I finally caught up with all the posts. One thing about those European IP addresses -- one should use the WHOIS at
www.ripe.net to see which country it is (in this case it was in Russia, as WHOIS-Search pointed out).
If it was me in Attilio's shoes, I'd try to put it in the hands of the registrar (GoDaddy) to be held in trust until the police sorted things out, or even in the hands of the police in GoDaddy's state (Arizona). As per the registration agreement for the domain name:
"FOR THE ADJUDICATION OF DISPUTES CONCERNING THE USE OF ANY DOMAIN NAME REGISTERED WITH Go Daddy, YOU AGREE TO SUBMIT FOR JURISDICTION AND VENUE TO THE U.S. DISTRICT COURT FOR THE DISTRICT OF ARIZONA LOCATED IN PHOENIX, ARIZONA."
Perhaps it can be deposited with the court or police there, and Allen can retrieve it from there, ultimately? This would solve the issue of jurisdiction, since EVERYONE had to agree to that jurisdiction at some point.
Personally, I feel Allen (the original purchaser) will ultimately recover it. But, as another poster mentioned, there is no rush -- a domain has a long life, and is not perishable. Whoever is entrusted with the domain name should also: 1) renew it for several years (in case it takes a long time to sort this out) and 2) put it under domain lock, so that it stays at GoDaddy past the 60 days, in case resolution should take longer than that.
Best to get ALL the facts, and proceed carefully to ensure that justice takes place.
The domain isn't high traffic, either, so folks aren't losing much in the interim (maybe $1/day) while this is resolved.