L5.COM and XGK.COM were stolen from my Enom account

[mohno]

Important Update in March 29, 2018
I removed "by INSIDE JOB" from the title because it might not be a inside job.
There are just pitfalls in the Enom system although I hesitate to mention the details.
I just keep the description below as of March 8, 2018.

L5.COM and XGK.COM were stolen from my Enom account in June, 2017.
I was aware the lost of the domains in February this year.
It looks a common matter BUT IT CAN'T BE.
I couldn't be aware for 8 months because I haven't received any notifications from Enom although it must be there even if my email address/account were compromised.

Here is an excerpt from the support(*);

... the issue we found that the email on your account was updated to [email protected] and shortly after changed back to the current email address on your account. This was where the push notifications were sent to you.

Anybody can do only what I can do even if somebody got success of compromising my account and/or my email address.
It's impossible to change and change back the email address on an account _shortly_ in normal conditions of the Enom system.
You have no wonder th domain "m0hn0ker.com" was not registered so nobody can't receive and approve the changing back the email address. The theft was obviously happened IN THE COMPANY not from my account.
Unfortunately, Enom haven't admitted it so far.

BE AWARE!
Enom customers should check the domains in their account every 6 months!
It's anoying us losing domains silently though.
You can't recover the domains after 6 months!

*You may find the support histroy so far in here.

 

[Mr. Deleted]

Illl see if Theo can help.

 

[mohno]

Oh, thank you!

 

[Johnn]

Legendary is also an expert in this field.
Contact him to see if he can help.
https://www.dnforum.com/members/thelegendaryjp.63897/

 

[Theo]

I highly doubt a company of eNom's caliber would risk doing something as criminal as this. Their notifications system can lack at times, however. Since these are valuable domains, I suggest you get in touch with a competent attorney to file a lawsuit in the federal US court. PM me for info.

 

[mohno]

Thank you, everyone!

Theo, you may change the email account to another one with unregistered domain like "[email protected]", You can't change the email back to the current because you never receive an notification and approve the changing if the notification system works.
And thank you. I might contact you later.

It seems the situation is still a little moving. I'll update then.

 

[seek99]

yes let us know @mohno

 

[Biggie]

hope you get your names back mohno

I see they are both at namesilo now

Good luck!

 

[mohno]

Hello everyone,

I retrieved the domains at last!!
Actually, it might NOT be a "inside job" although Enom haven't answered ME the details of this case.
It means there is pitfalls in the Enom system.
I hesitate to tell the details although there might be someone who already knew the pitfalls.
You may guess something because I could retrieve the domains even after the regular dispute period (6 months) elapsed.
Enom was telling it was impossible for months though.
I understand that ICANN is contacting Enom directly.

Thank you to people who was trying to help me,
And thank you everyone,
Regards, Motohisa

 

[Biggie]

Hello everyone,

I retrieved the domains at last!!
Actually, it might NOT be a "inside job" although Enom haven't answered ME the details of this case.
It means there is pitfalls in the Enom system.
I hesitate to tell the details although there might be someone who already knew the pitfalls.
You may guess something because I could retrieve the domains even after the regular dispute period (6 months) elapsed.
Enom was telling it was impossible for months though.
I understand that ICANN is contacting Enom directly.

Thank you to people who was trying to help me,
And thank you everyone,
Regards, Motohisa

Hi

Really glad you got your domains back

if you can't share detail here, perhaps you could pm me,
as I would like to know the pitfalls and how you were able to retrieve them

Thanks

imo...

 

[mohno]

At first, my account would be actually compromised although the latest ICANN regulations, as shown in https://www.icann.org/resources/pages/transfer-policy-2016-06-01-en, should protect domains from unauthorized transfers.
I just hesitate to mention how to move a domain without owner's authorizations in Enom.

To get the domains back, I did everything what I could do, e.g., researching whois history with DomainTools (pay service), asking the Enom support to try to get _reasonable_ answers although they tried to close the thread many times.
I submited a complaint to ICANN;
https://forms.icann.org/en/resources/compliance/complaints/transfer/form
and contacted the current registrar with the detail information which shows _unauthorized_ transfer obviously.

By the way, Enom says "now you will be notified when your domains will be transferred even without your authorizations." (lol)

 

[mohno]

Just for your information.
I found it might be still possible to change the registrant without notifications to the old registrant.
Enom denied to answer this behavior.

 

[MapleOne]

I've heard of a number of domains disappearing from enom.

I must say, I find that rather troubling.

 

[mohno]

Hello MapleDots,
Have you heard that after the end of 2016, i.e., the recent ICANN regulations activated ?
The new regulations must protect domains if they work ...

 

[MapleOne]

Hello MapleDots,
Have you heard that after the end of 2016, i.e., the recent ICANN regulations activated ?
The new regulations must protect domains if they work ...

I'm prolific on domaining forums and I read about them and netsol having issues. Personally I stay away from both because it worries me when I read about them. You don't have to go far when talking about enom, even on dn there are several topics.

 

[leariedv]

I cringe when I hear things like that.