Popular domain registrar SAV.com took on some heat in recent days, after disabling accounts that facilitated phishing and other unlawful activities.
Note: SAV is a premium sponsor of DomainGang.
While up to 60,000 domains were reportedly involved in an operation spear-headed by security firm CleanDNS, some domains were later reinstated due to false positives. Overall, SAV remains committed to combat fraud and abuse on its platform.
A freshly reported issue involved the ability to control the DNS of deleted domains that somehow remained as “ghosts” in one’s SAV account by registering them afresh with a new account; the “ghost” domain account holder could change the domain’s DNS without the actual account holder’s approval.
That issue has been fixed and according to SAV it was due to some obsolete code that created duplicate entries in the registrar’s database for some deleted domains.
SAV also shared that it has an active Bug Bounty Program that rewards finders who report issues to the registrar. Sav.com utilizes Bugcrowd’s Vulnerability Rating Taxonomy to prioritize and reward reported vulnerabilities.
If you are interested in making money reporting bugs, here’s your chance.