaly are not but the koking99@yahoo.com is definitely the same guy. That is one of the emails he has used in the past. The investigation is still going on. According to another individual they are close to nabbing this guy, he lives up in Canada.

Linkster
08-08-2004, 01:23 PM
AcidMax - dont know if this will help but he is a registered member over at dnforum.com

http://www.dnforum.com/member.php?u=7613

I dont see any posts from him but you might be able to run things down through the admins

likewise the koking99 name is being used on securibox.net as a registered user in their board

also this might help out a little :)
http://geocities.com/john4y2002/night_vision2.html
although Im thinking it might not pan out - might just be a spoofed mail addie?

chilihost
08-08-2004, 07:27 PM
I use http://www.cheapestregistry.com - they are an enom reseller and the guy that runs it, Eric, is good value! I have had to call on him in the past and he always provided top notch service.

cheers,
Luke

tat2jr
08-09-2004, 07:11 AM
I'm glad I read this thread. I had a couple domains regged with GODaddy, and then started doing searches on other boards, and found LOTS of webmasters who've had GOdaddy domains snatched. Needless to say I switched my domains to a different registar.

Good luck tracking this guy down.

AcidMaX
08-09-2004, 07:43 AM
Originally posted by Linkster
AcidMax - dont know if this will help but he is a registered member over at dnforum.com

http://www.dnforum.com/member.php?u=7613

I dont see any posts from him but you might be able to run things down through the admins

likewise the koking99 name is being used on securibox.net as a registered user in their board

also this might help out a little :)
http://geocities.com/john4y2002/night_vision2.html
although Im thinking it might not pan out - might just be a spoofed mail addie?

Thanks Linkster, I will check that out. The word from another guy who got scammed who is looking into this guy is they know everything about this guy already, I think they had a private investigator on him. I'm not sure where the case is at but they have the data. I know the guy has spent thousands to get this piece of shit and i think he will. I have talked to the other webmasters attorney and provided information I tracked down and they used that plus their own information. We will see but I will forward that URL on as well.

Although I havnt checked the links, the 2nd one I dont believe is that guy. This thief steals peoples identities, emails etc and uses them. Most of the addresses and emails he uses are not his own. It's all a front, he even launders the money through multiple business fronts with different names so its harder to track down.

Andy

Cleo
08-09-2004, 07:53 AM
In times where six people are beat to death over a Xbox (http://www.sun-sentinel.com/news/local/southflorida/sfl-akillings09aug09,0,4707497.story?coll=sfla-home-headlines) I can't believe that people would steal domains. Not like you can keep where you live secret from everyone, at least if you want to receive money from your sponsors.

ClubPussy.com
08-09-2004, 01:03 PM
AcidMaX is getting close to him.......

ecchi
08-09-2004, 01:27 PM
RE : "Not like you can keep where you live secret from everyone, at least if you want to receive money from your sponsors"

Oh it is possible, but it takes a hell of a lot of work. Even if I was dishonest enough to do it I could make more money for the same amount of work in honest businesses, so would not bother.

Used to be I thought that people who did this sort of thing were people who were too stupid to make a living honestly, but then I realized that you needed to be more clever to be a successful crook than a successful honest man, so this theory did not hold water.

A short while ago there was a program on (non-internet) crooks and conmen, and the interviews led you to believe that although the money was nice, the main reason they did this was the thrill of "getting one over on other people". I guess that is the same thing with A******s like this, a sort of "hacker mentality" overriding his "business sense".

Pazz
08-10-2004, 02:35 AM
Finnally got my "can't help" email with a email link to WIPO Arbitration and Mediation Center - Domain Name Disputes.

Bit of interesting light a read here WIPO (http://arbiter.wipo.int/domains/index.html)

AcidMaX: When you get some info can you pass it on

AcidMaX
08-10-2004, 07:53 AM
Originally posted by ClubPussy.com
AcidMaX is getting close to him.......

It's actually not me, I started an investigation, then I received an email from another webmaster who lives in Canada, we exchanged notes, I spoke with this other webmasters attorney and I provided them with some more information.

