Domain Locking

Many sites, including the New York Times and Rapid7 have been hacked recently via domain hijacking.

The strongest countermeasure I know of is registry locking, which is explained very clearly in this Cloudflare blog post.

I decided to see whick domains are locked, just testing some big names.

I used Network Solutions' online Whois, and only included the Status: fields for each domain.

EC-Council (Added 3-13-14)

Since they just got hacked, I added them. Here is there official statement, including this claim:
The domain registrar in question was unable to secure their servers to a level desired by EC-Council and during this period, the domain registrar was exposed at least 2 more times. As such, EC-Council sustained an outage while moving the entire domain to another provider. Simultaneously, the EC-Council security team instituted additional countermeasures to other EC-Council systems within their direct control and began strengthening other security measures organization-wide.
If anyone has any idea what that means, my hat's off to you. EC-Council seems unable to communicate in English. It is possible that they actually understand something about security, but I don't think anyone will ever be able to tell, because of their impenetrable diction.

However, they seem to have actually improved their security; here's what I found.

Results

Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
Domain Status: serverTransferProhibited
Domain Status: renewPeriod

Results

Cloudflare

Status: clientTransferProhibited
Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited

Rapid7

Domain Status:

Microsoft

Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited

Cisco

No status records

Verisign

Status: clientTransferProhibited
Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited

Apple

No status records

Google

No status records

Juniper

Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited

McAfee

Status: clientTransferProhibited

Norton

Status: clientTransferProhibited

NYTimes

Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited

NYSE

Status: clientTransferProhibited

NASDAQ

Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited

Citibank

No status records

Amazon

No status records

Stanford

No status records

MIT

No status records

Berkeley

No status records

CCSF

No status records

Samsclass.info

Status:OK
Posted 9:40 am 10-11-13 by Sam Bowne
Updated 3-13-14 with EC-Council data
Updated 4-1-14 with link to Network Solutions Whois