EZTV.it Domain Compromised By ‘Scammers’

[Ernesto]

Earlier this year EZTV ran into trouble with the Italian domain name registry NIC.it over some paperwork.

Facing a looming confiscation of the EZTV.it domain name, they saw no other option than to switch to a new home. Since then the site has been serving its torrents from the EZTV.ch domain.

Perhaps out of habit or because they don’t know any better, many users still visit the EZTV.it domain. For a few weeks the .IT domain was banned by the registry so visitors eventually had to find EZTV’s new home.

This week the position changed. Starting a few days ago the .IT domain became accessible again, showing what appears to be the real EZTV website. However, this surprise comeback is far from official.

TorrentFreak has learned that a domain squatter took over the popular name after the registry surprisingly listed it for sale again. In the domain whois EZTV’s “EZCLOUD LIMITED” is listed as the registrant, but EZTV’s Novaking told TF that they are not in control of the domain.

“Scammers got it a while ago,” Novaking tells TF. “Oddly this happened through a domain snapback company in Italy.”

What makes the situation particularly problematic is that the official ETZV domain has been suffering downtime for more than a week. This means that the .IT domain is being visited even more than before, especially because it even lists recent torrents.

While there are no signs of malicious practices yet, some users noted worrying problems with the “compromised” .IT domain. For example, the login doesn’t work and people are randomly logged into other people’s accounts. As a result, strangers can read people’s private messages and access their personalized show lists.

Many users have spotted the problems and report their experiences in the forums on the compromised site.

“Identity crisis here too. I’m ganen89, pedralbes, KathyCuty and some other random people. When i go to ‘list my shows’ it is a totally different list of series. On the ‘Show watched’ [there’s a] totally different list,” one user reports.

For now it’s unclear how this can occur. It’s unlikely that the database has been hacked as the .IT domain still points to a server owned by the real EZTV. In any case, users are being warned to avoid the compromised domain at all costs.

The official EZTV team is still working on resolving the problems at their end and hope to have the official site running smoothly again in the near future.

Originally Published: Fri, 13 Mar 2015 18:40:18 +0000
source

[Ernesto]

Earlier this year EZTV ran into trouble with the Italian domain name registry NIC.it over some paperwork.

Facing a looming confiscation of the EZTV.it domain name, they swiftly moved to a new home using the Swiss based EZTV.ch.

Soon after the EZTV.it domain was suspended, but in a surprise move it became available again after a few weeks. Unfortunately for the EZTV crew it was quickly scooped up by domain squatters.

The domain was allegedly listed for sale at an auction where the company EZCLOUD LIMITED (Ezcloud is the same name the real EZTV used in the Whois previously) bought it for a five digit number. They then relaunched the domain using it as a reverse proxy to serve content from the original domain, with their own ads.

Instead of making clear that the site was a proxy, the owners removed all references to the real EZTV.ch domain, probably in an effort to keep the traffic on board.

TF reached out to EZCLOUD director Hernandez Dominguez Emmanuel, hoping to find out more about their motivation, and we were informed that they initially planned to make a deal with the real EZTV.

Emmanuel sent a business proposal to EZTV offering them a percentage of the profit they made from advertisements. The other option was to buy the domain back for a larger amount, but a partnership was preferred.

“The business proposal to Novaking was straightforward: he pays us a slightly bigger amount than we have paid at the auction or we somehow partnership by uniting both entities: eztv.it and eztv.ch and we will earn in the course of the next months by percentage of the ads revenues,” Emmanuel tells TF.

EZTV’s Novaking was not interested in making a deal and made that very clear in a short reply.

“Have no idea why you are trying to sound like business oriented people. I have no interest in making some crappy deals with you simply being a reverse proxy. Have fun with the domain,” Novaking wrote in a quick response.

In addition, EZTV banned IP-address of the impostor site so it could no longer act as a reverse proxy. However, this ban was circumvented and ETZV.it still displays recent torrents via a workaround.

According to Novaking it’s obvious that the impostors have bad intentions. They want people to believe that they’re the real site so they can make a profit.

“They basically want us to do all the work and they make money from it,” Novaking informs TF.

To warn people he posted a note on the official site urging users to avoid the old domain.

“The scammers who own eztv.it appear to be trying to fool users to think they are the main website,” the warning reads.

“Take caution, and stop using their website, the correct domain is eztv.ch. Please inform your family and friends who may still be using the old domain,” it adds.

In response, EZCLOUD posted a message on the site inaccurately claiming that they are the real deal.

“The correct domain address is eztv.it as always! Please inform your family and friends who may be using other cloned domains.”





Considering the rift between both sides it seems unlikely that EZTV.it will be returned to its original owner anytime soon. For now it remains in possession of the impostors, something people should bear in mind.

Source: TorrentFreak, for the latest info on copyright, file-sharing, torrent sites and anonymous VPN services.


Originally Published: Fri, 03 Apr 2015 18:27:15 +0000
source