Search | View Active Threads | View New Posts
Current Time: 11:11 AM

 

+ Reply to Thread
Page 3 of 4
FirstFirst 1 2 3 4 LastLast
Results 31 to 45 of 59
  1. #31
    Join Date
    Sep 2002
    Location
    .com.au
    Posts
    11,051
    Originally posted by toho

    Hosting company reported me 2 IP address accessed yesterday.
    202.80.59.180
    210.230.114.65

    are these from your hosting company, ie your email has been accessed from those two ips?
    GamesRoom.com, Possum.com, Arithmetic.com on greatdomains auction, low reserves, priced to sell!

  2. #32
    Join Date
    Jul 2005
    Location
    Los Angeles / NYC
    Posts
    2,998
    Toho,

    It may be worthwhile to check with Dotster / eNom / NSI / OpenSRS / etc. to see if they have a log of what IPs were used to access your accounts.
    .

  3. #33
    Join Date
    Feb 2005
    Location
    us
    Posts
    283

    deleted

    deleted

  4. #34
    Join Date
    Feb 2005
    Location
    us
    Posts
    283

    Re: Re: Is this a domain scam?

    Originally posted by snoopy
    Wouldn't a Japanese guy asking you to wire money to a bank account in Denmark (which I'm assuming is in a completely different name to the registrant details) be a fair indiction that something might not be right?
    NOt really .This by itself does not mean much. Me myself (us resident) live now outside the US but my bank is in the US.

  5. #35
    Join Date
    Feb 2005
    Location
    us
    Posts
    283

    Re: Re: Is this a domain scam?

    Originally posted by snoopy
    Wouldn't a Japanese guy asking you to wire money to a bank account in Denmark (which I'm assuming is in a completely different name to the registrant details) be a fair indiction that something might not be right?
    Also - it is very common for business people have a bank account under name (company, LLC etc) that is different from the registrant info. so this by itself would not be alarming.

  6. #36
    Join Date
    Sep 2002
    Location
    .com.au
    Posts
    11,051

    Re: Re: Re: Is this a domain scam?

    Originally posted by shoval
    Also - it is very common for business people have a bank account under name (company, LLC etc) that is different from the registrant info. so this by itself would not be alarming.
    Things like bank accounts in different countries and different bank account names to the registrant details should be obvious warning signs that the name might be stolen. Buying a domain for any substantial amount should involving a reasonable amount of checking, especially something like a 2 letter .com where they are regularly stolen.
    Last edited by snoopy; 2006-08-06 at 06:07 AM.
    GamesRoom.com, Possum.com, Arithmetic.com on greatdomains auction, low reserves, priced to sell!

  7. #37
    Join Date
    Sep 2002
    Location
    Florida
    Posts
    457
    Hi Toho,

    Long time no see man. If you've not done so allready, I would change passwords at all of the registrars where you have domains. If the guy using stillworks20@gmail.com is the culprit, the same person may also be using amirseddiq@gmail.com.

    http://72.14.209.104/search?q=cache:...s&ct=clnk&cd=2

    (scroll to bottom)

    Best,

    Eric
    Last edited by Eric; 2006-08-06 at 08:11 AM.

  8. #38
    Join Date
    Sep 2003
    Posts
    131
    Hello Eric.

    I found origial thread at DNF, after I read your post. Thank you.
    http://www.dnforum.com/showthread.php?t=166114
    Chris have some more info about this hacker.

    And few hours before, Buyer(Mr.McKane) had become a victim, I knew from his counsel by mail.
    If someone have more info about this hacker, please post here.

    Thank you.
    Universal Media
    info@um.com

  9. #39
    Join Date
    Feb 2005
    Location
    us
    Posts
    283

    mails from the con artist

    Here are responses I got from the scammer in response to my angry mail to him after discovering he was trying to sell me stolen domains



    Date: Mon, 7 Aug 2006 14:47:23 +0430
    From: "stillworks20@gmail.com" <stillworks20@gmail.com>
    To: Eli Shoval <shoval@eskimo.com>
    Subject: Re: cm.com

    i'm 17 year old.
    and 100K per week, very good
    i do not know what i can do with my money..
    in my country i can buy big home with 100K ( i'm in iran )
    this is mean 1 new home per week... )


    On 8/7/06, stillworks20@gmail.com <stillworks20@gmail.com> wrote:
    >
    > not important for me what you saying
    > i'm doing my job very good
    > and making over 100K per week
    >
    >
    >
    > On 8/7/06, Eli Shoval <shoval@eskimo.com> wrote:
    > >
    > >
    > > Hi criminal!
    > >
    > > I am glad you were caught before I send you any money! you are ------
    > > bastard criminal and I hope other people do not get into your trap.
    > > You deserve to be in prison for stealing on the internet.
    > > Get lost
    > >
    > >
    > > Eli
    Last edited by shoval; 2006-08-07 at 03:58 AM.

