So it's a bit of a misleading title, it appears the registrar for .PK is what was hacked, and these are the sites that are now being redirected.<p>Also, can someone please add spaces after the commas in the title? Thanks! (currently reads Google,MSN,Apple,Ebay)
There are 975 .Pk domains registered by MarkMonitor. google, visa, PayPal, sony, zynga, microsoft, hp all rely on MarkMonitor for their identity in Pakistan. It seems that MarkMonitor's account with pknic was compromised. 110 .PK domains had their name servers changed to freehostia.com recently. All of them registered by MarkMonitor. Here is the list: <a href="http://i.com.pk/110-pk-domains-managed-by-markmmonitor-got-ha" rel="nofollow">http://i.com.pk/110-pk-domains-managed-by-markmmonitor-got-h...</a> [note: this list was compiled by me]
This is what I'm getting for google.com.pk currently:<p><pre><code> ;; ANSWER SECTION:
google.com.pk. 3578 IN A 127.0.0.1
</code></pre>
The name server seems to be set to some random one as well:<p><pre><code> ;; AUTHORITY SECTION:
google.com.pk. 38400 IN NS dns1.freehostia.com.
google.com.pk. 38400 IN NS dns2.freehostia.com.
</code></pre>
Google normally host their own DNS, so I'd expect that to go ns1.google.com (etc). Doing a whois for google.com.pk returns the address as "Mountain View, Canada" which is kind of amusing.
If you do a whois on www.pknic.net.pk for any of the listed hacked domains, they all have their correct contact info but refer to "dns1.freehostia.com" so it seems the .pk domain registrar must have been hacked.
Everything is normal here (i'm in pakistan) , google msn ebay all are accessible. So either this story is an outright lie, or the so called hackers might actually be just idiots.