I really hope that the domain is locked.
It might not be a bad idea to change your password to something really secure if it isn't.
Save all communications, too (these and with support) so if anything happens you can show GD that something was going on and they ignored your request.