Godaddy account stolen

chrisxx · 09-06-2007, 04:36 AM

Someone has stolen my godaddy account. Today i checked my email and my password didn't work. I contacted with my provider and someone has changed my password, but provider gave me new one. When i checked email box i found email from godaddy where someone has reset password.Now i can't login to my godaddy account, whois for all my domais is changed. What should i do? Godaddy email support don't reply... Can anyone help me? I lost all my domains...

lzy · 09-06-2007, 04:48 AM

Call them!

(480) 505-8877

chrisxx · 09-06-2007, 05:45 AM

15 minutes call...I got back access to my GD account, but all my domains where moved somhere. I hope they will fix all soon...

DomainMagnate · 09-06-2007, 06:31 AM

Post your domains so people will know they are stolen and won't buy them!

~MG

Spade · 09-06-2007, 07:32 AM

Thats just a shame. I hope you retrieve any stolen domain names. When was the last time you logged into this account?

chrisxx · 09-06-2007, 08:04 AM

Originally Posted by Spade

Thats just a shame. I hope you retrieve any stolen domain names. When was the last time you logged into this account?

I logged into GD account 2007-08-27, when I bought new domain.
????: NamePros.com http://www.namepros.com/domain-name-discussion/370812-godaddy-account-stolen.html

WHOIS record of new "owner":
Registrant Name:steve shively
Registrant Organization:
Registrant Street1

.o. box 100
Registrant Street2:
Registrant Street3:
Registrant City:ferrum
Registrant State/Province:Virginia
Registrant Postal Code:24088
Registrant Country:US
Registrant Phone:+1.5404837812
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: highvdomain1@yahoo.com

Beware of this Guy!!

***mis_chiff*** · 09-06-2007, 08:24 AM

Was I reading that right? your email was hacked first?
I think I'd be changing every password on every
account I had ever used that email for.

I hope it all works out and you get your
domains back, quickly.
Thanks for posting the warning!

bricio · 09-06-2007, 08:31 AM

good luck for you chrisxx

Achaias · 09-06-2007, 08:37 AM

Just some publicly found info on Mr. Shively, if thats the culprit. He looks to be a realtor but who knows.

http://mountaintolake.com/agents/y1lk6bjcpm5.shtml

His numbers on that page match the area code listed.

A little more info, from white pages
????: NamePros.com http://www.namepros.com/showthread.php?t=370812

5404837812 is unlisted but says its a landline in Rocky Mountain, Va which looks to be in Ferrum county where Steves address and work are. Possibly a kid? Anyways best of luck to ya.

Michael · 09-06-2007, 09:59 AM

If you stole someone's domains would you change the whois to your own name?

Achaias · 09-06-2007, 10:16 AM

Nope, but hey you never now

.

Spade · 09-06-2007, 10:53 AM

Originally Posted by idevlabs

If you stole someone's domains would you change the whois to your own name?

Criminals tend not to be the smarted people....

AdoptableDomains · 09-06-2007, 04:32 PM

Lots of stories of stolen domains lately. I guess the bad thing about the domain market being hot is that the publicity also makes them hot for thieves.

That's one more reason I have my domains spread among 4 different registrars. the worst I have to deal with in a bad situation is part of my portfolio in harms way. I really learned that from the registerfly situation when I was glad I only had 1/3 of my names there.

And yes, I use different passwords for every registrar.

Domagon · 09-06-2007, 04:46 PM

Using multiple registrars sounds good in theory, but in reality, it may just make things even more complicated...

Many reported domain thefts have occurred across multiple registrars - often a hacker will run a sniffer for awhile and then attack - spreading domains out, unless one plans to registrar at dozens and dozens of registrars, is of limited usefulness.

Another aspect to consider is that checking 1 registrar for things amiss on a regular basis is a lot easier than checking 4 or whatever - on a related note, some people using numerous registrars run into problems keeping track of what they have, when they expire, keeping credit card updated, etc.

Ron

Spade · 09-06-2007, 07:07 PM

I think if you change your login/passwords from time to time, and are checking your account often. Your going to find its a smart/safe bet. Also, make sure your email addy is always uptodate and uniform. Make sure that if you use a domain as an email, that it doesnt expire! This seems to be a popular reverse hijacking tool...

