NCNC32-4RBKTY-6AYAXT-XJ2LFH-O2LCDM
I already checked it.
But what it will change. Even having thieve address I can not knock his door and take my funds back.
NCNC32-4RBKTY-6AYAXT-XJ2LFH-O2LCDM-ARNZV4-Y6FI ?
The guy that took your XEM looks like a noob from his transaction history:
http://nember.ru/#/stats/NCYYRI5MIMC4XMJV65PSXFYBGO5JLRSBWEITQVJXHe sent XEM to poloniex twice (~10k total) without a message and then sends additional messages to that account asking to "send me back my nem" - he doesn't look like a criminal mastermind. I wonder whether their account was also compromised.
After your XEM appear in his account he manages to withdraw to Poloniex with an account message "be325b539e59e862".