The other webmaster is actually paying the cost to get this guy, I am not sure if he posts on here or not, but I know he does read this board (the webmaster chasing the thief). The other webmaster also got his domain back through a dispute agency, and he is still going after this guy, we should know more in a month or two.

My thought is that the thief reads this board too because he seems to have information and is stealing from many webmasters on this board. All I can say is be very careful, move your domains from godaddy (because they could give 2 shits about you as a client) and change your passwords often.


Pazz: I think WIPO is who awarded this webmaster his domain back, I would have to look through my emails.

ecchi is right too , you can keep it secret. This guy supposedly has dummy companies setup that he is filtering money through them to get to him. He has multiples and will just filter all the monies from one to another until it gets to him and he takes all of his checks at a PO box.

Pazz
08-14-2004, 09:25 PM
Ok the one that was expiring expired. The fucker changed the name servers but then for some stupid reason copied my pages(goto be a copyright issue there) and put it on his space with fucked up links so nothing works.

Anyone know anything about cybehost.com?

AcidMaX
08-14-2004, 09:33 PM
Originally posted by Pazz
Ok the one that was expiring expired. The fucker changed the name servers but then for some stupid reason copied my pages(goto be a copyright issue there) and put it on his space with fucked up links so nothing works.

Anyone know anything about cybehost.com?

I don't know about the host but that is this fuckers MO. He likes to steal entire sites and put the sites up. What I did when I saw it happen I put a page up that said "Someone stole this domain". This was before he was able to change the dns. I think I pretty much ruined his traffic at that point and to this day he still has the generic godaddy page on my domain.

-Andy

stuveltje
08-21-2004, 05:07 PM
Yet another reason to NOT use GoDaddy
dont say that, you make me nerveus, i have all my domains with godaddy, after 3 years i still havent any trouble with them , and i dont want trouble in future with my domains....lol and dont say move them then.........i keep believing in them|violin|

eman
08-21-2004, 05:52 PM
Originally posted by stuveltje
dont say that, you make me nerveus, i have all my domains with godaddy, after 3 years i still havent any trouble with them , and i dont want trouble in future with my domains....lol and dont say move them then.........i keep believing in them|violin|

I'm moving my one crucial domain to directnic - Canada's a long way away for me to swing and connect with a baseball bat.

I'm still using Godaddy for everyday domains but I feel that I can no longer risk the major source of my income with them.

eman
08-21-2004, 05:53 PM
Originally posted by DangerDave
I could say the same about GoDaddy

DD

So could I!

stuveltje
08-21-2004, 06:09 PM
I have locked all my domains at godaddy i have autorenew, till this time i am very happy with godaddy and hope to stay that way in the future!

eman
08-21-2004, 06:29 PM
Originally posted by stuveltje
I have locked all my domains at godaddy i have autorenew, till this time i am very happy with godaddy and hope to stay that way in the future!

Somebody please correct me if I'm wrong, but locking your domains within godaddy won't necessarily protect you. The thief seems to operate within the godaddy jurisdiction.

stuveltje
08-21-2004, 06:40 PM
Somebody please correct me if I'm wrong, but locking your domains within godaddy won't necessarily protect you. The thief seems to operate within the godaddy jurisdiction. well sometimes i need to unlock an domain, if i do that i cant use all futures in godaddy and i get an email right away that my domain is unlocked and if not right i need to contact them, but for real i just changed my pass word and put the 4 digit number in my accound for support.........................i am getting more nervouse now|violin|

Surfn
08-21-2004, 06:41 PM
Anyone using GoDaddy good luck, I mean that sincerely, I hope you have no problems with them ever.

I have never used them and from what I have read on this board and others I find them too risky for me to ever use.

Pazz
08-22-2004, 10:10 AM
Originally posted by eman
Somebody please correct me if I'm wrong, but locking your domains within godaddy won't necessarily protect you. The thief seems to operate within the godaddy jurisdiction.
My domains were locked...

Ghost&Lliandrin
08-22-2004, 11:40 AM
We've always used Go Daddy and not had any problems, our domains are locked. If I unlocked them I got an email right away. After reading on this board and others about the troubles people were having with them we decided to leave them and are in the process of doing that now with all of our domains. I don't want to stay with them and wait for the problems.