These assumptions are all wrong, it’s an acknowledged hack of servers that were not in the possession or control of the people or entities you list above. The owners of the domains are definitely not the “perpetrators” as per Josh, nor was it likely that the originating poster was.
The Phoenix Exploit in kit has been implicated in issues in the realm of these posts.
It’s not a good idea or fair to publish the data above when you’re not certain about the facts, as erroneous information defames the parties.
Someone attempted to maliciously point those domains to a hacked server, but the domains and contacts you list were surely not complicit. This could even be a registrar breach.
The domains don’t show any involvement with this attack and are clean.
Sahaskatta and Josh Jones, to be most accurate and fair, you should remove these errant publications of opinions/assumptions about the domains and registrants.