People false impersonating me to gain access to my accounts, anybody else experiencing the same?

[Shap]

In the past few months, and especially this week, there have been people trying to get access to my various accounts. They are pretending to be me and ask for my password to be reset and sent to their gmail account. Anybody else experiencing this as well? I can't imagine I'm the only one.

[seeandsee]

maybe they think they can gain some info about you, if that is personal. If they are looking for cash, then probably other people are at attack too

[Shap]

Originally Posted by seeandsee

maybe they think they can gain some info about you, if that is personal. If they are looking for cash, then probably other people are at attack too

They have my info. They are using my info to try to gain access to my affiliate accounts, hosting accounts, domain accounts, billing accounts you name it. They've been unsuccessful so far (fingers crossed). It comes in waves they'll try every account for a week then leave for a few weeks. I've got one of the guy's ip addresses.

[Agent 488]

lame ...........

[CYF]

it happens a lot. I've seen it happen quite a bit with domain accounts, such as a Godaddy account. They'll reset the password, login, and then either sell your domains or transfer them to their other accounts.

Don't use easy to guess security questions. If it asks you for your first pet's name, you can enter a random string instead of "fluffy"

[Shap]

Originally Posted by CYF

it happens a lot. I've seen it happen quite a bit with domain accounts, such as a Godaddy account. They'll reset the password, login, and then either sell your domains or transfer them to their other accounts.

Don't use easy to guess security questions. If it asks you for your first pet's name, you can enter a random string instead of "fluffy"

Yeah it sucks that domain registrars displayed so much information in public. They are forcing me to set everything to privacy. You have to have a valid individual, email, address and phone number when you register a domain all information they are now using to try to fish and get access to our stuff.

[NickB.]

You are famous shap
I think I get 10+ false shaps signing up to our programs weekly haha

[Klen]

Will the real shap please stand up ?

[kane]

I haven't had this exact thing happen, but I had a one time friend steal my identity and run up about 40K worth of credit in my name. That was not a lot of fun.

If you haven't already contact the three major credit bureaus and put fraud protection on your credit. You give them a phone number then if anyone tries to open up a credit account or buy something that involves a credit check in your name they have to call that number and verify that it is you before they make the deal.

If they are looking for info on you, they are probably planning something shady so this might help protect you.

[NickB.]

Originally Posted by kane

I haven't had this exact thing happen, but I had a one time friend steal my identity and run up about 40K worth of credit in my name. That was not a lot of fun.

If you haven't already contact the three major credit bureaus and put fraud protection on your credit. You give them a phone number then if anyone tries to open up a credit account or buy something that involves a credit check in your name they have to call that number and verify that it is you before they make the deal.

If they are looking for info on you, they are probably planning something shady so this might help protect you.

Damn thats fucked up

[Phoenix]

i see your name come up on my golf site keywords almost daily...people are seeking you out online

[lagwagon]

Shap whats your email addy again? mrshap :at:twistys.com ? i would like to compare the ip address you have.

[lagcam]

Originally Posted by Shap

Yeah it sucks that domain registrars displayed so much information in public. They are forcing me to set everything to privacy. You have to have a valid individual, email, address and phone number when you register a domain all information they are now using to try to fish and get access to our stuff.

Maybe the lesson here is don't be a cheap ass and use privacy or corporate details with ALL your domains. No offence, but you are asking for trouble tring to save money there.

[CYF]

Originally Posted by Shap

Yeah it sucks that domain registrars displayed so much information in public. They are forcing me to set everything to privacy. You have to have a valid individual, email, address and phone number when you register a domain all information they are now using to try to fish and get access to our stuff.

another tip on domain registrations. Don't use a gmail/hotmail/etc free account, use a real email address, and make sure it's a different email address than the one displayed in whois.

I have an email address at a domain that I own and the only thing it's used for is my accounts at registrars.

[Shap]

Originally Posted by lagcam

Maybe the lesson here is don't be a cheap ass and use privacy or corporate details with ALL your domains. No offence, but you are asking for trouble tring to save money there.

I never did it to be cheap. I just have had so many domains registered for so long I had never seen the need for privacy before now.

[Shap]

Originally Posted by CYF

another tip on domain registrations. Don't use a gmail/hotmail/etc free account, use a real email address, and make sure it's a different email address than the one displayed in whois.

I have an email address at a domain that I own and the only thing it's used for is my accounts at registrars.

Yep going to be going through and changing all information and going to use private emails and phone numbers that nobody has. Just a pain in the ass.

