.

Monday, February 16, 2009

Kadima site hacked (updated - um, no)



Ben-Yehuda in the comments noticed that the Kadima website was been hacked.

It does appear to have been done by hackers in Gaza, as the domain name (gaza-hacker.com) is registered in Gaza itself.
Registrant:
Mr. Mohammed AbuYousef
Palestine - Gaza
Gaza, PS 00972
IL

Registrar: DOTREGISTRAR
Domain Name: GAZA-HACKER.COM
Created on: 08-MAR-07
Expires on: 08-MAR-12
Last Updated on: 06-FEB-09

Administrative, Technical Contact:
AbuYousef, Mr. Mohammed Master@Mohammed.ps
Palestine - Gaza
Gaza, PS 00972
IL
00972599901972
Mohammed.ps is a malformed page dedicated to the "prophet" Mohammed himself.

The hacked page itself has some stupid pictures of burning Israeli flags and the like; it is playing what sounds like a PalArab national anthem; pretty boring stuff.

The gaza-hacker.com site itself is hosted by a US site called liquidweb.com. If you are so inclined you might want to complain to them:
OrgName: Liquid Web, Inc.
OrgID: LQWB
Address: 4210 Creyts Rd.
City: Lansing
StateProv: MI
PostalCode: 48917
Country: US

ReferralServer: rwhois://rwhois.liquidweb.com:4321/

NetRange: 72.52.128.0 - 72.52.255.255
CIDR: 72.52.128.0/17
NetName: LIQUIDWEB-6
NetHandle: NET-72-52-128-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
NameServer: NS.LIQUIDWEB.COM
NameServer: NS1.LIQUIDWEB.COM
Comment:
RegDate: 2006-08-03
Updated: 2007-03-26

OrgAbuseHandle: ABUSE551-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-580-4985
OrgAbuseEmail: abuse@liquidweb.com

OrgTechHandle: IPADM47-ARIN
OrgTechName: IP Administrator
OrgTechPhone: +1-800-580-4985
OrgTechEmail: ipadmin@liquidweb.com
The most effective way to get rid of the cyber-arsonists is to complain to their hosts, and from their web page it appears that they have been kicked off of previous hosts as well. A polite email to abuse@liquidnet.com or webmaster@liquidnet.com should be enough.

UPDATE: That was not the official Kadima site. The real site is here. (h/t lol)