DNS Hijacked :(

Ghost

Seasoned Veteran
Joined
Jun 25, 2009
Messages
3,585
Reaction score
348
FP$
3,264
Well my hosting account was compromised and my DNS was hijacked. Basically the DNS settings were altered to not point towards my files, but to someone elses.
The effects can be seen (currently SFW) at: Geekpath.com and GeneralForum.org
It is really annoying and if I don't get the account back ASAP then I could lose the domains due to transfer/sale.

I'm sure there'd be a way to recover them, but who knows. I will take legal action though if I lose them.
The files / dbs are fine.
 
What does your hosting provider have to say about this?
 
Pretty much nothing helpful. I told them that they should send a letter with a new password to my address that's been on file for the last THREE years with them.
Or perhaps the same home phone number could be helpful seeing as it's been the same for the last three years with them...

Apparently that is irrelevant.
 
Maybe time to switch hosts then? 🙂 It's a bit sad they're claiming to be Annonymous- I thought they were for Internet freedom?
 
Sorry to hear that Ghost. Who are your domains registered with?

Maybe it's too late now, but it is a good idea to register your domains with someone other than your host. That way if something goes wrong with your host, or if you want to change hosts, it is easy to point those domains elsewhere.
 
Ghost said:
Pretty much nothing helpful. I told them that they should send a letter with a new password to my address that's been on file for the last THREE years with them.
Or perhaps the same home phone number could be helpful seeing as it's been the same for the last three years with them...

Apparently that is irrelevant.
Who's your hosting provider?
 
I'm sorry to say anonymous could not give a toss about your site and it's just a fanboy.
 
Who is your host?
I recommend you move away from your host. I would recommend a reliable domain registrar such as Namecheap.
 
I use HostMonster to point my domains to my new host, Believe Hosting - they are reliably amazing and so helpful. However, Hostmonster is a disaster.
000webhost.com is the website that the guy is using to host his deface page.
 
No not at all.
They've changed the passwords to my hosting account and my email account as well.
 
Ghost said:
000webhost.com is the website that the guy is using to host his deface page.
Not sure if it will do any good, but have you reported that page to 000webhost
 
My mistake, it is 000webhost.com
And now I have reported them. Thanks for the great idea Fergal 🙂 Maybe they can take down the page, or provide me with some details about the hacker.
 
Good luck! From my previous experience with 000webhost, I would be surprised if you got back to you. But not to discourage you or anything...I hope the best for you.

Also, even if 000webhost removes that page, you still need to contact your registrar to get control of your domain again, only they can really do anything in regards to your domain.
 
People are sad hacking, get a life and get a real life time job.
Pretty much wish FP had a like system because surely every member would like this post.

Try and talk to the hacker, get him to visit a forum your an admin on and get his IP and then report it to his IPS, he will soon get mad since his IPS will block his from accessing his internet connection.
 
if they jacked up your domain dns from HostMonster/FastDomains You need to contact them. It sounds like they got into your account at the Domain registrar.
 
Back
Top Bottom