advice Is this a security breach?

[URL Stream]

I received the email below from my registrar, INWX, regarding a request that I did not make.

I haven't either received a notification from any of the aftermarket platforms about a pending sale.

The domain is a .si.

Has anyone here experienced something similar?

I'm waiting for a response from support, but I suspect they're out for the weekend.

Thank you.

 

[xsx]

transferlock activation would actually work against the thief's favor, it also says that "authorization code invalidated" so whatever EPP/Auth code existed for the domain is now dead and useless, which is a good defensive state. (you can manually generate one again)

my guess is that the registrar you are on automatically invalidated the authorization code if perchance they sat unused for a certain period, which sends you that email.

though there is also a slim but plausible chance that if you had the domain listed on platforms like sedo/afternic etc. and opted into a fast-transfer network, a platform sync on their end or a canceled inquiry may have triggered this registry ping.

if still unsure yeah definitely change your password and kill all unused login sessions just as a precaution, your domain should be fine though.

 

[URL Stream]

transferlock activation would actually work against the thief's favor,

Right, which made me wonder what activated it.