My domain has been hacked; Nameservers changed, but nothing...

***infosec3*** · 06-18-2011, 11:51 AM

Hello,

There is a domain on which I built a Website some time ago, with traffic an revenue growing...

Well, now someone has hacked the domain. I have changed the nameservers several times trying to remove the HACKED message. Although it works for a short time, the HACKED message comes back. The most recent change was to Godaddy's nameservers, but the message has come back.

What do you recommend? Your input is appreciated.

Thanks

cdboard · 06-18-2011, 12:03 PM

sounds like cached dns info.

try viewing your site through a proxy.

pjb1978 · 06-18-2011, 12:13 PM

If you'd like, PM me the URL and I'll see if it shows the message for me.

Try this...

Close your browser(s). Open a DOS prompt (In Windows, click start and in the Run box type 'CMD' and press enter). In the DOS window, type the following:

ipconfig /flushdns

****note the space between ipconfig and the /****

Then try the site again. I agree with cdboard that it sounds like a cache problem.

***infosec3*** · 06-18-2011, 12:21 PM

Originally Posted by pjb1978

If you'd like, PM me the URL and I'll see if it shows the message for me.
????: NamePros.com http://www.namepros.com/warnings-and-alerts/719468-my-domain-has-been-hacked-nameservers.html

Try this...

Close your browser(s). Open a DOS prompt (In Windows, click start and in the Run box type 'CMD' and press enter). In the DOS window, type the following:

ipconfig /flushdns

****note the space between ipconfig and the /****

Then try the site again. I agree with cdboard that it sounds like a cache problem.

PM with URL sent...Thanks

06-18-2011, 11:51 AM	THREAD STARTER #1 (permalink)
*infosec3* Business Member Join Date: Oct 2009 Posts: 957	My domain has been hacked; Nameservers changed, but nothing... Hello, There is a domain on which I built a Website some time ago, with traffic an revenue growing... Well, now someone has hacked the domain. I have changed the nameservers several times trying to remove the HACKED message. Although it works for a short time, the HACKED message comes back. The most recent change was to Godaddy's nameservers, but the message has come back. What do you recommend? Your input is appreciated. Thanks

06-18-2011, 12:13 PM	#3 (permalink)
pjb1978 NamePros Member Join Date: Apr 2011 Location: Halifax Posts: 188	If you'd like, PM me the URL and I'll see if it shows the message for me. Try this... Close your browser(s). Open a DOS prompt (In Windows, click start and in the Run box type 'CMD' and press enter). In the DOS window, type the following: ipconfig /flushdns **note the space between ipconfig and the /** Then try the site again. I agree with cdboard that it sounds like a cache problem. __________________ http://www.unusualcars.com \| http://www.dnvend.com

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Ads by Google Changed to AdChoices	netPH	PPC / CPC / CPM Programs	4	06-26-2011 09:08 PM

06-18-2011, 12:03 PM	#2 (permalink)
cdboard NamePros Regular Join Date: Feb 2004 Location: Indiana Posts: 651	sounds like cached dns info. try viewing your site through a proxy.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)