My site has been hacked!

[matauri]

Intolerance actually came to mind :-)

This is just one of his posts, and you can see Leisa graciously offered him hosting.
http://www.webproworld.com/viewtopic...autolink#42239

The URL that you got sent to was his 'free' host (i.e Geocities, yahoo, etc). He has 'page available' issues all over his site, but some are still up.

Maybe he has taken Leisa up on her offer, maybe he waiting to afford paid server space, maybe he is in transition of changing over? Maybe, maybe, maybe.

If you had gone to many parts of my activnet.org site over the past couple of weeks, you will find the exact same thing, because I have been changing servers & moving stuff around. And I have changed my Attitude URL too, cept I thought to change it on here, maybe he didnt. My email addies have changed, lots of things have been changed. If he hasnt put in all his redirects, etc, then he is going to experience problems.

Has anyone thought that maybe this could be his problem? Inexperience.

Where everyone came up with him being a spammer beats the hell out of me !! Even using both names, he hasnt done any spamming so far in other posts. (and take note: most of you have responded to his asks for help previously too!)

His only crime so far has been that he has 2 login names. **yawns***

:-)

Cindy
The Underdog Defender !

[janeth]

I was wrong one other time when I thought I was wrong but then later I found out I was right.


Really I'm like one of those dogs that attacks the dog that appears to be loosing.

[rocky1]

Okay! I'll retract the claws, and I'll most certainly apologize, if a few things are cleared up for all of our benefit! I'm not being intolerant, it's simply that allot of things don't look altogether kosher here, for whatever reason. And, if one does the whois search on all of the addresses involved, it gets even more confusing there!

I to would openly encourage enlightenment on this matter, so that we might all quit being suspicious, and offer Autolink the help they need, since that's what we're here for, and what we do on a routine basis.

[minstrel]

...and while we're on the subject, dontcha think that Janeth is one scary wench? Now she's pounding out underdogs (or maybe losers, I got confused...)

:-)

[matauri]

Excuse me for not seeing what all the confusion is about.

Possible scenario:
His username at 'freeserve' (his free hoster)is 'autolink' , hence the URL:
http://www.autolink.4t.com/main.html
username + freeserver (his free hoster)

He has registered a Domain name called http://www.autosignals.com/ & it says Under Cosntruction

And disneywebdesign.com could be a domain or subdomain, who knows! But his last name is Disney & he is entitled to use it as DisneyWebDesign.

And its pretty obvious by other postings, that he is having hosting issues.

All yas have done is gone to a page that was unavailable on a free web hosting service, and auto thought spammer. Not fair I say guys :-)

How about everyone admit they jumped to the conclusions too fast & offer some suggestions or ask him further questions.

I will leave it there, and I hope that this thread can get back on topic.

I just found my site, however it was not at my normal URL. I later found out that my site was hacked! The hackers broke into my account deleted my site and all my pictures. I was in the process of redeveloping my site so I didn't have a back-up of it. Before they deleted they did manage to mirror my site. Now customers are cuying items from my mirror site. Not only do they get ripped out of their money, my name is being ruined! I don't know what to do I have already changed all my passwords and renamed all my pictures because those were corrupted thanks to the hackers. But now I am completly lost and don't know what to do. Should I rebuild my site, then risk loseing it again. But for now I am just waiting. I need to do something because I am losing money every day now. Any suggestions on what to do would be greatfull!

(I might apply for a job as Moderator) ;-)

Cindy

[ronniethedodger]

I am not going to touch this one.

Everyone is making a lot of valid points for and against this poor soul -- Trial in Absentia. In fact a lot of the points are so well presented, that I am totally confused.

I therefore am respectfully bowing out of this thread...and opting for the possiblility of it being made into a docudrama on the USA Network. *-(

[minstrel]

How about everyone admit they jumped to the conclusions too fast & offer some suggestions or ask him further questions. I will leave it there, and I hope that this thread can get back on topic.

With all due respect to Cindy and autolink, I think we have done just that - as Julian said, without the element of doubt, his post would have been simply deleted. We are indeed asking for clarification... and if this is an honest error, as I indicated several posts ago, I will be the first to apologize (in fact, I think I did so in advance). But realistically, spammers, once unmasked, rarely return to explain or clarify and so far we haven't heard a word from autolink. Does that mean he is guilty as charged? Of course not. Does it enhance the case for his innocence? Not at all...

...but, maybe he has just been busy with Christmas shopping... or maybe his internet connection went down... or maybe he has forgotten his username & password again...

...or maybe he's just a spammer...

I guess we'll see...

Parenthetically, what would Lowell Green have said?

[matauri]

With all due respect to Cindy and autolink, I think we have done just that - as Julian said, without the element of doubt, his post would have been simply deleted.

