Re: [RE-wrenches] Hijacked Website
Hey Dan, I have seen scammers do this before they then usually try to order a bunch of stuff posing as you. You can usually go to https://whois.net/ and type in the web address to see who the account is registered to then contact the domain host and file a complaint to get them taken down. Andrew Perkins Greenwired P: 707-923-2001 F: 707-923-2077 1150 #1 Evergreen Rd Redway, CA 95560 www.greenwired.com Description: signature From: RE-wrenches [mailto:re-wrenches-boun...@lists.re-wrenches.org] On Behalf Of Foxfire Energy Sent: Monday, April 08, 2019 1:33 PM To: RE-wrenches Subject: Re: [RE-wrenches] Hijacked Website The saga continues.. We were just contacted by Family Services from WV seeking payroll info on a fictitious employee who claimed to work for us but gave contact info for the website (Foxfire-Energy-Corporation).. They did give them our phone #.. They're out there folks.. db _ From: re-wrenches-boun...@lists.re-wrenches.org on behalf of Foxfire Energy Sent: Wednesday, April 30, 2014 7:16 PM To: RE-wrenches Subject: [RE-wrenches] Hijacked Website Merry Mud season everyone, We just got the heads up from NABCEP that our website (www.Foxfire-Energy.com) has been hijacked by a fictitious renewable energy organization (www.Foxfire-Energy-Corporation.com). Seems they copied our web site info and posted it on their site with minor modification. a google search of their business location puts them on a dirt road in the middle of no where like three towns down. a phone call brings you to a Philippino sounding call center to a gent who identifies him self as Dutch. I want his Juggler for a chew toy for my Weinerdog. Just wondering if anyone else ran into this, and what might be our recourse. Is this the result of the end of Net Neutrality? Sorry Micheal if this is a off subject. We've worked hard to build up our industry's credibility. Irks me to see some scumbag cubicle dweller trying to cash in. Advice? Thanks db Dan Brown Foxfire Energy Corp. Renewable Energy Systems (802)-483-2564 www.Foxfire-Energy.com NABCEP #092907-44 ___ List sponsored by Redwood Alliance List Address: RE-wrenches@lists.re-wrenches.org Change listserver email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://www.mail-archive.com/re-wrenches@lists.re-wrenches.org/maillist.html List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out or update participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
The saga continues.. We were just contacted by Family Services from WV seeking payroll info on a fictitious employee who claimed to work for us but gave contact info for the website (Foxfire-Energy-Corporation).. They did give them our phone #.. They're out there folks.. db From: re-wrenches-boun...@lists.re-wrenches.org on behalf of Foxfire Energy Sent: Wednesday, April 30, 2014 7:16 PM To: RE-wrenches Subject: [RE-wrenches] Hijacked Website Merry Mud season everyone, We just got the heads up from NABCEP that our website (www.Foxfire-Energy.com<http://www.Foxfire-Energy.com>) has been hijacked by a fictitious renewable energy organization (www.Foxfire-Energy-Corporation.com<http://www.Foxfire-Energy-Corporation.com>). Seems they copied our web site info and posted it on their site with minor modification. a google search of their business location puts them on a dirt road in the middle of no where like three towns down. a phone call brings you to a Philippino sounding call center to a gent who identifies him self as Dutch. I want his Juggler for a chew toy for my Weinerdog. Just wondering if anyone else ran into this, and what might be our recourse. Is this the result of the end of Net Neutrality? Sorry Micheal if this is a off subject. We've worked hard to build up our industry's credibility. Irks me to see some scumbag cubicle dweller trying to cash in. Advice? Thanks db Dan Brown Foxfire Energy Corp. Renewable Energy Systems (802)-483-2564 www.Foxfire-Energy.com<http://www.Foxfire-Energy.com> NABCEP #092907-44 [cid:sigimg0@da9845f8fc78e582ee1b54c217eda78d] ___ List sponsored by Redwood Alliance List Address: RE-wrenches@lists.re-wrenches.org Change listserver email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://www.mail-archive.com/re-wrenches@lists.re-wrenches.org/maillist.html List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out or update participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Hi gang. If you have any questions about this post, please contact me off-list. Let's bring the list back on-topic. If you have any more suggestions, questions, or concerns for Dan about his hijacked web site, please contact him off-list. ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Dan, We have had a few similar issues with our villa rentals website, people who want to get into our business will copy all the data and photos of our catalogue and start operations. They always blame their web designer and pretend they had no idea. The site is being hosted in the US so you can file a DMCA take down notice. http://en.wikipedia.org/wiki/Digital_Millennium_Copyright_Act I believe it is being hosted on 1&1, a large US hosting company. They will respond and take it down, hosting companies don't like trouble. Here is a contact for the domain. I would call him. I would also email him and copy ab...@1and1.com Domain Name: Foxfire-Energy-Corporation.com Registry Domain ID: Registrar WHOIS Server: whois.1und1.info Registrar URL: http://1and1.com Updated Date: 2014-03-10 00:00:00 Creation Date: 2014-03-01 00:00:00 Registrar Registration Expiration Date: 2015-03-01 00:00:00 Registrar: 1&1 Internet AG Registrar IANA ID: 83 Registrar Abuse Contact Email: ab...@1and1.com Registrar Abuse Contact Phone: Reseller: Domain Status: clientTransferProhibited Registry Registrant ID: Registrant Name: Christian Crawford Registrant Organization: Foxfire Energy Corporation Registrant Street: 141 Howland Rd 141 Registrant City: Brattleboro Registrant State/Province: VT Registrant Postal Code: 05301 Registrant Country: US Registrant Phone: +1.4792086701 Registrant Phone Ext: Registrant Fax: Registrant Fax Ext: Registrant Email: speaderva...@yahoo.com. ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Dan (Brown), Some suggestions. #1: In the unlikely chance the website might suddenly go away, get screen shots of everything ASAP. Download and keep copies of each page of the website. This can be done using the "Save Page As" option (or equivalent) under "File". Save all downloaded pages in a separate directory, and make copies onto a thumb drive. Do not edit or alter the page content in any manner. #2: The scammers allege they're a "Corporation". Check with your state's Corporation Commission (or equivalent). Claiming "corporate" status when they aren't incorporated is generally an actionable offense by the State. At a minimum, they can be forced to cease using the "Corporation" aspect. Action of this nature will be a matter of public record. Subsequently, you could then submit an FOI application to the State to find out whom the State served. #3: Since you ARE incorporated, this is an infringement on your registered company name with the State of Vermont. This too is actionable by the State, but may require attorney participation on your part. #4: Dan FInk's comment pertaining to [in essence] the perpetrators' likely action to attempt to force, cajole, or extort you into buying the domain is very plausible. Sad as it is .. you're going to have to invest some time and money to get a handle on this. Good Luck. Dan (Lepinski) Ever get the impression there are too many "Dans" involved in this thread? ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Dan, Here is what i could find searching the phone number, it might be spoofed. Good luck, Bob Ellison <http://www.cmrdesign.net/exchange/4792086> 479-208 Free Phone Number Information. Who called you from ... * www.cmrdesign.net/exchange/4792086 - Proxy - <https://ixquick-proxy.com/do/highlight.pl?l=english&c=hf&cat=web&q=47920867 01&rl=NONE&rid=LJLNTSTKNMPN&hlq=https://ixquick.com/do/search&mtlanguage=eng lish&u=http:%2F%2Fwww.cmrdesign.net%2Fexchange%2F4792086> Highlight 4792086701: Data Avail. Van Buren, AR: CRAWFORD: 53,000: CELL PHONE: 8/31/2003: 0: 4792086374: Data Avail. Van Buren, AR: CRAWFORD: 53,000: CELL PHONE: 8/31/2003: 0 ... From: re-wrenches-boun...@lists.re-wrenches.org [mailto:re-wrenches-boun...@lists.re-wrenches.org] On Behalf Of Roy Butler Sent: Wednesday, April 30, 2014 7:36 PM To: RE-wrenches Subject: Re: [RE-wrenches] Hijacked Website Dan, That's freaky! I would have known right away this wasn't yoursfar too corporate looking ;-) Seriously, here's the registration info I found.I bolded what I think might be a help to you: Registrant Email: speaderva...@yahoo.com Registry Admin ID: Admin Name: Christian Crawford Admin Organization: Foxfire Energy Corporation Admin Street: 141 Howland Rd 141 Admin City: Brattleboro Admin State/Province: VT Admin Postal Code: 05301 Admin Country: US Admin Phone: +1.4792086701 Admin Phone Ext: Admin Fax: Admin Fax Ext: Admin Email: speaderva...@yahoo.com Registry Tech ID: Tech Name: Hostmaster ONEANDONE Tech Organization: 1&1 Internet Inc. Tech Street: 701 Lee Rd. Tech City: Chesterbrook Tech State/Province: PA Tech Postal Code: 19087 Tech Country: US Tech Phone: +1.8774612631 Tech Phone Ext: Tech Fax: +1.6105601501 Tech Fax Ext: Tech Email: hostmas...