How to track the domain and website hosting?

Question

System administration

Hello comrades.

Faced a problem of the following character: there was a site vvinokur.ru. A certain time ago - it was hacked and placed there false information and other unpleasant crap. Actually, the site is displayed, but does not function (you can see the home page but the flash menu does not work, the admin panel too).

When I found the service on which all this kitchen was spinning, and recovered passwords (account on hc.ru), I saw payment operations and so on in the history, nevertheless, there was no hosting or domain on the account. Now whois tells me that the domain is re-registered in rucenter.ru, and dns sends us generally here ( dns1.yandex.net , dns2.yandex.net ) I dare to assume that this is somewhere in the open spaces of the Yandex data center.

I contacted the hc.ru support service to understand what happened, they sent me carefully. They said if I want to delete the site, then I need to contact their data center (it turned out to be "ColoCall" in Kyiv o_O), there the manager popularly explained to me that this issue should be resolved at the level of the hosting provider, or give them full information and they decide among themselves what to do and where to look. I sent them an application as they asked, the answer came obvious - hc.ru knows nothing about the site and domain. Fine.

I called and wrote a ticket in parallel to the ru center. There I was told that they have nothing to do with the domain. I tried to send a letter to the domain admin through the form on the ru center website .. from there a guy named Sergey wrote to me, but he did not answer the rest of the letters.

Tell me, please, how should I be, or who can help me figure it out and find a way out of the situation?

Answer 1

It is now really hosted in colocall.net
Write them an abuse, perhaps links to the webarchive will help.
In general, now there is only a court if there is damage to business reputation (well, or copyright, if any). This situation does not violate the rules of hosters / registrars / etc.

Answer 2

I don't think anyone stole anything. They just missed the renewal time and the domain was released. Then they bought it and hung up the site in order to make money on some link exchange, because. the domain has TIC and PR.
There is only one solution: buy the domain from the current owner.