Panix update

[doc_strange]

Panix's whois/registrar information appears to have been set back to its correct content.

It was reverted (according to Panix's website) at about 5PM EST. For the next 16 or so hours, I guess we all just expect spotty communications with Panix depending on what nameservers have which info in their caches.

I.e., don't expect mail to panix.com addresses to go through quickly until midday Monday. However, since the last mail server data the hijacking put in there is bogus, it looks like no mail will wind up lost or delivered someplace "unfortunate." (The IPs were x.x.x.0, on two corporations' networks, with that network IP being pretty damn unlikely to ever receive mail, and the nameservers to which the domain was pointed no longer accept queries for panix.com names, either.)

What a hell day for the Panix staff, though. I'd really like to know whether it was a missed transfer request notice or something more screwy.

Comments

[holzman.livejournal.com]

I'm thinking I may call in as a customer and see if I can get some explanation from them about it.

[docstrange.livejournal.com]

Yeah, their web site is vague. However, from this article, one can glean that 1) it actually happened to *a lot* of domains and 2):

despite panix.com's belief that their registrar locks were set, somehow the domain was transferred...

From a discussion of what went on, we hear that:

...high-value domain names are being monitored continuously for changes in their lock status -- once they are unlocked, a wave of fraudulent transfer requests arrive from some of the minor registrars (e.g. ones in China or Korea), trying to steal the domain.

Sounds like there are still a few rogue registrars out there.

Panix may have unlocked or Dotster briefly screwed up... or... ?