@1and1.com Roy Butler NABCEP Certified Solar PV InstallerR NYSERDA eligible PV & wind installer IREC Certified Master TrainerT for Small Wind Installer Four Winds Renewable Energy, LLC 8902 Route 46, Arkport, NY 14807 607-324-9747 www.four-winds-energy.com Join us at the 10th Annual Small Wind Conference A Gathering of Installers, Manufacturers, Dealers, & Distributors June 17 and 18, 2014 in Stevens Point, Wisconsin www.smallwindconference.com Although no trees were killed in the sending of this message, a large number of electrons were terribly inconvenienced. On 4/30/2014 7:16 PM, d...@foxfire-energy.com wrote: Merry Mud season everyone, We just got the heads up from NABCEP that our website (www.Foxfire-Energy.com) has been hijacked by a fictitious renewable energy organization (www.Foxfire-Energy-Corporation.com). Seems they copied our web site info and posted it on their site with minor modification. a google search of their business location puts them on a dirt road in the middle of no where like three towns down. a phone call brings you to a Philippino sounding call center to a gent who identifies him self as Dutch. I want his Juggler for a chew toy for my Weinerdog. Just wondering if anyone else ran into this, and what might be our recourse. Is this the result of the end of Net Neutrality? Sorry Micheal if this is a off subject. We've worked hard to build up our industry's credibility. Irks me to see some scumbag cubicle dweller trying to cash in. Advice? Thanks db Dan Brown Foxfire Energy Corp. Renewable Energy Systems (802)-483-2564 www.Foxfire-Energy.com NABCEP #092907-44 ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org _ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4570 / Virus Database: 3931/7413 - Release Date: 04/29/14 _ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4570 / Virus Database: 3931/7413 - Release Date: 04/29/14 ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Scary stuff, Dan -- I have had 100% success with cease and desist letters regarding copyrighted stolen web content from my sites. Letter #2 from a lawyer has always done the trick with recalcitrant thieves. However I see that your website does not have a copyright notice on the bottom of every page, the thieves web page does, so essentially they are claiming ownership of your material. I would have your webmaster put this in *immediately.* Was NABCEP willing to file a cease-and-desist, as the thieves claim they are NABCEP certified? I would also contact their internet service provider. I can't figure out how they mean to make money with this other than Facebook.there are no ads, etc. I suspect they are going to try and pressure you to buy the domain name from themthis has happened to me before. At least they didn't steal your photos. Thanks Michael for leaving this thread up - websites are an important part of the RE business. Dan Fink, Executive Director; Otherpower Buckville Energy Consulting Buckville Publications LLC NABCEP / IREC accredited Continuing Education Providers 970.672.4342 ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Dan, I’ve seen this before and you could take it as a bit of a compliment, though a backhanded one. I’ve seen this before with other successful commercial sites, most specifically one called shipmyvehicle.com that is the best worldwide vehicle shipping service. They were totally hijacked, like you were, but with a few fake photos inserted into the site. It’s usually done by hackers operating from numerous overseas locations, often in former East Bloc countries. I worked with that site to help document it to the FBI but after all the work we did to document it the FBI could do nothing about it. Basically the field office in their area told them that by the time they start investigating the outfits just shut down in one country and open up in another, seamlessly. Sad to say there is likely nothing you can do to introduce your dog to his jugular. Tom From: d...@foxfire-energy.com Sent: Wednesday, April 30, 2014 1:16 PM To: RE-wrenches Subject: [RE-wrenches] Hijacked Website Merry Mud season everyone, We just got the heads up from NABCEP that our website (www.Foxfire-Energy.com) has been hijacked by a fictitious renewable energy organization (www.Foxfire-Energy-Corporation.com). Seems they copied our web site info and posted it on their site with minor modification. a google search of their business location puts them on a dirt road in the middle of no where like three towns down. a phone call brings you to a Philippino sounding call center to a gent who identifies him self as Dutch. I want his Juggler for a chew toy for my Weinerdog. Just wondering if anyone else ran into this, and what might be our recourse. Is this the result of the end of Net Neutrality? Sorry Micheal if this is a off subject. We've worked hard to build up our industry's credibility. Irks me to see some scumbag cubicle dweller trying to cash in. Advice? Thanks db Dan Brown Foxfire Energy Corp. Renewable Energy Systems (802)-483-2564 www.Foxfire-Energy.com NABCEP #092907-44 ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4577 / Virus Database: 3931/7421 - Release Date: 04/30/14 ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