[Shap]

Originally Posted by lagwagon

Shap whats your email addy again? mrshap :at:twistys.com ? i would like to compare the ip address you have.

yep that's it

[moeloubani]

You would be surprised how many people have their secret question set to something like what is my favorite color or what color is my hair? Where there is only like 3 or 4 options. It might be someone looking for that kind of thing but for the most part as long as you use security questions with random answers and long passwords you should be fine.

Just today I go to login to Facebook (and I'm from Guelph, Ontario) and a thing pops up and asks me if I logged in from Texas today. Someone using Firefox logged into my account from Texas and it told me and I had to change all my stuff. Who or why? I have no idea!

[Shap]

Originally Posted by moeloubani

You would be surprised how many people have their secret question set to something like what is my favorite color or what color is my hair? Where there is only like 3 or 4 options. It might be someone looking for that kind of thing but for the most part as long as you use security questions with random answers and long passwords you should be fine.

Just today I go to login to Facebook (and I'm from Guelph, Ontario) and a thing pops up and asks me if I logged in from Texas today. Someone using Firefox logged into my account from Texas and it told me and I had to change all my stuff. Who or why? I have no idea!

Wow. Major props to facebook for implementing that into their system.

[Profits of Doom]

Originally Posted by Shap

They have my info. They are using my info to try to gain access to my affiliate accounts, hosting accounts, domain accounts, billing accounts you name it. They've been unsuccessful so far (fingers crossed). It comes in waves they'll try every account for a week then leave for a few weeks. I've got one of the guy's ip addresses.

Is it a Michigan IP address? There is a many times banned scumbag on here that is infamous for that shit...

[Shap]

Originally Posted by Profits of Doom

Is it a Michigan IP address? There is a many times banned scumbag on here that is infamous for that shit...

Nope not michigan

[Roald]

Not exactly the same but there are guys using our name to get the models to send them videos and stuff.

[Fletch XXX]

internets is dangerous like the hood when you blinging

[TurboAngel]

I had someone do the same thing and ended up being able to walk right into my host and steal everything from pics to all of my domains, they then sold everything right here on GFY.


One guy here gave me back 3 domains he had paid for but the best domain was sold for $600 and that guy wanted me to pay him $1200 to get it back. I thought that was fucked up. The guy got into epass as well and took all the $$ there. It was a bad time for sure.

[tranza]

I had a few domains stolen from Godaddy that way acrually. What sucks is that they transfered it to Moniker, and even Moniker wouldn't do anything about it.

Took me 2 weeks to get them back.

[kazbalah]

lol that sucks dude, better check your security.

If you have the persons IP you should report it to some cyber crime division, im sure they will be interested to hear about it.

[marketsmart]

Originally Posted by Shap

In the past few months, and especially this week, there have been people trying to get access to my various accounts. They are pretending to be me and ask for my password to be reset and sent to their gmail account. Anybody else experiencing this as well? I can't imagine I'm the only one.

how can you prove that you are actually you...

maybe you are fishing for info's now...

can you prove that you are the real shap?

if not, i call for banning....





.

[CDSmith]

Crooks these days are getting more rabid and more creative it seems. Like those people who put some gizmo into the card slot of ATMs and then gain access to your account once you punch in your PIN #, etc. Or the assholes who work at some retail outlet or gas station etc. who double swipe your card using their own gadget as well as the company's, then later raid your account.

Several such operations have been shutdown here in Winnipeg over the past year, at least two doing the ATM thing and several more who were doing the double card swipe thing. Lots of arrests, but I'm doubtful that the prison sentence (if any) is long enough to discourage anyone.

[Shap]

Just found out the same guy got someone else I know. Damn

[Barefootsies]

Originally Posted by kazbalah

If you have the persons IP you should report it to some cyber crime division, im sure they will be interested to hear about it.

That is correct. They are a division of the FBI, although they also deal with international cyber crimes outside of the U.S. as well. When you contact them, you want to make sure you provide as many details, and screen shots as possible. Get yourself some nice MX tools. Website.

There is a known gang of guys that hang out on GFY from CT, Maryland areas that also do this kind of stuff. Making fake profiles to data mine and try and get details, sending IM threats against my family, impersonating me on chat/email hitting up people for various things, trying to do mass bulk orders of shit and send to my office, among other things.

I have been referring their bullshit to the FBI, and law enforcement, for a few years now. Some people take their personal message board vendettas, and agendas, way too far. Especially when that shit gets into trying to fuck people's business, and family or personal threats of harm.

[fuzebox]

I impersonate Shap all the time, mostly to get restaurant reservations and free hotel upgrades.

[Paper_Amar]

Originally Posted by fuzebox

I impersonate Shap all the time, mostly to get restaurant reservations and free hotel upgrades.

I do it to get VIP at Menudo concerts.