What should one do when a domain of theirs is hijacked? Go to ICANN? What if there is no critical evidence? I'm trying to help a friend out here. She says the guys AIM, ICQ, and email is listed on the site... wouldn't that be a start?

You said ICANN so I take it is an ITLD (.com) try internic too. Prob is that the registry is so big they dont really chase up things like this

I was thinking... maybe her domain wasn't hijacked. She told me that each of her nameservers ns1/ns2.domain.com redirects to another site. I figure that the IPs of her nameservers were added to her host' dedicated IP pool by mistake. The same thing happened to me once... get what I'm saying?