Re: [RE-wrenches] Hijacked Website
Dan, That's freaky! I would have known right away this wasn't yoursfar too corporate looking ;-) Seriously, here's the registration info I found.I bolded what I think might be a help to you: Registrant Email: speaderva...@yahoo.com Registry Admin ID: Admin Name: Christian Crawford Admin Organization: Foxfire Energy Corporation Admin Street: 141 Howland Rd 141 Admin City: Brattleboro Admin State/Province: VT Admin Postal Code: 05301 Admin Country: US Admin Phone: +1.4792086701 Admin Phone Ext: Admin Fax: Admin Fax Ext: Admin Email: speaderva...@yahoo.com Registry Tech ID: Tech Name: Hostmaster ONEANDONE Tech Organization: 1&1 Internet Inc. Tech Street: 701 Lee Rd. Tech City: Chesterbrook Tech State/Province: PA Tech Postal Code: 19087 Tech Country: US Tech Phone: +1.8774612631 Tech Phone Ext: Tech Fax: +1.6105601501 Tech Fax Ext: Tech Email: hostmas...@1and1.com Roy Butler NABCEP Certified Solar PV Installer® NYSERDA eligible PV & wind installer IREC Certified Master Trainer™ for Small Wind Installer Four Winds Renewable Energy, LLC 8902 Route 46, Arkport, NY 14807 607-324-9747 www.four-winds-energy.com Join us at the 10th Annual Small Wind Conference A Gathering of Installers, Manufacturers, Dealers, & Distributors June 17 and 18, 2014 in Stevens Point, Wisconsin www.smallwindconference.com Although no trees were killed in the sending of this message, a large number of electrons were terribly inconvenienced. On 4/30/2014 7:16 PM, d...@foxfire-energy.com wrote: Merry Mud season everyone, We just got the heads up from NABCEP that our website (www.Foxfire-Energy.com) has been hijacked by a fictitious renewable energy organization (www.Foxfire-Energy-Corporation.com). Seems they copied our web site info and posted it on their site with minor modification. a google search of their business location puts them on a dirt road in the middle of no where like three towns down. a phone call brings you to a Philippino sounding call center to a gent who identifies him self as Dutch. I want his Juggler for a chew toy for my Weinerdog. Just wondering if anyone else ran into this, and what might be our recourse. Is this the result of the end of Net Neutrality? Sorry Micheal if this is a off subject. We've worked hard to build up our industry's credibility. Irks me to see some scumbag cubicle dweller trying to cash in. Advice? Thanks db Dan Brown Foxfire Energy Corp. Renewable Energy Systems (802)-483-2564 www.Foxfire-Energy.com NABCEP #092907-44 ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org ___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
[RE-wrenches] Hijacked Website
Merry Mud season everyone, We just got the heads up from NABCEP that our website (www.Foxfire-Energy.com) has been hijacked by a fictitious renewable energy organization (www.Foxfire-Energy-Corporation.com). Seems they copied our web site info and posted it on their site with minor modification. a google search of their business location puts them on a dirt road in the middle of no where like three towns down. a phone call brings you to a Philippino sounding call center to a gent who identifies him self as Dutch. I want his Juggler for a chew toy for my Weinerdog. Just wondering if anyone else ran into this, and what might be our recourse. Is this the result of the end of Net Neutrality? Sorry Micheal if this is a off subject. We've worked hard to build up our industry's credibility. Irks me to see some scumbag cubicle dweller trying to cash in. Advice? Thanks dbDan BrownFoxfire Energy Corp.Renewable Energy Systems(802)-483-2564www.Foxfire-Energy.comNABCEP #092907-44___ List sponsored by Home Power magazine List Address: RE-wrenches@lists.re-wrenches.org Change email address & settings: http://lists.re-wrenches.org/options.cgi/re-wrenches-re-wrenches.org List-Archive: http://lists.re-wrenches.org/pipermail/re-wrenches-re-wrenches.org List rules & etiquette: www.re-wrenches.org/etiquette.htm Check out participant bios: www.members.re-wrenches.org
