Hijacked or Wrong Configuration?

[Mark Andrews]

In message <OF7DE7E9DC.8EF91A8C-ON88257775.000385AF-88257775.00043ECC at kp.org>, 
Bill.Light at kp.org writes:
> 
> I host a re-direct for the local soccer organization
> 
> The "real" owner (non-technical) let the domain lapse, and I recommended 
> the registrar I use (that automatically provides secondary DNS services) - 
> but they didn't use them.
> 
> Now they can NOT get to the site - am I configured wrong?   -- or -- did 
> the domain get hijacked in the interm?
> 
> 
> Site:  hysl.org
> 
> DNS:  dns1.light-family.com
> 
> IP:  66.124.156.123
> 
> And of course - they are still trying to sign people up as I type...  I 
> have made the IP's default to be the hysl.org re-direct and temporarily 
> "destroyed" my own domains...Any suggestions?

hysl.org is NOT published in the org zone.  Given the dates in whois
I would contact the registrar and ask them to fix this.

Mark

; <<>> DiG 9.3.6-P1 <<>> hysl.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56300
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;hysl.org.			IN	A

;; AUTHORITY SECTION:
org.			765	IN	SOA	a0.org.afilias-nst.info. noc.afilias-nst.info. 2009253046 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Aug  4 11:43:27 2010
;; MSG SIZE  rcvd: 89


NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D1703600-LROR
Domain Name:HYSL.ORG
Created On:16-Jul-1998 04:00:00 UTC
Last Updated On:16-Jul-2010 02:20:09 UTC
Expiration Date:15-Jul-2011 04:00:00 UTC
Sponsoring Registrar:Gandi SAS (R42-LROR)
Status:CLIENT HOLD
Status:CLIENT TRANSFER PROHIBITED
Status:AUTORENEWPERIOD
Registrant ID:0-614251-Gandi
Registrant Name:Hayward Youth Soccer League
Registrant Organization:Hayward Youth Soccer League
Registrant Street1:740 City Walk Place #2
Registrant Street2:
Registrant Street3:
Registrant City:Hayward
Registrant State/Province:CA
Registrant Postal Code:94541
Registrant Country:US
Registrant Phone:+1.5105896858
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:b289396c6e286fe994be7135beadb0e7-420636 at contact.gandi.net
Admin ID:MS1270-GANDI
Admin Name:Michael Silverman
Admin Street1:27150 Greenhaven Road
Admin Street2:
Admin Street3:
Admin City:Hayward
Admin State/Province:6
Admin Postal Code:94542
Admin Country:US
Admin Phone:+1.5105827229
Admin Phone Ext.:
Admin FAX:+1.5105827229
Admin FAX Ext.:
Admin Email:msilver at inow.com
Tech ID:MS1270-GANDI
Tech Name:Michael Silverman
Tech Street1:27150 Greenhaven Road
Tech Street2:
Tech Street3:
Tech City:Hayward
Tech State/Province:6
Tech Postal Code:94542
Tech Country:US
Tech Phone:+1.5105827229
Tech Phone Ext.:
Tech FAX:+1.5105827229
Tech FAX Ext.:
Tech Email:msilver at inow.com
Name Server:DNS1.LIGHT-FAMILY.COM
Name Server:NS1.POCKETTECH.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned


-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org