Re: panix.com hijacked

[Richard Cox <Richard () Mandarin com>]

On Sat, 15 Jan 2005 22:05:47 -0600
"Chris Adams" <cmadams () hiwaay net> wrote:

> I do know that we've had hosting customers that have had domains with
> melbourneit.com as the registrar that they were unable to ever transfer
> to another registrar (despite emails, faxes, and phone calls; IIRC one
> customer tried for most of a year to transfer a domain to another
> registrar or at least get the nameservers changed without success).

We have had a comparable experience and now, on checking the DNS for
the hijacked panix domain, I see name-servers similar to those I noted
on that previous occasion.  Known under various names that infer a UK
connection, (such as Fibranet Services Ltd/freeparking.co.uk) but in
fact seem to be Activebytes Software of 2530 Channin Drive Wilmington
Delaware, with servers routed via Koallo Inc in Canada!

So far as we were able to determine, there was no actual UK presence.

        ns1.ukdnsservers.co.uk has address 142.46.200.67
        ns2.ukdnsservers.co.uk has address 207.61.90.196
        ns3.ukdnsservers.co.uk has address 142.46.200.68
        ns4.ukdnsservers.co.uk has address 207.61.90.197

MelbourneIT appear to have a U.S. Office near San Francisco:
  2200 Powell Street, Sixth Floor, Suite 690, Emeryville CA 94608
which would be slightly more accessible for service of writs, etc ...

-- 
Richard Cox