Warning: Domain stolen. Huge security flaw. I just had a domain stolen from my eNom account and eNom hide behind the ICANN transfer rules refusing to file a TDRP for the return of the domain.
How did it happen? I purchased a domain at Club Drop. The domain was duly pushed to my account. INCLUDING THE DOMAIN PASSWORD OF THE PREVIOUS OWNER. I don't use passwords on my domains preferring to manage them from the eNom account control panel, so never thought that they would push the old password which I would have to manually reset. Looks like the previous owner decided he wanted his domain back.
eNom don't see anything wrong with the way they push domains into your account. They don't see anything wrong with the theft which has taken place, either. They brazenly informed me how the theft was achieved without any compunction on their part. It's all my own fault.
Last edited by stu; 08-19-2006 at 04:01 AM.
|