Registerfly account hacked?

[B33R]

Your Account userid [***userid removed***] was just accessed at 2006-11-14 by IP ADDRESS [66.246.72.40]

Further information is available via the reports section of the domain manager

www.RegisterFly.com

This just arrived, 2 days late, that's not my IP address/range and I don't even have any domains at regfly any more.

I have no idea how they got that password, fortunately it is a one-off, never used anywhere else, password. Not particularly easy to guess either, although it was kinda short.

Regfly login report confirms it - 2006-11-14 20:34:25 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) - SUCCESS

Just a warning for y'all, be on the lookout for this. Never use the same password for different places and always use uppercase, lowercase and numbers!

 

[Jammer]

i received the same message...a system glitch?

 

[dnb8]

maybe registerfly support accesed Your account ?

btw. recently I got some spam emails which looked like this, but this was from other sites.... not registerfly

 

[ahtum]

hmm looking through reports i got crepped out ... logins from ip's from the rusian federation logins from 0.0.0.0 ... hmmm i better change my pass soon :tri:

Thanks for the head up B33R

 

[stscac]

B33R and others who might be having this problem:
http://www.gfy.com/showthread.php?t=666863

This might be of interest to you. Hope everything works out.

-Steve

 

[dnb8]

B33R and others who might be having this problem:
http://www.gfy.com/showthread.php?t=666863

This might be of interest to you. Hope everything works out.

-Steve

:o !!!!

 

[cache]

should I change my passwords now?

 

[B33R]

B33R and others who might be having this problem:
http://www.gfy.com/showthread.php?t=666863

This might be of interest to you. Hope everything works out.

-Steve

Heh, I wonder if they're for real...

Doesn't matter really, the only domain in my account isn't even in my account. I transferred it out weeks ago but it still appears in the list. I changed my password too.

I just reported this to Registerfly, let's see what they have to say.

 

[Dave_Z]

Got that exact message, too. Went in and changed my password.

One can't be too careful.

Edit: just got a message that they're aware of this. But they'll clarify if asked.

 

[slider]

Didn't receive this email, just a RegisterFly specials email :p

I'll change my password anyway just to be safe...thanks for the heads up!

 

[IAmAllanShore]

Got the message...

Changed all account p/w's again - it's that time of the month for Aunt Changepasswords to visit!

-Allan :gl:

 

[RJ]

W:oW 74000 accounts and passwords compromised.

Their site is down now too.
http://www.registerfly.com/

 

[DJ]

Their site is down now too.
http://www.registerfly.com/

Yep, unable to connect ....

A good thing i don't have my names there ...

 

[B33R]

W:oW 74000 accounts and passwords compromised.

Their site is down now too.
http://www.registerfly.com/

I suppose that means the chances of getting a reply are now nill! Ticket was submitted 8 hours ago, no response as yet.

This downtime is just the icing on the cake. It says it all really...

 

[Sabre]

I suppose that means the chances of getting a reply are now nill! Ticket was submitted 8 hours ago, no response as yet.

This downtime is just the icing on the cake. It says it all really...

I wonder how many of their remaining customers with be taking their domains and moving away after this?

I wouldn't be suprised if they lost a large proportion of the customers who were holding on and hoping for regfly to improve, after this.

 

[lovelylovely]

thats scary news really

 

[RF-Mark]

Hi all,
I have just recently joined Registerfly as VP Sales and this is my first post. I spent 5 years working for Tucows so I am very knowledgeable on this industry with a strong believe in customer advocacy.
I will say that this concern is being fully investigated. Registerfly does everything possible to ensure the safety of its customers assets and the continuance of services they have purchased. Registerfly does from time to time do account checks to ensure the accounts are valid and contain accurate info so there may be additional confusion.
I would like to hear and discuss everyone's feedback on what we can do to improve your experience with Registerfly. Please email me [email protected] with your thoughts and experiences. I can tell you that we have an initiative already underway that will improve the overall customer experience in the next couple of months.

 

[RJ]

Welcome, Mark!

 

[B33R]

Woohoo, got a response!

Hi Rob
Please disregard this email it is the IP of one of our office staff in NJ. Please feel free.
Thank you

Now all that remains is the question - why do they login? Why is there no backdoor so precisely this situation doesn't occur?!

Nothing against you Mark, but Regfly are probably one of the most inept registrars I've ever seen. I really hope you're serious about this "initiative" and that it brings Regfly back on track before you lose all your customers. I hope you like a challenge too!

Welcome and good luck, Mark. :tu:

 

[robertjr]

Mark- Welcome to NP!

Thank you for taking the time to discuss my concerns the other day. I'm looking forward to the changes.

Robert