The Go Daddy whois shows "Updated Date: 2012-01-05 17:06:02". If the account at the registrar were compromised, wouldn't this date be more recent? Could it be that DNSDB detected instead a DNS poisoning?