With all due respect to all who posted (err...ravaged).... what has this guy posted that even deemed doubt? A broken link? Off with his head!

Off with my head ! If Cyanide hadn't come along and told me I screwed up all my namesever settings when I switched servers, I should be duly raked over the coals? ooo...I had a domain name that didnt register on whois and pointed no where! Where's that guilotine !
(another maybe....maybe this happened to him also!)

Since when on this forum do we respond to calls for help like this anyway?

Can I just also reiterate....he did say that his site had been hacked, maybe this could account for the pages & graphics that are missing??? Novel thought I know guys! :-)

This guy says he's worried about losing business, and you guys are asking him to account for himself? (you dont want to know what my response would be if I was him)

...or maybe he's just a spammer...

Please point me to the element where he is supposed to have spammed? I am obviously missing soemthing you guys are seeing. All I see is freeservers site arriving from a missing page.

So I'll leave the post and either autolink can explain exactly what's going on or we can have this as a nice record of smart members.

Open my eyes smart members. Where is the conspiracy? I am open to being regarded as a naivete :-)



Cindy

[ldyguique]

AUTOSIGNALS.COM

Server Type: Apache/1.3.26 (Unix) Debian GNU/Linux mod_ssl/2.8.9 OpenSSL/0.9.6g PHP/4.1.2 (Spry.com also uses Apache)
Website Status: Active
Reverse IP: Web server hosts 9 websites (reverse ip tool requires free login)
IP Address: 69.44.59.200 (ARIN & RIPE IP search)
Registrant:
R&R Enterprises

Registered through: First Merchant Resource

NOTE: There is no Domain Registrar by this name in either Google or Teoma
Domain Name Regestration
Domain Name: AUTOSIGNALS.COM

Domain servers in listed order:
NS1.GEODNS.COM
NS2.GEODNS.COM


69.44.59.200

Record Type: IP Address
IP Location: United States - Washington - Sequim - Serverbeach
Reverse IP: No websites hosted using this IP address

Williams Communications, Incorporated WCG-BLK-4 (NET-69-44-0-0-1)
69.44.0.0 - 69.44.255.255
ServerBeach WLCO-TWC1263571-BEACH-IAD (NET-69-44-56-0-1)
69.44.56.0 - 69.44.63.255

# ARIN WHOIS database, last updated 2003-12-20 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database

And, a second record -- for Serverbeach.com
66.139.72.12

Record Type: IP Address
IP Location: United States - Texas - Plano - Serverbeach.com
Reverse IP: No websites hosted using this IP address

SBC Internet Services - Southwest SBIS-SBIS-5BLK (NET-66-136-0-0-1)
66.136.0.0 - 66.143.255.255
ServerBeach.com SBCIS-043002133006 (NET-66-139-72-0-1)
66.139.72.0 - 66.139.79.255

What this is all showing is that there are DNS/IP Addresses for geodns.com pointing to Serverbeach.com

The first record for autosignals.com shows that the Registrant or owner is R&R Enterprises who supposedly registered the domain name through a non-existent Registrar, First Merchant Resources.

The secondary information shows that GEODNS.com is actually tied to a secondary server on SBC with ServerBeach.com (whereas the domain appears to be on a TWC connection).

I'd say that this is still fishy as all getout. The R&R Enterprises -->> First Merchant Resources is just bogus "Admin Contact" bs typed by whoever has access to this domain record at WildWest -- which, incidently is the same Registrar that autolink.com is at.

[minstrel]

With all due respect to all who posted (err...ravaged).... what has this guy posted that even deemed doubt? A broken link? Off with his head!

Cindy - follow the breadcrumbs and have another look at ldyguique's post...

If this is all about broken links, why does he show up as the owner and his host as freeservers.com?

Name Server: NS3.FREESERVERS.COM NS4.FREESERVERS.COM
ICANN Registrar: WILD WEST DOMAINS, INC.
Created: 26-jul-2003
Expires: 26-jul-2004
Status: ACTIVE

Registrant:
Autolink

Registered through: VoxDomains.com
Domain Name: DISNEYWEBDESIGN.COM

Domain servers in listed order:
NS3.FREESERVERS.COM
NS4.FREESERVERS.COM

Note that the URL he provided us with does not say "page not available" or "404 page not found" or other such common errors messages - it says, "this domain is for sale".

autolink also says,

Now customers are buying items from my mirror site. Not only do they get ripped out of their money, my name is being ruined!

well, excuse me, but the rest of us can't even find a site at that URL - how is anyone buying anything?

And finally, if indeed this is a misjudgement, then autolink has already been invited back to explain why this apparent leger de main is in fact an honest mistake or a valid act of hijacking - so far, not a peep.

I am willing to reserve judgement for the time being but I won't deny it's not looking good...