Autistici/Inventati is closing after its domain registry and bank cut it off within days of an OFAC listing

On 28 August, requests for autistici.org came back with nothing, because the .org registry, Public Interest Registry, had placed the domain in serverHold ^[10]. PayPal had suspended the collective's account the day before ^[9], and Banca Etica suspended the bank account on 1 September ^[11]. That is six days from the listing to the loss of the domain, the payment rail and the bank, and no Italian court was involved at any point ^{[11] [4]}.

The instrument doing that work is a notation on the SDN list rather than a court order. An SDN entry carrying secondary sanctions risk is the part that reaches beyond US persons, because a foreign bank or company that keeps dealing with a listed entity can find itself exposed in turn ^[8]. Each European intermediary acted on its own reading of that exposure, not on any compulsion.

The window for users is tight and tighter than the headline dates suggest. The State Department announced the designation on 26 August and OFAC listed the collective the same day ^[3]. PayPal went within a day, the domain within two ^{[2] [3]}. The shutdown notice came eleven days after the listing ^[2], which puts it near 6 September ^[5], against a General License 36 window reported to close on 25 September ^[4], so about 19 days of usable notice ^[7]. Behind that sit roughly 16,000 mailboxes, 1,500 websites, 5,500 mailing lists and 10,000 blogs ^[14], call it 33,000 hosted objects ^[1], or about 1,700 a day at an even rate ^[8]. Nobody migrates at an even rate, and A/I has warned that services may cut out without notice before the window ends ^[17]. A person moving a mailbox and a blog archive also has to repoint every link that used the domain that stopped resolving ^[10].

For anyone rebuilding a dependency list on Monday, the cut that matters is not cloud versus self-hosted. The relevant test for each dependency is whether its continuation rests on a contract you hold, or on a third party's appetite for risk it can reprice without telling you, and whether you can replace it inside the notice you would actually get, which here was none. Plot those two axes and A/I's registrar, payment processor and bank all land in the same quadrant: discretionary, and not substitutable at speed. The registrar is the fastest of the three, because a domain is where a user's address, archive and inbound links all meet.

The grounds are contested. Washington says the collective supplied infrastructure, tools and services to violent antifa cells and other groups it treats as extremist ^[5]; A/I calls its work digital self-defence for activists and says antifascism and anticapitalism are not terrorism ^[6], and has noted that an SDGT listing is not a Foreign Terrorist Organization designation ^[7]. What the collective gave as its reason for closing was the risk to others: the possibility that its work may cause legal and financial consequences to those close to it, it said, left no choice ^[13]. A donation-funded host that refused cryptocurrency and decided by consensus ^[15] had two dependencies it could not contract around, and both answered to a list it was not party to.