More updates on the whole DNS hijacking, they've taken about 6 EFNet servers, and they also change the SOA and the NS record. Which would be really really non RFC compliant. Yes i've tried contacting the abuse team at Cox but i get the standard canned response. I should check my computer for viruses and malware. Anyone have a good contact for cox? Thanks Drew