MH123
11-13-2006, 06:46 AM
I got two Registerfly login notifications, they were from another country. Nothing has been changed as far as I can tell, I've changed the password and contacted RegFly, but am still worried that if they were real logins, how my password has been found. Has anyone had same thing happening recently?
Dan541
11-13-2006, 07:19 AM
Change your password and make sure all your contact information is valid.
In addition I recommend Transferring away from RegisterFly there are ALOT of bad reviews lately.
Stan Marsh
11-13-2006, 10:34 AM
In addition I recommend Transferring away from RegisterFly
VERY sound advice, I must add.
MH123
11-14-2006, 07:23 AM
Thanks for replies. This is really strange case, it had been about a month since my last login, if it was a keylogger, why to wait for so long and why they haven't logged in any other accounts I have and use regularly. If it was malicious 'attack', why nothing was changed. Or could it be that RF sent notification to the wrong address? :) I scanned the only computer I've used to log in with three different programs, clean.
RegisterFly's support proved itself again, I explained what has happened and that I've changed my password already, asking could it be malfunction is their system. Reply was please change your password and e-mail address, nothing more.
Don't know if any other registrar would have checked the logs if the same IP has logged into other accounts or would they have told this to the victim customer, but maybe it really is time to move. I went there in the first place for free privacy protection, but maybe it was wrong criteria :)
busterz
11-14-2006, 04:39 PM
I got two Registerfly login notifications, they were from another country. Nothing has been changed as far as I can tell, I've changed the password and contacted RegFly, but am still worried that if they were real logins, how my password has been found. Has anyone had same thing happening recently?
Registerfly themselves can access (and will) your account in some cases for legitimate reasons.
I had the same thing twice when I had a ticket open for refunds.
Still changin' the login info frequently can't b bad.
elmister
11-14-2006, 07:36 PM
I think they are reliable enough to worry about your account being compromised
Two customers got their accounts compromised a few months ago, IPs were from USA but user-agents showed russian firefox was being used, in both cases, DNS servers for some domains were changed
Stan Marsh
11-15-2006, 09:14 AM
Registerfly themselves can access (and will) your account in some cases for legitimate reasons.
I think then the IP is 0.0.0.0. - I had this happening couple of times too.
RegisterFly's support proved itself again, I explained what has happened and that I've changed my password already, asking could it be malfunction is their system. Reply was please change your password and e-mail address, nothing more.
Yep I wanted to renew my domain with them altough it has been marked for automatic renewal. So I paid and soon the email came that this could not be renewed!
So I contacted them 5 times and 4 times paid again and now again the same reply over and over again here it is:
] Time Submitted:23:29:37
Hello why do I get the message from you:
***************
We were unable to renew the following domains in your account:
Order Number : 535*****
Domain Name : ******.com
Domain Id :
Registration Date:
======================================================
Number of names processed (1)
Responses from Customer Support
[2006-11-12] Hello,
Renewal order for domain
*******.com failed for which I have refunded into your Registerfly account. Please submit renewal order again.
Thank You.
Matthew Jones
Rapid Response Service
Registerfly.com INC
ICANN Accredited Registrar
This came now 5 times to me!
Registerfly support? What? Cheese or water ;) :eek:
RossH
11-16-2006, 04:30 PM
I just had someone login to my account which was suppose to be deleted a year ago or so:
Your Account userid [**********] was just accessed at 2006-11-14 by IP ADDRESS [66.246.72.40]
Further information is available via the reports section of the domain manager
www.RegisterFly.com
Dave Zan
11-16-2006, 11:19 PM
I also got that message. Logged in and changed my password, one can't be too
careful.
I eventually emailed registerfly about this. Believe it or not, I got a reply back like
a minute or 2 later explaining they're aware of it. :D
(I guess I'm lucky.)