godaddy domain hacked!

Discussion in 'Domain Names' started by xmartel, Feb 23, 2008.

  1. #1
    I just bought a new website, and hadn't yet transfered over the website from the previous owner, but I did transfer the domain to my own godaddy account.

    Yesterday I went to look at the site and instead of the soccer website there was a hack page.

    You can check it out here. http://www.topfootballgoals.com/

    What do you make of this?

    This is the first time I've ever been hacked and am not sure what to do.

    How did they do this? I can still log into my godaddy account, and the domain is still in there, so far the only thing I can see as being changed is some of the contact details.

    Here they are.

    123 Street rd
    Portland, Oregon 97233
    United States
    Tel +1.5034732329

    I live in Canada, not Portland, and it's like that for all the contact details. Registrant, Administrative, Technical, and Billing.

    How'd they do this? what do I do? and how do I get my domain back in my control?
     
    xmartel, Feb 23, 2008 IP
  2. domainer_10

    domainer_10 Peon

    Messages:
    1,720
    Likes Received:
    24
    Best Answers:
    0
    Trophy Points:
    0
    #2
    what was your hosting I.P before the hack?
     
    domainer_10, Feb 23, 2008 IP
  3. mirturk

    mirturk Active Member

    Messages:
    1,635
    Likes Received:
    79
    Best Answers:
    0
    Trophy Points:
    90
    #3
    Your domain still at your control. You can change details form you CP if domain in your panel.
     
    mirturk, Feb 23, 2008 IP
  4. xmartel

    xmartel Active Member

    Messages:
    1,009
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    78
    #4
    It was just being hosted with one of the members of DP with whom I bought it from until I set up my own hosting.
     
    xmartel, Feb 23, 2008 IP
  5. domainer_10

    domainer_10 Peon

    Messages:
    1,720
    Likes Received:
    24
    Best Answers:
    0
    Trophy Points:
    0
    #5
    so the hacker changed the nameservers/I.P to now point to where?
     
    domainer_10, Feb 23, 2008 IP
  6. xmartel

    xmartel Active Member

    Messages:
    1,009
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    78
    #6
    NS1.ELDEVLLC.COM
    NS2.ELDEVLLC.COM

    this is who I bought it from, a member by the name of eldev, they tun their own company with hosting and such. it looks like it's still be hosted with them. I'm pretty sure they had nothing to do with this. They are a very reputable member and have been very helpful, as I'm new to all this website stuff.

    This doesn't make any sense to me, how did they access my domain and change what website is shown?
     
    xmartel, Feb 23, 2008 IP
  7. toniya

    toniya Well-Known Member

    Messages:
    1,173
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    130
    #7
    Hey! You are now in a big problem :(
    Same happened to once one of my customers and it took 7 months to get back the domain.
    Report the issue to GoDaddy right now and write to ICANN

    I guess you forgot to lock domain after moving to GoDaddy.
    I will love to see GoDaddy responce :)

    Good luck,
    Toniya
     
    toniya, Feb 23, 2008 IP