Page 1 of 1

AutoHotkey.net domain hijacked

Posted: 12 May 2018, 23:50
by GeekDude
I haven't seen much public discussion about this other than in passing in the chat. I'm not sure if anyone on the forum is aware, but autohotkey.net links are redirecting users to sketchy pages with malicious content.

Image
Image
Image


The WHOIS information for the domain shows that the nameservers have been set to those of a site parkingcrew.net, which calls itself legitimate but however it's configured seems to be illegitimate.

Code: Select all

   Domain Name: AUTOHOTKEY.NET
   Registry Domain ID: 152334794_DOMAIN_NET-VRSN
   Registrar WHOIS Server: whois.namecheap.com
   Registrar URL: http://www.namecheap.com
   Updated Date: 2018-02-10T21:03:34Z
   Creation Date: 2005-04-22T21:10:12Z
   Registry Expiry Date: 2019-04-22T21:10:12Z
   Registrar: NameCheap Inc.
   Registrar IANA ID: 1068
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.6613102107
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS1.PARKINGCREW.NET
   Name Server: NS2.PARKINGCREW.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-05-13T04:20:15Z <<<
NameCheap seems to think the domain is available for purchase, for a hefty price.

Image


Thoughts?

Re: AutoHotkey.net domain hijacked

Posted: 13 May 2018, 03:22
by Xtra
Isn't this old news? In the old forum all the links to this got fixed to redirect to a safe ahk page.

Re: AutoHotkey.net domain hijacked

Posted: 13 May 2018, 05:04
by Guest
Thread + interesting post to possibly get it back https://autohotkey.com/boards/viewtopic ... 88#p203588

Re: AutoHotkey.net domain hijacked

Posted: 13 May 2018, 05:07
by nnnik
Xtra some of the signatures contain image links that point to AutoHotkey.net and that will redirect before the Javascript even takes effect.

Re: AutoHotkey.net domain hijacked

Posted: 13 May 2018, 11:22
by tank
Let's see if we can raise the money

Re: AutoHotkey.net domain hijacked

Posted: 13 May 2018, 14:35
by tank
I have updated the database to replace URL like http://autohotkey.net with a different one that wont work right now but could if i get time to plug in the subdomain ahknet

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:20
by GeekDude
I don't know about anyone else, but I'd be willing to donate toward a fund for reclaiming the domain

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:27
by nnnik
Same didn't have the chance last time ( by the time I got paypal you guys already closed the link )
Also where is the link for donating again?

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:29
by Guest
Personally I wouldn't like to reward bad people for bad behaviour so unless it can be transferred as outlined in the other thread without paying for it I would let them choke on it - Google will drop the .net from their search results as it is obviously spammy - if the old database records can be edited to actually remove the .net links (just link them to the thread here with the archive links) they will have virtually no traffic.

Surely there is at least one AutoHotkey member that can edit a database?

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:36
by GeekDude
Google and the AutoHotkey forum are not the only places that link to ahk.net though. There are numerous other links online that would need to be changed which are out of control of any staff here, and I'd bet there are links offline embedded into various scripts people have downloaded. One such example would be HotKeyIt's _struct library.

Also, administration willing, it'd be nice to give power users a place to host their scripts and resources like it was used for in the past.

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:46
by nnnik
The money will go to reclaiming the domain and not by paying the price mentioned above.

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:51
by Guest
As long as AutoHotkey doesn't link to the spammy site its fine I think, no need to edit the internet. AutoHotkey . net had its place at the time but now that it so much easier to host files on public open source repositories (github/lab/bitbucket et al) and dropbox I don't think there is a particular need for it any longer. Staff's time is already limited, adding another think to manage won't help (the old . net was hacked a few times as you may recall, this can happen again if you have "many" users connecting via FTP for example (just another attack vector)).

I would edit the old archived database and leave it at that.

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 09:52
by Guest
nnnik wrote:The money will go to reclaiming the domain and not by paying the price mentioned above.
Ah, that sounds better :-) :clap:

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 14:25
by tidbit
I remember when the site wasn't 'hijacked'. no one owned it, for a good couple weeks. I think we even had a discussion about gabbing it. but it was less than $20 back then ($16, iirc). guess it's the price you (not us, just anyone in general) pay for not taking the first 'offer' :P

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 16:37
by derz00
nnnik wrote:Same didn't have the chance last time ( by the time I got paypal you guys already closed the link )
Also where is the link for donating again?
bottom of this page. Not very visible, quite modest

Re: AutoHotkey.net domain hijacked

Posted: 15 May 2018, 18:16
by tank

Re: AutoHotkey.net domain hijacked

Posted: 18 May 2018, 09:18
by joedf
I feel we should get the domain back for sure to avoid misleading new users but the price is not right :(