{
  "kind": "PRIMARY_AUTHOR_BOUND_VENDOR_STATEMENT",
  "checkedUTC": "2026-10-31T13:40:51.489184+00:00",
  "canonicalURL": "https://x.com/DebugBear/status/2116306975403250070",
  "statusID": "2116306975403250070",
  "author": {
    "handle": "DebugBear",
    "numericID": "1020701404518903808",
    "name": "DebugBear",
    "verificationTypeAsReturned": "Business"
  },
  "publishedUTC": "2026-10-30T23:11:16.000Z",
  "shortExactQuote": "Our DNS server records were compromised through our domain registrar.",
  "visiblePrimaryParaphrases": [
    "The vendor said its incident investigation was continuing.",
    "It reported that domain email delivery was unavailable.",
    "Its initial investigation pointed to the website of one specific customer as the target."
  ],
  "sources": [
    {
      "name": "vendor-new-syndication",
      "URL": "https://cdn.syndication.twimg.com/tweet-result?id=2116306975403250070&lang=en&token=1",
      "UTC": "2026-10-31T13:36:53.052512+00:00",
      "HTTP": 200,
      "finalURL": "https://cdn.syndication.twimg.com/tweet-result?id=2116306975403250070&lang=en&token=1",
      "bytes": 1060,
      "SHA256": "864ebdc77761417abfd1066ac671553932c325173332c452fbfc954aa9530cd4"
    },
    {
      "name": "vendor-new-oembed",
      "URL": "https://publish.twitter.com/oembed?url=https%3A%2F%2Fx.com%2FDebugBear%2Fstatus%2F2116306975403250070&omit_script=true",
      "UTC": "2026-10-31T13:36:53.052843+00:00",
      "HTTP": 200,
      "finalURL": "https://publish.x.com/oembed?url=https%3A%2F%2Fx.com%2FDebugBear%2Fstatus%2F2116306975403250070&omit_script=true",
      "bytes": 873,
      "SHA256": "81240c451beff4efe77ba6fdace409cc7b67030c354b432ee5f57f3e1e0fb8f1"
    }
  ],
  "truncation": {
    "displayRangeAsReturned": [
      0,
      279
    ],
    "notePointerPresent": true,
    "fullNoteBodyRecovered": false,
    "mirrorOnlyExtraClauseNotAccepted": "The primary responses do not contain the additional internal-systems statement shown in a profile mirror, so it is not promoted as verified primary text."
  },
  "meaning": "A new vendor-stated explanation at the DNS/domain-registrar layer. It replaces the narrower prior statement that the entry point had not been publicly described. It is a vendor account of its investigation, not an independent incident-response report.",
  "notEstablished": [
    "Which registrar account, credential, employee or publishing permission was compromised.",
    "A breach of the registrar company itself.",
    "Who controlled the attacker or any Car/other company connection.",
    "That only one customer could have received malicious bytes or that other customer sites were unaffected."
  ],
  "publicationPolicy": "One10-word quote plus short paraphrases/identity/date/URL/hash metadata. Full tweet/oEmbed/mirror bodies stay local; no live embed/script execution."
}