My Blog Has Been Hacked - Help!

Replies to This Discussion

Permalink Reply by Dan on June 9, 2009 at 5:14am

It sounds like someone has changed the DNS settings for your domain. I would suggest reporting it to Blogger and perhaps also posting a message in their help group.

• ▶ Reply

Permalink Reply by DShan on June 9, 2009 at 4:00pm

Yeah, definitely report it to Blogger. Note; if they got your email/pwd combo they have access to all your Google Accounts.

Right away I'd change your pwd and your pwd question. It sounds like Blogger's had this problem before.

Let us know if you need help. There's some Tech Gurus here that could probably help.

• ▶ Reply

Permalink Reply by Nick Tabick on June 9, 2009 at 7:11pm

A quick check with WHOIS shows that your domain is now in the possession of one Girollet Christophe (or someone he represents). The (shortened to get rid of all the explanatory text) version is appended to the end of this post. You can try contacting him at the e-mail address below if you feel it will do any good, but I don't think you'll find this gentleman a friendly fellow.

I would suggest contacting GoDaddy and seeing if you can plead your case to them, though. They might ask for some proof that you were the original owner and that the domain was taken forcibly, so you will want to make sure you have some documentation stating something to that effect (a credit card bill with a line item for the domain, an invoice from Google/Blogger or whoever you purchased the domain with, etc.).

If you'll take a look at the WHOIS info below, I'd like to point out that the update time says June 2. This is probably the day the domain was originally taken from you (the name was probably changed, for starters, to make it seem more legitimate in a transfer). Try to think of anything suspicious that may have happened that day and maybe you can go from there. And, like DShan said, change the passwords to any accounts that might have been related to this (as well as any other accounts that you used the same password on).

Whatever happens, I wish you luck in getting your domain back. This probably isn't going to be an easy process.

---

Whois Domain Name: MARGOTTOBED.COM Registrar: GODADDY.COM, INC. Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: CHRIS.HOST.E-M.FR
Name Server: NS4.E-M.FR
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 02-jun-2009
Creation Date: 17-apr-2008
Expiration Date: 17-apr-2010

[snip]

Registrant:
girollet christophe
residence le clos d''azur
la motte, paca 83920
France

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: MARGOTTOBED.COM
Created on: 16-Apr-08
Expires on: 16-Apr-10
Last Updated on: 02-Jun-09

Administrative Contact:
christophe, girollet cgirol@wanadoo.fr
residence le clos d''azur
la motte, paca 83920
France
0620252910 Fax --

Technical Contact:
christophe, girollet cgirol@wanadoo.fr
residence le clos d''azur
la motte, paca 83920
France
0620252910 Fax --

Domain servers in listed order:
CHRIS.HOST.E-M.FR
NS4.E-M.FR

• ▶ Reply

Permalink Reply by MargotToBed on June 10, 2009 at 1:03am

thank you so much, this post has been HUGELY more helpful than anywhere else I've tried on the web.

I'll first try contacting this person, unfortunately i don't have any kind of documents from when I purchased the domain.

• ▶ Reply

Permalink Reply by DShan on June 10, 2009 at 1:07am

Definitely hammer GoDaddy hard.

• ▶ Reply

Permalink Reply by Nick Tabick on June 10, 2009 at 12:50pm

I'll see what I can do to locate additional information. I can't promise anything, though.

• ▶ Reply

Permalink Reply by cooper on June 9, 2009 at 8:41pm

Yikes it does look like a godaddy problem, though my blog back when I had it at blogspot was hacked twice - which is why I left - this looks like a different problem. Does your blog come up with you blogspot name?

• ▶ Reply

Permalink Reply by David Stehle on June 9, 2009 at 8:53pm

Everything I would suggest doing I think has already been said. But, like DShan mentioned, there are a few of us tech gurus on 20SB that would be happy to help you out if you need any more advice.

Good luck! And let us know how it turns out.

• ▶ Reply

Permalink Reply by nicopolitan on June 10, 2009 at 12:28pm

Yeah most of what I would have said has already been said.

But after getting the domain back, you should probably hack-proof your code. Let us know if you'd like some help with that.

Are you still able to log into your Blogger dashboard? There may be some recourse there in the way of reclaiming your subdomain (margottobed.blogspot.com) so that you wouldn't have the redirect to that separate domain.

• ▶ Reply

Permalink Reply by MargotToBed on June 11, 2009 at 1:21pm

i feel an infinite loop coming on, just got this back from godaddy:

Support Staff Response
Dear Margot,

Thank you for contacting Online Support.

I apologize, but while your domain name is registered with us, your site is hosted by a third party. You will need to contact your hosting company on this issue. Sorry for any inconvenience this may cause.

Please let us know if we can assist you in any other way.

Sincerely,

Anne P.
Online Support Technician

• ▶ Reply

Permalink Reply by Nick Tabick on June 11, 2009 at 1:27pm

What did you send them originally?

• ▶ Reply

Permalink Reply by DShan on June 11, 2009 at 1:46pm

And the host company would be Blogger/Google, yes?

• ▶ Reply

• ‹ Previous
• 1
• 2
• Next ›
• Page