are right on dragon.
This thief is still in full control of these stolen names. His move to NSI was just a ruse, pure and simple. Witness lust.com and url.com, (and many others). He is definitely trying to figure out how to 'cover his tracks'. Further, the use of the misspelled 'novaildemail' @verisign.com indicates he has a partner in crime inside NSI itself. He is obviously using this verisign email address (Verisign does not issue free email service to the best of my knowledge) and then transferring them to more bogus email accounts and bogus registrant information. RacerX is aware of several individuals who have been in contact with NSI over this matter, but so far NSI is doing NOTHING to stop it. The game is not over though, and I am confident justice will ultimately prevail...
On another note, RacerX, as many others here I am sure have noticed on your snapback reservations, NSI is nefariously changing some registrant records to 'null' or 'no valid city no valid state' in the registrant address record, and then coupling this activity with paying up the domain name. This is an obvious trick. RacerX recommends DO NOT REMOVE YOUR SNAPBACK because if you do, the unsavory entity (or the very same thief that has stolen names) then places a snapback on the name. Check the names you have lifted snapbacks on if you thought the name was paid up and if there was a 'null' placement in the registrant address change. You might be surprised as what these scoundrels out there are doing...