Link to home
Start Free TrialLog in
Avatar of jbaird123
jbaird123

asked on

Help with a domain dispute

Can someone tell me how I can regain control of a domain and website that has been hijacked by a rogue employee of the company which rightfully owns the domain?

The domain is registered through Google, and the website is also hosted by Google.  The corporate email is also powered by Google Apps.

This rogue employee set up his own Google account, and used that account to register the corporate domain for his employer.  Since that time, the employee has been terminated and he will not give back control of the domain, email or website to the employer.

I have done extensive searching through Google's support documentation, but all I can find is that Google does not get involved in ownership disputes.

I cannot believe that Google provides no recourse to companies or individuals who end up in this situation.  Can anyone advise as to what action I can take?  Most registrars and hosting companies have a dispute process where a company can regain control of an account that has been hijacked.  I cannot figure out whether Google has a process for this.
Avatar of Bradley Fox
Bradley Fox
Flag of United States of America image

According to Google's FAQ they are not a registrar but are partnered with registrars.  You will have to find out which registrar this was registered with and call them.  They will assist you in regaining control over the domain.  Probably have to verify some information and maybe have an officer of the company sign a letter on company letterhead.

To figure out who the registrar is do a search for the domain name in the whois database and look for the sponsoring registrar record.  http://www.betterwhois.com/
Avatar of jbaird123
jbaird123

ASKER

mcsween,

I actually already tried this.  The "official" registrar is enom.com.  So the domain was registered through enom.com via Google.  I called enom.com and discussed the situation with them.  They told me that they don't get involved in domain disputes for Google accounts.  Here is the exact text from the email I received:

"If your domain is with Google and eNom, eNom can only assist the person with the correct passwords, we do not get involved in ownership disputes.

The Google account login details are not held at eNom and we cannot assist you with that data. You would need to contact Google directly."

So at this point, I am not getting any help from enom or Google.

Advice?

Thanks.
SOLUTION
Avatar of Bradley Fox
Bradley Fox
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks, mcsween.

I am going to leave this thread open for a little while in case anyone has any other ideas.  I was really hoping to avoid taking legal action if at all possible.  If that is my only option, then I guess I will do that.
Can you show results from:
http://www.enom.com/whois/default.aspx
for your domain? Mask all sensitive fields.
Who paid for registration and google's services?
als315,

Below is the information you requested.

I believe that the corporation paid for the registration and services with their own corporate credit card.  I am trying to verify this though as I am not 100% certain.  The employee may have paid with his own card and then requested reimbursement, but this is not likely.

I changed the real domain name to "dummydomainname.com" below.

Registrant:
Whois Privacy Protection Service, Inc.
Whois Agent
PMB 368, 14150 NE 20th St - F1
C/O dummydomainname.com
Bellevue, WA 98007 US
+1.4252740657
Fax +1.4259744730

Administrative:
Whois Privacy Protection Service, Inc.
Whois Agent
PMB 368, 14150 NE 20th St - F1
C/O dummydomainname.com
Bellevue, WA 98007 US
+1.4252740657
Fax +1.4259744730



Technical:
Whois Privacy Protection Service, Inc.
Whois Agent
PMB 368, 14150 NE 20th St - F1
C/O dummydomainname.com
Bellevue, WA 98007 US
+1.4252740657
Fax +1.4259744730


Nameserver:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Updated-Date:
Apr 16, 2012 06:54:14 PM

Created-Date:
May 04, 2007 08:18:54 PM

Registration-Expiration-Date:
May 04, 2013 08:18:54 PM

Status:
ok

Domain:
dummydomainname.com

dummydomainname.com is a domain name registered by Whois Agent. The site is based in Bellevue, WA, US. This domain does not appear to have registrar lock enabled. www.dummydomainname.com hosts it's domain on dns1.name-services.com,dns2.name-services.com,dns3.name-services.com,dns4.name-services.com,dns5.name-services.com.