Justin

AdoptableDomains · 09-06-2007, 07:18 PM

Originally Posted by Domagon

Another aspect to consider is that checking 1 registrar for things amiss on a regular basis is a lot easier than checking 4 or whatever - on a related note, some people using numerous registrars run into problems keeping track of what they have, when they expire, keeping credit card updated, etc.
????: NamePros.com http://www.namepros.com/showthread.php?t=370812
Ron

I'm not recommending it for everyone, and even at my the smallest, I have at least 400 domains. Until your portfolio is large enough to get good discounts at each, you're better price wise to consolidate them. However, multiple registrars also allows taking advantages of the specials at each as well. I find some are better for different TLD's than others. It also makes it fairly simple to trade when you have active accounts at the major ones. When I had to manually fix the whois, retrieve EPP codes and unlock over 500 names to get them out of Registerfly, I was glad I didn't have another 2000+ domains there. Also, if only one registrar is compromised, it reduces the amount you need to track down.

Originally Posted by Spade

I think if you change your login/passwords from time to time, and are checking your account often. Your going to find its a smart/safe bet. Also, make sure your email addy is always uptodate and uniform. Make sure that if you use a domain as an email, that it doesnt expire! This seems to be a popular reverse hijacking tool...

Justin

A couple other safety tips:

If you own the domain your whois email is on, have it at a different registrar or different account at ther registrar than your portfolio. If they get your account, they could get your domain and move the mail to a new host.

Don't host your domain with the registrar where it's registered. If you lose the names, you also potentially lose your website host account, which may be needed to temporarily put up a site until you get your domains back.

Use a different email for the registrant and admin contacts. Each should get a message when a transfer request or expiration notice is sent, doubling your chance of catching something you didn't authorize or missing a renewal.

Use a monitoring service like domaintools or similar that will notify you when something in your whois record changes, including going into expiration status.

As many bad things registerfly did, there is one feature I miss there. They had a security message that you could set up that would email you any time your account was logged into and included the IP address that logged in. I had it notify me once of a login that wasn't mine and I immediately logged in and changed my password. I think the login ended up being support logging into my account for a support request, but it could have been a hacker just as easy. However, I changed my password within an hour or so of the unknown access.

chrisxx · 09-07-2007, 03:25 AM

125.164.121.99
This is IP of person who took all my domains...

Today morning I sent email to Godaddy with "Request for undo of change of registrant", this is my last chance to have my domains back...

Achaias · 09-07-2007, 06:14 AM

Just curious how you got this ip? Looks like it came from Indonesia...

chrisxx · 09-07-2007, 07:09 AM

Originally Posted by Achaias

Just curious how you got this ip? Looks like it came from Indonesia...

IP is from email stats, someone have logged into my email account that night when my account was stolen.
It's strange for me, IP from Indonesia and WHOIS from US...

onewordonly · 09-07-2007, 08:52 AM

Good luck to you, this must be a real horrible thing to go through and I hope you get them back, keep us posted!!

smashfactory · 09-07-2007, 09:06 AM

Originally Posted by Achaias

Just some publicly found info on Mr. Shively, if thats the culprit. He looks to be a realtor but who knows.

http://mountaintolake.com/agents/y1lk6bjcpm5.shtml
????: NamePros.com http://www.namepros.com/showthread.php?t=370812

His numbers on that page match the area code listed.

A little more info, from white pages

5404837812 is unlisted but says its a landline in Rocky Mountain, Va which looks to be in Ferrum county where Steves address and work are. Possibly a kid? Anyways best of luck to ya.

i know i would have MY picture on the web for all to see if i was stealing domains- i would also make sure i gave you access to my job and my boss.......

i bet, its his teenage son.

*verbster* · 09-07-2007, 09:28 AM

Maybe this is him? Slightly different number, but.....(three listings for Shively in Ferrum, VA)

Shively, Steve B
2800 Old Ferrum Rd
Ferrum, VA 24088
540-483-7861

Achaias · 09-07-2007, 09:35 AM

Has Godaddy been any help in getting your domains back?

chrisxx · 09-07-2007, 09:56 AM

Originally Posted by Achaias

Has Godaddy been any help in getting your domains back?

