Requesting Support Regarding Hacked Account

https://brickcity.rf.gd

(please specify the URL of the site on which you are experiencing the problem)

Error Message

Other Information

So its on a shared account with my friend and me, we were both working on it, and just us. then it gets hacked, the password is changed, and the email, and I cant event press forgot password cuz idk what the hacker changed it to. Then the hacker changed our site, which we were working REALLY hard on, day and night, hours and hours of work, its all gone. And we need it back, if u wanna know the old email and password to it email me for proof, and I’m only saying that to infinityfree admin.

You’ll need help from Admin to regain access to your account but Infinityfree does not keep any backups of websites so unless you have a local copy on your computer that you can restore to the hosting then sadly the site is gone

2 Likes

I saved a backup but 2 days prior to when it got hacked, so its outdated sadly…

I’m not very eager to find the hacked account and try to revert the credentials. We currently don’t record previously used email addresses, so I really have no way to tell whether I’m taking an account back from a hacker or giving it to a new one.

That said, the domain brickcity.rf.gd is not in use right now, so you can assign it to a new account and at least have the ability to restore your website. It also appears that the files that were originally there have been deleted already, so there is not much that can be recovered.

So even if I would help you recover the account, it wouldn’t help you recover the website.

So setting up a new domain and recovering the two day old backup is probably the best option right now.

And yes, two days of work will be lost, but there is simply nothing I can do about that. All I hope is that you’ve learned to make (more) frequent backups, always keep a local copy of your code, and take action to prevent your account from getting hacked.

9 Likes

if you’d like to email the previously connected email and I can respond?

And yes, the domain is taken now from who I can suspect is one of my old friends who hacked it, seeing as it’s named “landspree” on the homepage. (which is one of his sites, spreelands…)

That cannot be done since past email addresses are not logged in the system. There is no way of knowing (Least not easily) what the previous email address you used was.

I’m not sure if this just changed recently or something, but it very much is in use, connected to an IF account, and assigned to 185.27.134.208.


In any case, @Topher7lol , you should just talk to the person that took it over. Because it’s a free subdomain, there is really no way to prove it is yours.

5 Likes

Yes, as I said before,

I know who tookover my domain, and he is using it on the email I used, but he somehow changed the password and connected email, so it says the email wasn’t found in your system.

That comment was directed to Admin, not you.

But my comment to you still stands:

3 Likes

I cant contact them because they blocked me and unfriended me on all platforms we were mutual friends with. So there is no way, not even email. I also do have “somewhat” proof, because im pretty sure, on my main PC, there is a screenshot from a section on the site, called “testimonials” which has me and my friend. Although you can’t see the link, there is also a reddit post i made about it before it got hacked.

Unfortunately neither of those can be used as proof. Screenshots can very easily be faked, and there is no way to confirm that the site you linked on Reddit actually belongs to you, or if you are impersonating someone else.

You can always register a new subdomain, you might be able to get “brickcity” under a different free subdomain as well.

2 Likes

but i’m not faking anything or posing, I said he has access to the domain, and I’ve used this current name, Topher7lol everywhere, so yes, they can be used as proof, as if I was him, why would I try to fake getting it again? And the Reddit post was a teaser, nobody actually knew the site link but him, me, and my project partner.

Unfortunately there is no way to actually prove any of that. I would love to believe you, however you need to understand that there are tons of people out there just looking to acquire something out there that other people have, and will stop at nothing to do so.

Hopefully you can move on and take this as a lesson to better secure your account (Don’t use commonly guessed passwords, or the same password for every service. Don’t share your password, or write it down where others can see it. Use 2FA everywhere it is offered)

6 Likes

tell me something I could do to prove it please, I just need my site back man

Because you used a free subdomain, and IF does not store records of email changes, I’m not sure if you even can prove you had it (I certainly cannot think of anything off the top of my head).

4 Likes

:confused: I have an email from IF

This was on the previously connected email.

and if you’re able to view ticket #157169 you will see that I said “I believe my account has been suspended for no reason…etc” (similar, as I don’t remember EXACTLY what I said, but it is similar, and I’m logged out so cannot see it)

Like I said:

So I don’t know what email address to use. And please don’t bother telling me, because I won’t be able to verify that it was actually linked to that profile.

Yes, it appears the domain was re-registered by the hacker shortly after I wrote my message.

I’m sorry, but there is nothing that can be proven here.

With some companies, it would be possible to regain control over the account for example through a verification text message to your mobile number, through your configured payment method, or by checking the contact details of your account against a government ID.

However, we don’t record any of the details needed to check that. So even if you were to give us a government ID, credit card number and mobile number, we still have no way to actually link that back to your profile.

If you owned your own domain name, you could prove your ownership of the domain through the domain registrar controls, and we’d release the domain for you so you could host it on your own account (it doesn’t prove the previous website was yours, but it does prove that you own the domain name now).

Injecting fake emails into a mailbox is easy and doesn’t prove anything. And saying that your account was suspended for no reason is such an obvious thing to say that we have a knowledge base article about it.


Also, the way I understand it is that there is no “hacker” who “hacked” your account, it was just your “friend” who you shared credentials with, and chose to use those credentials to take over the account.

That’s not “hacking”, that’s just you having been careless with your credentials and giving too much access to people who couldn’t be trusted.

5 Likes

I didn’t give him any credentials, and I didn’t know it was him until a day later…

I didn’t do that tho :frowning: