Is my domain hijacked from enom??

[ajiabs]

Hi all,

I cannot figure out what is happening to one of my domains at enom.com.

the domain is priya.org

at my enom account, in the domain name list this domain is listed and shown as expiring on 2003 December and also has a regitrar lock. The whois is shows me as the owner too. This is the whois:
For admin, billing and contact
Organization Name Armia Systems, Inc
First Name Aji
Last Name Abraham
Address 1 1101, Tall Timbers, #207
Address 2
City Schaumburg
StateProvince IL
PostalCode 60173
Country US
Phone +1.8473976931
Fax +1.8473976931
EmailAddress [email protected]


But at nsi.com this is whois info:

Domain ID80877455-LROR
Domain NameRIYA.ORG
Created On:07-Dec-2001 18:53:18 UTC
Last Updated On:24-Mar-2003 14:54:03 UTC
Expiration Date:07-Dec-2004 18:53:18 UTC
Sponsoring Registrar:R23-LROR
Status:OK
Registrant ID:23-C
Registrant Name:CONTACT NOT AUTHORITATIVE
Registrant Street1:Whois Server:whois.corenic.net
Registrant Street2:Referral URL:www.corenic.net
Registrant City:N/A
Registrant Postal Code:N/A
Registrant Country:CA
Registrant Email:[email protected]
Admin ID:23-C
Admin Name:CONTACT NOT AUTHORITATIVE
Admin Street1:Whois Server:whois.corenic.net
Admin Street2:Referral URL:www.corenic.net
Admin City:N/A
Admin Postal Code:N/A
Admin Country:CA
Admin Email:[email protected]
Billing ID:23-C
Billing Name:CONTACT NOT AUTHORITATIVE
Billing Street1:Whois Server:whois.corenic.net
Billing Street2:Referral URL:www.corenic.net
Billing City:N/A
Billing Postal Code:N/A
Billing Country:CA
Billing Email:[email protected]
Tech ID:23-C
Tech Name:CONTACT NOT AUTHORITATIVE
Tech Street1:Whois Server:whois.corenic.net
Tech Street2:Referral URL:www.corenic.net
Tech City:N/A
Tech Postal Code:N/A
Tech Country:CA
Tech Email:[email protected]
Name Server:NS1.GREATNET.DE
Name Server:NS2.GREATNET.DE
Name Server:NS3.GREATNET.DE
Name Server:NS4.GREATNET.DE


and domain is resolving into some other site. GREATNET.DE is something I have no idea about.

Any idea what is going on and how to gt back my name?

Thanks

 

[Zoobar]

Check other .org names in the whois lookup. Nothing to worry about.

 

[Domainaholic]

You still own the domain - just mind that .orgs are bit weird these days and that their who info is best checked at their registrar.

 

[ajiabs]

Hi,
But the domain is resolving to some other site. and the DNS servers and Registrar are different from mine.

Enom replied to my query saying, they have contacted the new registrar for proof of authorization for the tranfer. Can a registrar really transfer a domain to it without providing a proof of authorization.

Thanks

 

[Domainaholic]

Push - and I hope an expert replies

 

[ajiabs]

Any pros know something?

 

[Domainaholic]

nsi.com is really not the best place to check the who is of any domain, especialy a dot org. This is why I thought your domain was not stolen.

Check your domain at enom - see if it's DNS is forwarded correctly.



This is an important issue, so I really hope some enom expert replies. BUT even if "someone" did transfer the domain away from you - they can not keep it if you report the matter.

 

[Mr Webname]

Sure looks like the domain has been moved:-


Domain ID: D3688368-CNO
Domain Name: priya.org
Creation Date: 2001-12-07 18:53:18 UTC
Expiration Date: 2004-12-07 18:53:18 UTC
Last Modification Date: 2003-03-26 10:30:01 UTC
Sponsoring Registrar: CORE-112
Created by: CORE-112
Updated by: CORE-112
Last Updated By Registrar: CORE-112
Registrant ID: COCO-3604561
Registrant Name: Andre Kreutmayer
Registrant Address: Adolf Pichlerstrasse 15
Registrant City: Kufstein
Registrant Postal Code: 6330
Registrant Country: AT

 

[mole]

Originally posted by Mr Webname
Sure looks like the domain has been moved:-

Domain ID: D3688368-CNO
Domain Name: priya.org
Creation Date: 2001-12-07 18:53:18 UTC
Expiration Date: 2004-12-07 18:53:18 UTC
Last Modification Date: 2003-03-26 10:30:01 UTC
Sponsoring Registrar: CORE-112
Created by: CORE-112
Updated by: CORE-112
Last Updated By Registrar: CORE-112
Registrant ID: COCO-3604561
Registrant Name: Andre Kreutmayer
Registrant Address: Adolf Pichlerstrasse 15
Registrant City: Kufstein
Registrant Postal Code: 6330
Registrant Country: AT

hmmm...

 

[.com.net.org]

ajiabs, nothing to worry. The registrant is still you if you are Aji Abraham.

Domain name: priya.org

Registrant Contact:
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX: +1.8473976931
1101, Tall Timbers, #207
Schaumburg, IL 60173
US


Administrative Contact:
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX: +1.8473976931
1101, Tall Timbers, #207
Schaumburg, IL 60173
US


Billing Contact:
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX: +1.8473976931
1101, Tall Timbers, #207
Schaumburg, IL 60173
US


Technical Contact:
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX: +1.8473976931
1101, Tall Timbers, #207
Schaumburg, IL 60173
US



Status: ACTIVE
Note: To help prevent fraudulent or erroneous
transfers, we encourage registrants to place their domains on "lock"
status with their current registrar.

Name servers:
DNS0.INDIAHOSTING.COM
DNS1.INDIAHOSTING.COM


And my suggestion is lock that domain.
So the status show PROTECTED (marked in RED)

 

[.com.net.org]

and also, if you register names at eNom, please just use eNom whois as your REAL whois info. Don't use others.

 

[ajiabs]

Well, that is the problem. At enom records and enom whois I (Aji Abraham) am still showing up as the the owner. But if you use any other whois (for example nsi.com or internic.net) somebody else is shown as the owner. The domain is also resolving to some other serevr other than mine.

So far the communication from enom has been that they are contacting corenic asking for proof of authorization for the domain. But even after they contacted corenic couple of times, no response from Corenic about the legityimacy of the transfer. I have contacted Corenic also. No resposne from their side too. Is there any place I can complain, without hiring a lawyer.

Thanks

 

[ajiabs]

Originally posted by .com.net.org
and also, if you register names at eNom, please just use eNom whois as your REAL whois info. Don't use others.

Hi,
Can you please explain what do you mean by it? Also this domain was under regitrar lock. That didn't help much.

Thanks

 

[Nexus]

Originally posted by ajiabs
Hi, Can you please explain what do you mean by it? Also this domain was under regitrar lock. That didn't help much.
Thanks

It doesn't look good.

priya.org is NO LONGER with eNom. Openaccess clearly shows that the name WAS with eNom, but it is NOW with CoreNic.net ( http://www.whois.core.info/cgi-bin/corewhois.cgi?sld=priya.org ). According to PIR.org's whois: http://www.pir.org/cgi-bin/whois.cgi?whois_query_field=priya.org, the "SPONSORING REGISTRAR" is CORENIC.net, and NOT eNom. So, any record still at eNom is not authoritative.

It's amazing that eNom would still think it is the registrar of that name though. Seems to imply that a formal "transfer" (whether a "hijack" or not) had not really occured. It may be as complicated as the registration process accidentally showing the name as "available" when it was in fact registered. This doesn't match however, as the creation date seems to have been kept in-tact (07-Dec-2001).

The official nameservers are now:
ns4.greatnet.de
ns3.greatnet.de
ns2.greatnet.de
ns1.greatnet.de

eNom's whois server still lists your nameservers as:
DNS0.INDIAHOSTING.COM
DNS1.INDIAHOSTING.COM

This is CLEARLY a BIG problem.

You're name does appear to have been taken... under what circumstance it remains unclear.

Given that you've already gotten a dialog happening between eNom and CORENIC, you may also want to get PIR involved.
Godspeed.

Originally posted by .com.net.org
and also, if you register names at eNom, please just use eNom whois as your REAL whois info. Don't use others.

Even if you registered with eNom, it may not necesarily (under odd circumstances) be the "real" whois. The "real" whois is the one that PIR.org refers to when its registry is queried. The eNom whois may be superfluous and non-authoritative.

~ Nexus

 

[Nexus]

Also, ajiabs according to the eNom whois, your domain was NOT locked. Here is the whois results I am getting directly from whois.enom.com...
------------------------------
Registration Service Provided By: Armia System, Inc.
Contact: [email protected]
Visit: http://www.newbiesite.com/
Domain name- priya.org
-------
Registrant Contact-
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX- +1.847397691
1101, Tall Timbers, #207
Schaumburg, IL 60173
US
Administrative Contact-
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX- +1.847397691
1101, Tall Timbers, #207
Schaumburg, IL 60173
US
Billing Contact-
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX- +1.847397691
1101, Tall Timbers, #207
Schaumburg, IL 60173
US
Technical Contact-
Armia Systems, Inc
Aji Abraham ([email protected])
+1.8473976931
FAX- +1.847397691
1101, Tall Timbers, #207
Schaumburg, IL 60173
US
Status: ACTIVE
Note: To help prevent fraudulent or erroneous
transfers, we encourage registrants to place their domains on "lock"
status with their current registrar.
Name servers:
DNS0.INDIAHOSTING.COM
DNS1.INDIAHOSTING.COM
Creation date: Dec 07 2001 13:53:18
Expiration date: Dec 07 2003 13:53:18
----------------

If it were "locked", the status would say "PROTECTED". That's what my locked domains read.

~ Nexus

 

[devolution]

I've noticed WHOIS records at eNom stay the same, even when you transfer a domain away (I did this a few weeks back, and the domain still is in the account, and they are still sending out messages regarding it?!).

 

[devolution]

Trouble is, your domain was unlocked...
Anyone could transfer away if they had access to your email (or if it was a dodgy registrar).
I transferred that domain I had on eNom to Namebargain, and eNom sent nothing whatsoever regarding the transfer.
NameBargain sent an auth email, but nothing else was received until I checked out the WHOIS.

 

[devolution]

<deleted>

 

[Domainaholic]

Nope still there at eNom - but interNic does not work well with .ORGs

 

[Nexus]

Originally posted by Domainaholic
Nope still there at eNom - but interNic does not work well with .ORGs

Wow. Domainaholic.

Congratualtions, ajiabs.

~ Nexus