First person, from GD phone support was very friendly. Although my English isn't good, I get back access to my account (BTW: call to USA costed me about 10% of month earnings...). This person gave me email to GD's undo department, where they should fix all changes made by thief. They requested autogenerated emails wich are send when domains change account and completed special form. Unfortunately I got only emails about changing password in my account so I sent them to GD. Probbaly thief removed all other emails coming from GD or moved domains to other user after he change email in my GD account.
????: NamePros.com http://www.namepros.com/showthread.php?t=370812
Now I have to wait 3 business days for and initial response. I hope they will check this guy from WHOIS and will see that this is a big mistake!

09-06-2007, 04:36 AM	THREAD STARTER #1 (permalink)
chrisxx NamePros Regular Join Date: Jul 2005 Location: Szczecin (Poland) Posts: 232	Godaddy account stolen Someone has stolen my godaddy account. Today i checked my email and my password didn't work. I contacted with my provider and someone has changed my password, but provider gave me new one. When i checked email box i found email from godaddy where someone has reset password.Now i can't login to my godaddy account, whois for all my domais is changed. What should i do? Godaddy email support don't reply... Can anyone help me? I lost all my domains... __________________ HoChiMinhCity.biz My domains for sale @ SEDO HOTELS IN POLAND LONDON TRANSPORT FREE PR4 DIRECTORY WALES HOTELS

09-06-2007, 04:48 AM	#2 (permalink)
lzy Senior Member Join Date: Oct 2006 Posts: 3,130	Call them! (480) 505-8877 __________________ ...

09-06-2007, 05:45 AM	THREAD STARTER #3 (permalink)
chrisxx NamePros Regular Join Date: Jul 2005 Location: Szczecin (Poland) Posts: 232	15 minutes call...I got back access to my GD account, but all my domains where moved somhere. I hope they will fix all soon... __________________ HoChiMinhCity.biz My domains for sale @ SEDO HOTELS IN POLAND LONDON TRANSPORT FREE PR4 DIRECTORY WALES HOTELS

09-06-2007, 06:31 AM	#4 (permalink)
DomainMagnate Senior Member Join Date: Jun 2006 Posts: 1,576	Post your domains so people will know they are stolen and won't buy them! ~MG __________________ Domain Magnate

09-06-2007, 07:32 AM	#5 (permalink)
Spade NamePros Expert Join Date: Sep 2006 Location: Carlsbad, CA Posts: 7,848	Thats just a shame. I hope you retrieve any stolen domain names. When was the last time you logged into this account? __________________ Read my Blog! NameBio.com - Search The Domain Sales Index Buying LLLL.com's ending in "CA"

	LeadRefs	Forum Sponsorship
	Want to sell your domain? LeadRefs.com finds multiple potential buyers to contact instantly!

09-06-2007, 08:24 AM	#7 (permalink)
*mis_chiff* goof free! Join Date: Mar 2006 Location: Canada Posts: 9,361 Follow @mis_chiff	Was I reading that right? your email was hacked first? I think I'd be changing every password on every account I had ever used that email for. I hope it all works out and you get your domains back, quickly. Thanks for posting the warning!

09-06-2007, 08:31 AM	#8 (permalink)
bricio Senior Member Join Date: Apr 2007 Location: Rio de Janeiro Posts: 2,526	good luck for you chrisxx __________________ Why .mobi?

09-06-2007, 08:37 AM	#9 (permalink)
Achaias NamePros Regular Join Date: Jun 2007 Posts: 669	Just some publicly found info on Mr. Shively, if thats the culprit. He looks to be a realtor but who knows. http://mountaintolake.com/agents/y1lk6bjcpm5.shtml His numbers on that page match the area code listed. A little more info, from white pages ????: NamePros.com http://www.namepros.com/showthread.php?t=370812 5404837812 is unlisted but says its a landline in Rocky Mountain, Va which looks to be in Ferrum county where Steves address and work are. Possibly a kid? Anyways best of luck to ya.

