• Plans & Pricing
  • Log in
  • Get started
  • WordPress Hosting
  • WordPress for Agencies
  • Become an Affiliate
  • Domain Names
  • AI Website Builder
  • Website Builder
  • Create a Blog
  • Newsletter
  • Professional Email
  • Website Design Services
  • Commerce
  • WordPress Studio
  • Enterprise WordPress 
  • Overview
  • WordPress Themes
  • WordPress Plugins
  • WordPress Patterns
  • Google Apps
  • Support Center
  • WordPress News
  • Business Name Generator
  • Logo Maker
  • Discover New Posts
  • Popular Tags
  • Blog Search
Get started
  • Sign up
  • Log in
About
  • Plans & Pricing
Products
  • WordPress Hosting
  • WordPress for Agencies
  • Become an Affiliate
  • Domain Names
  • AI Website Builder
  • Website Builder
  • Create a Blog
  • Newsletter
  • Professional Email
  • Website Design Services
  • Commerce
  • WordPress Studio
  • Enterprise WordPress  
Features
  • Overview
  • WordPress Themes
  • WordPress Plugins
  • WordPress Patterns
  • Google Apps
Resources
  • Support Center
  • WordPress News
  • Business Name Generator
  • Logo Maker
  • Discover New Posts
  • Popular Tags
  • Blog Search
Jetpack App
  • Learn more
  • Support Center
  • Guides
  • Courses
  • Forums
  • Contact
Search
  • Support Center
  • Guides
  • Courses
  • Forums
  • Contact
Forums / WordPress Security breach

WordPress Security breach

  • Unknown's avatar
    cairennrhysauthor · Member · Sep 13, 2015 at 5:09 pm
    • Copy link Copy link
    • Add topic to favorites Add topic to favorites

    I just ran a search and discovered both of my WP domains are being used by another website. They have mapped my WP domain using their domain as the lead.

    I have filed a report to Google for copyright violation of my written works and am also filing a report with the FCC.

    What I would like to know is how WordPress is going to rectify this issue.

    Please do not give me your inane, canned responses. My DNS record is to be protected using WP servers and clearly someone was allow to hijack my domain. I reported a few weeks ago that the WP certificate was showing up as invalid and your website was not secure. Other people reported the same thing and were told this was not really a security issue.

    I would advise anyone who has paid for a domain via WP to run a simple search via Google to find out if their domain is also being hijacked. If you have a Contact page, that page is now running through the other domain, which means your account info is as well.

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar
    auxclass · Member · Sep 14, 2015 at 2:56 pm
    • Copy link Copy link

    It sounds like another site is iframing or some other method to display your site – you need to file a DMCA against the site that is taking your site

    Do a whois on your site name – if you are still the owner and the name servers point to the correct place your domain has not been hijacked – I have some friends that have had their domain registration hijacked (stolen) and the site taken away from them – they are now working with the FBI on the theft and looking at legal action to get their name back –

    Content Theft & Abuse – Logos

    Prevent Content Theft

    http://en.support.wordpress.com/content-theft-what-to-do/

    http://en.wordpress.com/abuse/

    http://automattic.com/dmca-notice/

    If you’re feeling really mean, this should also help http://drinkscoaster.com/2013/01/02/whine-journalism-and-how-to-bring-the-splashback/ (thanks @Raincoaster)

  • Unknown's avatar
    rachelmcr · Member · Sep 15, 2015 at 11:08 am
    • Copy link Copy link

    Hi there,

    I checked your account and confirmed that the domains you registered here at WordPress.com are linked to your WordPress.com sites and are not pointed to or being used elsewhere. Your domains’ DNS records are pointing to WordPress.com. (You can check those records from your My Domains page, selecting each of your sites and clicking the “Edit” button next to the domain name to open the domain manager.)

    If you provide links to the websites you found, I’d be happy to take a closer look at those sites to see what’s going on there and see if I can offer more advice for you.

  • The topic ‘WordPress Security breach’ is closed to new replies.

Tags

  • certificate
  • Domain
  • hijacked account
  • security
  • SSL

About this topic

  • In: Support
  • 3 participants
  • 2 replies
  • Last activity 10 years
  • Latest reply from cairennrhysauthor

Couldn't find what you needed?

Contact us

Contact us

Get answers from our AI assistant, with access to 24/7 expert human support on paid plans.

Browse our guides

Browse our guides

Find step-by-step solutions to common questions in our comprehensive guides.

WordPress.com

Products
  • WordPress Hosting
  • WordPress for Agencies
  • Become an Affiliate
  • Domain Names
  • AI Website Builder
  • Website Builder
  • Create a Blog
  • Professional Email
  • Website Design Services
  • WordPress Studio
  • Enterprise WordPress
Features
  • Overview
  • WordPress Themes
  • WordPress Plugins
  • WordPress Patterns
  • Google Apps
Resources
  • WordPress.com Blog
  • Business Name Generator
  • Logo Maker
  • WordPress.com Reader
  • Accessibility
  • Remove Subscriptions
Help
  • Support Center
  • Guides
  • Courses
  • Forums
  • Contact
  • Developer Resources
Company
  • About
  • Press
  • Terms of Service
  • Privacy Policy
  • Do Not Sell or Share My Personal Information
  • Privacy Notice for California Users
DeutschEspañolFrançaisBahasa IndonesiaItalianoNederlandsPortuguês do BrasilSvenskaTürkçeРусскийالعربيةעִבְרִית日本語한국어简体中文繁體中文English

Mobile Apps

  • Download on the App Store
  • Get it on Google Play

Social Media

  • WordPress.com on Facebook
  • WordPress.com on X (Twitter)
  • WordPress.com on Instagram
  • WordPress.com on YouTube

Automattic

Automattic
Work With Us
    • WordPress.com Forums
    • Sign up
    • Log in
    • Copy shortlink
    • Report this content
    • Manage subscriptions