  10. #40
    Join Date
    Sep 2003
    Posts
    131
    I absorbed property without any notification from eNom.

    This is stolen domain, but eNom transferred to McKane again.

    It looks few days ago, they did.



    toho
    Universal Media
    info@um.com

  11. #41
    Join Date
    Sep 2002
    Location
    .com.au
    Posts
    11,051
    Toho, have you checked your computer for keystorke loggers and the like and chaged passwords? sounds like you have some security problems somewhere for the name to be stolen again.
    GamesRoom.com, Possum.com, Arithmetic.com on greatdomains auction, low reserves, priced to sell!

  12. #42
    Join Date
    Sep 2003
    Posts
    131
    Hi, snoopy.

    Thank you for your suggestion.

    Yes, I did check all things. Now secure is high level and always careful.
    This mean, not someone push domain again but eNom legal department transferred to McKane again.

    I did not see the mail from eNom, so I requested eNom mail again. They sent at 15th Aug they said.(They FW this mail today)

    ********************************

    We have looked into issues regarding the domain name <KNIT.COM>. Our policy is to not engage ourselves in third party disputes regarding domain name sales. We will, however, lock and hold domain names when a party makes a claim of potential fraudulent activity or similar issues. It is our policy to lock the domain name at the time of the complaint. In reviewing the information that we have in our records regarding KNIT.COM, we believe the domain name was residing in McKane Davis' possession when the complaints and issues were initiated. In accordance with this policy, we will continue to lock the domain name, however, it will be placed back in McKane Davis' account effectively immediately and it will stay there pending the conclusion of the dispute.

    ***********************


    This is stole domain.

    But eNom said "In reviewing the information that we have in our records regarding KNIT.COM, we believe the domain name was residing in McKane Davis' possession when the complaints and issues were initiated. "

    There is something that bothers me.


    toho
    Universal Media
    info@um.com

  13. #43
    Join Date
    Sep 2002
    Location
    Florida
    Posts
    457
    "Our policy is to not engage ourselves in third party disputes regarding domain name sales."

    They need to realize that it is not a domain sales issue. The domain was stolen and the domain should be returned to your account as was done originally.

  14. #44
    Join Date
    Sep 2002
    Location
    Gold Coast, Qld, Australia
    Posts
    6,985
    Originally posted by Eric
    They need to realize that it is not a domain sales issue. The domain was stolen and the domain should be returned to your account as was done originally.
    we believe the domain name was residing in McKane Davis' possession whenthe complaints and issues were initiated .
    The problem for toho here is he knows the domain was stolen but enom don't. I think locking the name in the account, where the name was, when the "complaints and issues were initiated" makes sense.

  15. #45
    Join Date
    Sep 2002
    Location
    Wales (UK)
    Posts
    24,745
    At least they're doing something other than telling you to use the UDRP to get it back. With it locked it'll stop it being bounced around different registrars and if you supply all the relevant details you should be able to show that the name was indeed stolen from you.
    When using google for counts - use double quotes for usage counts for multiword terms and set "match type" to "exact" for all search volume lookups. Click here for more info

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  

Sponsors

Above.com Domain Registrar, Marketplace and Revenue Optimizer
Trellian Direct Search Network
Domain Escrow Services

Industry Events

11-14 August 2019
Affiliate Summit East
New York, NY

4-6 March 2019
LeadsCon
Las Vegas

15-18 September 2018
MERGE 2018
Orlando, FL

Poll

How do you invest in domains?
to see the Poll results!
DomainState.com
Domain Tools | Domain Directory | Registrar Stats | Domain Glossary | Industry Events | FAQ | Members | Terms | RSS | Link To Us | Advertise | Contact Us
Other Related Trellian Services:
Above.com Registrar  |  Above.com Marketplace  |  Above.com Domain Manager  |  Free Search Toolbar  |  Free Webpage Builder  |  Keyword Research
Direct Search Navigation  |  Search Engine Submission and SEO Tools
Copyright © 2002 DomainState.com a Trellian Company 2014 Bronze Sponsor - Internet Commerce Association