09-06-2007, 09:59 AM	#10 (permalink)
Michael DNMedia.com Join Date: Jul 2007 Location: Maryland Posts: 1,842	If you stole someone's domains would you change the whois to your own name? __________________ MiniSites.com - Shift Your Domains Out of Park! DN Media Corporation \| Friend Me on Facebook \| Follow Me on Twitter

09-06-2007, 10:16 AM	#11 (permalink)
Achaias NamePros Regular Join Date: Jun 2007 Posts: 669	Nope, but hey you never now .

09-06-2007, 04:32 PM	#13 (permalink)
AdoptableDomains Senior Member Join Date: Aug 2003 Location: SW Ohio Posts: 4,015	Lots of stories of stolen domains lately. I guess the bad thing about the domain market being hot is that the publicity also makes them hot for thieves. That's one more reason I have my domains spread among 4 different registrars. the worst I have to deal with in a bad situation is part of my portfolio in harms way. I really learned that from the registerfly situation when I was glad I only had 1/3 of my names there. And yes, I use different passwords for every registrar. __________________ AdoptableDomains.com ~~~~~Finding Good Homes for Good Names~~~~~ FuelPrices.mobi - Fish.us - ManhattanNewYork.net - Salesmen.info - SoundSystems.org Dickering.com - JobPlacement.biz - LotteryTickets.ws - Deleted.cc - Names.im - MP3.hn

09-06-2007, 04:46 PM	#14 (permalink)
Domagon Senior Member Join Date: Jan 2006 Location: Wyomissing, PA, USA Posts: 1,223	Using multiple registrars sounds good in theory, but in reality, it may just make things even more complicated... Many reported domain thefts have occurred across multiple registrars - often a hacker will run a sniffer for awhile and then attack - spreading domains out, unless one plans to registrar at dozens and dozens of registrars, is of limited usefulness. Another aspect to consider is that checking 1 registrar for things amiss on a regular basis is a lot easier than checking 4 or whatever - on a related note, some people using numerous registrars run into problems keeping track of what they have, when they expire, keeping credit card updated, etc. Ron __________________ Domagon - Website Management and Domain Name Sales

09-06-2007, 07:07 PM	#15 (permalink)
Spade NamePros Expert Join Date: Sep 2006 Location: Carlsbad, CA Posts: 7,848	I think if you change your login/passwords from time to time, and are checking your account often. Your going to find its a smart/safe bet. Also, make sure your email addy is always uptodate and uniform. Make sure that if you use a domain as an email, that it doesnt expire! This seems to be a popular reverse hijacking tool... Justin __________________ Read my Blog! NameBio.com - Search The Domain Sales Index Buying LLLL.com's ending in "CA"

09-07-2007, 03:25 AM	THREAD STARTER #17 (permalink)
chrisxx NamePros Regular Join Date: Jul 2005 Location: Szczecin (Poland) Posts: 232	125.164.121.99 This is IP of person who took all my domains... Today morning I sent email to Godaddy with "Request for undo of change of registrant", this is my last chance to have my domains back... __________________ HoChiMinhCity.biz My domains for sale @ SEDO HOTELS IN POLAND LONDON TRANSPORT FREE PR4 DIRECTORY WALES HOTELS

09-07-2007, 06:14 AM	#18 (permalink)
Achaias NamePros Regular Join Date: Jun 2007 Posts: 669	Just curious how you got this ip? Looks like it came from Indonesia...

09-07-2007, 08:52 AM	#20 (permalink)
onewordonly Senior Member Join Date: Aug 2004 Location: by the beach Posts: 1,123	Good luck to you, this must be a real horrible thing to go through and I hope you get them back, keep us posted!! __________________ Domain Name Coupon Codes for popular registers including: Domain name coupons - GoDaddy.com Coupons - Hosting Coupons ... more

09-07-2007, 09:28 AM	#22 (permalink)
verbster Yup. It's cold. Join Date: Jul 2005 Location: Alaska Posts: 2,785	Maybe this is him? Slightly different number, but.....(three listings for Shively in Ferrum, VA) Shively, Steve B 2800 Old Ferrum Rd Ferrum, VA 24088 540-483-7861 __________________ When in doubt, do the unexpected.

09-07-2007, 09:35 AM	#23 (permalink)
Achaias NamePros Regular Join Date: Jun 2007 Posts: 669	Has Godaddy been any help in getting your domains back?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)