Page rank, back links or indexed pages information is not available for www.dummydomainname.com. Inexpensive business listings setup through eNom can help websites to build backlinks, and to generate organic search engine referrals.

The registrant's whois information is masked from appearing in our whois lookup data. For additional information about www.dummydomainname.com, users are encouraged to email Whois Agent or call +1.4252740657 for items pertaining to the registrant. For administrative issues, please email Whois Agent or call +1.4252740657. Items of a technical nature should be directed to Whois Agent via email or by calling +1.4252740657.
When you say "rightfully owns the domain", you will need to produce proof that that is true.  Something like a bill that the company paid for the rights to use the domain name or a trademark in the company's name.  Domain names are first come, first served, unless you have a legal right that supercedes that principal.

At this point, you have to write to Whois Privacy Protection Service, Inc. to even find out who is the current 'legal' owner of the domain.
No registrar lock in place; just go to godaddy.com or networksolutions.com and transfer the domain to them.  Don't forget to enable the registrar lock after transferring it.
mcsween,

If I do as you suggest, what will happen to the current website and email that are being hosted by Google?  Won't I lose all of that information?

Thanks.
Registrant details are hidden and can't help us. I hope there is your company, not private person.
Seems you can't follow standard Google's procedures for changing administrator's account, because you have no access to DNS management. Here is some links, but in your case it is not working:
http://support.google.com/a/bin/static.py?hl=en&hlrm=ru&ts=2403965&page=ts.cs#domainverify

If you can find payment details, it may be not so bad.
You can start discussion with Google's support. Describe situation, show payment details.
als315,

That is what I have been trying to figure out - how to start a discussion with Google's support.  There is no information anywhere about how to do this.

I already found the link you posted, but as you mentioned, that page does not work for my situation.  I just get this message when I click the option that applies to me: "We're sorry, but the information you've requested cannot be found. Please try searching or browsing the Help Center."

So... can anyone tell me how to contact Google Support?
The email and website won't be affected once you fix the DNS.  You will want to use NSLookup to query your www A Record and your MX record for email.  Once you issue the transfer your dns will be transferred to the new registrar as well.  You will then just go in and add your MX record back in and your www record.

at a command prompt type
nslookup
www.yourdomain.com
set type=mx
yourdomain.com

Open in new window

Note the IP address assigned to www.yourdomain.com.
Note the Prefrence and the mail exchanger of the MX record. If the mail exchanger is another subdomain of your domain (it probably isn't) do a set type=A and query that subdomain's ip address and make a note of it so you can re-register its A record.
You don't really need a registrar lock any more.  You do need the current owner and the new owner to cooperate in entering the transfer codes.  You can not do that from only the new owner's account.
Here are phones:
http://contact.googleapps.com/?&rd=1
They will ask for customer's PIN, try to describe situation, I hope they will help you.

PS. You should have some google account.
als315,

You can't get any help at all without a PIN.  I called the number, and you need to enter a PIN in order to do anything.
mcsween,

DaveBaldwin is correct I believe.  I need a transfer code to be able to transfer the domain.
Seems Google don't like problem cases. Due to this paper:
http://www.google.com/apps/intl/en/terms/premier_terms_prepay.html
you can do nothing. Only ask for help on forums.
You can try to get help from Google's partners:
https://www.google.com/enterprise/marketplace/search?categoryId=15&orderBy=rating
but it could be expensive.
This rogue employee set up his own Google account, and used that account to register the corporate domain for his employer.
I don't quite get it. Was the employee acting at the request of the company or was it done on the employee's own initiative and personal time? Does the domain name include the company name or company trademark? Was the domain actually used by the company?

Tom
Tom,

The answer to all 3 of your questions is "yes".
Then have you saved copies of the web pages from the site and taken screen shots to show the company names and trademarks?
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you.
And thank you. I suspect that a lot of members will be interested in any followup that you can add to this question if you get a resolution, satisfactory or not.

Tom