IT.COM

alert [RESOLVED] - Scammed by hacker $3,000 btc pornography.com affiliate.org etc

Spaceship Spaceship
Watch
The sale thread is in another forum.
https://bitcointalk.org/index.php?topic=1722533.msg%msg_id%
and these domain were also listed on hackforum and flippa.

I bought 2 domain from him, paid ~3k in bitcoin.

It went smoothly initially, he actually went first(I thought nothing could go wrong) transferred the domain into my account, and gave me a week to pay it off. A week later, I paid in full.

But few days later, I get a message from the domain company "namecheap/enom" telling me those 2 domain has been "Locked due to pending Transfer Dispute".

send payment to address:
1J8moCzzRg6rdoGv1aqoPJCqrkXhocwNtT
1NmBxpMrY1wqKsWD8HK6n9ZQF6WP5povFK
17An4YMbWeXhkg7nnPumdrgHSgVeut1jbY

EAmGFr9.png


Here's are the list of stolen or his domains(how does owner of $100k+ domain not have strong account security).
pornography.com
lurking.com
schoolteacher.com
automating.com
disturb.com
overpopulation.com
affiliate.org
affiliatemarketing.net
TMZA.com


many of these domains were listed in flippa.com a week back.
 
Last edited:
7
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
Here's some more additional information,

Current resting place of Bitcoin stolen. showing 45k(I lost 3k, I know at least another person lost 2k), 1 transaction, dated 1/28/2017.
https://blockchain.info/address/1AN4MKDNoLDzBnzskDvjqbGbEo2Jf4e8fr

Whois
The original owner might be "jp sauve", he is the CEO of MaxBounty, maybe someone tipped him off when it was listed on flippa.

Flippa
I initially ignore him, because the red flag was all there. But once I saw it was listed on flippa, by a reputable broker. It definitely did it for me, and take him seriously.

@Investful - Did you email the WHOIS email of the domains you buying the domains? Was the WHOIS email you corresponded with either the privacy proxy email or [email protected]?

I didn't need to email the Whois. The transaction took place Skype screen share and voice chat, I watched him log into that exact email and log into namecheap with username "adomainholder".

He did that to "prove" he own those domains, and I saw all those listed, including pornography. That's what caught me off guard. He had email, namecheap, listed on flippa, had possession from 12/3 to my purchase date 1/15 and this pornography.com alone is worth 500k(to right end user).

When I agreed to pay bitcoin, I was fully aware that's no chargeback. I only posted here to alert the domain community of the stolen domains and to make aware of the vulnerabilities and domain transfer security.
 
Last edited:
6
•••
Does pending transfer dispute mean, the last owner filed a theft dispute?
I'm not sure, but all the domains are currently registry locked(so can't transfer out or change info) and the status is under investigation by enom risk department.

wheres the risk department when the hacker login and out from 12/3 to 1/28(about the time when registry lock) occurred.
 
Last edited:
0
•••
Please don't keep trashing Bitcoin. Bitcoin offers one of the best and safest payment methods if it is used properly. It wasn't Bitcoin that was the problem here. In fact the payment went through a Bitcoin mixer, but I'm not sure how you can discover this before you make the payment.

PayPal is the scammers chosen method of payment, and Bitcoin offers a way to escape from this, and at a lower price. Would escrow have worked in this case, if the the payment was released after a succesful transfer that was subsequently reversed.. A time delayed multi-sig Bitcoin payment would have been safer if the seller was prepared to wait. Obviously he wouldn't in this case.
Obv, if you're a seller don't trash btc

but if you're a buyer, trash btc,

you can't be one-sided about this. PayPal offers buyer protection, btc doesn't.
 
1
•••
Bitcointalk.org is runing by iresponsable people.. they will ban your account for nothing but they will never ban the scammers...everydays we scam ppl up to $20.000.. we should report this site to the Top online site scams used by criminals. now i know my account will ban forever....(y)(y)
 
1
•••
6
•••
Bitcointalk.org is runing by iresponsable people.. they will ban your account for nothing but they will never ban the scammers...everydays we scam ppl up to $20.000.. we should report this site to the Top online site scams used by criminals. now i know my account will ban forever....(y)(y)

Just stick to the technical boards, and ignore the ponzi and gambling boards then.
 
1
•••
Anytime I have the slightest doubt that a seller has 'hot' domains, I always verify the ownership history. In a case like this, trace it back to the last owner who held the domain names for an extended period of time. Call them or email them and ask what happened to the domain name.
 
2
•••
Another red flag, no one push domains first without securing payment.

This is where making use of an escrow service becomes even more relevant. Speaking of escrow service, do you guys know a few trusted ones?
 
0
•••
1
•••
This is where making use of an escrow service becomes even more relevant. Speaking of escrow service, do you guys know a few trusted ones?
NP member @Brandon Abbey is now at Payoneer.com
Check them out.

Peace,
Cyberian
 
3
•••
0
•••
0
•••
Updates:

eNom/NameCheap closed the transfer-dispute and allowed me to keep the domains.

Domain is no longer registry locked.
 
8
•••
Updates:

eNom/NameCheap closed the transfer-dispute and allowed me to keep the domains.

Domain is no longer registry locked.

wow, so you did manage to get 2 names for $3K? )

Which of the list were they?
 
3
•••
1
•••
Yes those were the domains I purchased.
 
2
•••
So they were not stolen? The seller actually owned them? But tried to steal them back anyway? That's where I got lost in the thread, the bitcoin discussion makes it scattered to follow.

That is like winning the lottery, a great prize for all the hassle and anguish you must have gone through!
 
1
•••
eNom/namecheap risk department did an "investigation", and put those domain under registry transfer lock.

After the investigation, they just emailed and said sorry for wait and unlock the domains. They did not provide any details to me.
 
3
•••
eNom/namecheap risk department did an "investigation", and put those domain under registry transfer lock.

After the investigation, they just emailed and said sorry for wait and unlock the domains. They did not provide any details to me.
Luck favors the brave :xf.wink: Although no one including yourself would suggest doing such a thing with that many red flags, congrats and best of luck! You've got yourself nice enough names now to forget about the headache you had over last few months, cheers!
 
2
•••
Could someone do a review/summary of what we think happened here and how? I'm kind of lost, but I'd like to understand.
 
0
•••
From what i understand, buyer purchased 2 domains (tmza dot com and automating .org) from external forum, using bitcoin, both for 3k purchase price.

The seller transferred the domains upfront; but when payment was made to seller, the seller made claim to registrar that the domains were stolen to get them back and make off with domains plus cash.

Please someone correct me if I'm wrong.
 
1
•••
From what i understand, buyer purchased 2 domains (tmza dot com and automating .org) from external forum, using bitcoin, both for 3k purchase price.

The seller transferred the domains upfront; but when payment was made to seller, the seller made claim to registrar that the domains were stolen to get them back and make off with domains plus cash.

Please someone correct me if I'm wrong.
So it was the seller who tried to steal it back? Not the rightful owner? And we're assuming that it was an email hack/id hack?
 
0
•••
Back