PayPal.zip UDRP a reminder of Google’s risky domain names

Posted by DomainGang on June 7, 2023, at 9:21 am

The domain name PayPal.zip was involved in a UDRP; dot .zip is one of two risky gTLDs assigned to Google’s Registry. Along with .mov domains pose the risk of being used in phishing campaigns, as they are associated with .zip and .mov files respectively. In the case of PayPal.zip, the domain is already blacklisted by […]

Filed under Domain Law · Tagged with Domains, PayPal.zip, UDRP, cybersquatting, grant transfer, malware, phishing

Latest GoDaddy hacking incident part of “multi-year campaign”

Posted by DomainGang on February 18, 2023, at 1:00 pm

GoDaddy announced that a recent hacking incident that targeted its cPanel hosting servers is part of a “multi-year campaign” against the company. The announcement provided details about the latest incident that took place in December 2022, targeting the services available to hosting users. During the incident, an “unauthorized third party” installed malware and proceeded to […]

Filed under Domain Crime · Tagged with 10-K, GoDaddy, GoDaddy.com, SEC filing, cPanel hosting, hacking, hosting, malware

CISA shares list of #domains involved in Conti ransomware attacks

Posted by DomainGang on March 10, 2022, at 2:09 pm

CISA, the Cybersecurity & Infrastructure Security Agency, has been tracking the spreading and attacks of Conti ransomware. Along with the FBI, CISA have observed the increased use of Conti ransomware in more than 400 attacks on U.S. and international organizations. In typical Conti ransomware attacks, malicious cyber actors steal files, encrypt servers and workstations, and […]

Filed under Domain Crime · Tagged with CISA, Conti, Conti ransomware, DomainTools, Domains, cybercrime, domain crime, domain security, malware

YouTubetoMP3music.com: #UDRP decision will shut down service

Posted by DomainGang on September 29, 2021, at 1:58 pm

Is it “fair use” when you use a known brand or mark to offer a service, even if you don’t collect money for it? Not really and there are rules in place for exactly that. Apparently, YouTubetoMP3music.com uses the YouTube brand as part of its domain name. Google LLC that operates YouTube filed a UDRP, […]

Filed under Domain Law · Tagged with Music Search for Chrome, NAF, UDRP, YouTubetoMP3music.com, malware, trademark

ETH.com : Lander of choice hosts malware, according to Avast

Posted by DomainGang on May 27, 2021, at 11:36 am

The domain ETH.com was reportedly sold for $2,000,000 dollars in 2017. ETH is the symbol for Ethereum and it’s natural that the three letter .com domain would be used with cryptocurrency in mind. Currently, it appears that ETH.com forwards to the domain PooCoin.app, another cryptocurrency du jour with a smiling poop as a symbol. At […]

Filed under Domain News · Tagged with Avast, ETH.com, PooCoin.app, malware

Trickbot.com for sale : #Microsoft takes down malware network

Posted by DomainGang on October 12, 2020, at 9:25 am

Microsoft announced today that it has taken down Trickbot, a malware-spreading network by turning off its servers’ IP range. The Trickbot network had the potential to disrupt the ongoing US elections, and Microsoft obtained a federal court order which was relayed to various Internet Service Providers in the US. “We disrupted Trickbot through a court […]

Filed under Domain Crime · Tagged with Trickbot.com, malware, microsoft, trickbot

#Malware attack hit Heritage Auctions but no client data was compromised

Posted by DomainGang on October 21, 2019, at 1:06 pm

Heritage Auctions, that often handles premium domain auctions, was targeted by a malware attack. The activity has caused extensive downtime to its auction platform system, that has not been fully restored yet. Active auctions have been extended or rescheduled. Heritage Auctions issued a statement, that includes the following: Heritage would like to thank everyone for […]

Filed under Domain Crime · Tagged with Domainers, Domains, Heritage auctions, cybercrime, malware

Tech support malware : Scammers prefer .ORG, .XYZ and .Online domains

Posted by DomainGang on October 4, 2017, at 11:45 am

Scammers posing as tech support resolving malware attacks, have a preference for .ORG, .XYZ and .Online domains. A recent article by Malwarebytes Labs, researched how “tech support” scammers abuse native ad provider, Taboola, to serve such tech support scam ads. How does this work: Ads are bought on Taboola, serving links to web sites that […]

Filed under Domain Crime · Tagged with Malwarebytes Labs, Taboola, malware, scam, scammers, tech support scam

Splunk UDRP : Malware spreading from bogus domain

Posted by DomainGang on August 16, 2017, at 12:56 pm

The IDN domain spłunk.com has been used to spread malware and perform phishing attacks, riding on the coat-tails of the real Splunk brand. Splunk Inc. of San Francisco, filed a UDRP to take over the domain, which translates as xn--spunk-l7a.com in ASCII. The decision: Transfer the domain. Details follow: Splunk Inc. v. Super Privacy Service […]

Filed under Domain Law · Tagged with Domainers, Domains, Splunk, UDRP, WIPO, malware, spłunk.com

Domain security : DomainTools rolls out Threat Profile in beta

Posted by DomainGang on July 26, 2017, at 6:44 pm

DomainTools is rolling out Threat Profile, a new security tool that identifies domains that can be used for phishing, malware or spam campaigns – before that happens! This type of “Minority Report” utilizes heuristic algorithms that can efficiently crunch through data, and allocate probability of malicious use to domain names, quite accurately. Sounds a lot […]

Filed under Domain News · Tagged with API DomainTools, DomainTools, DomainTools Threat Profile, Domainers, Domains, malware, phishing prevention, security, spam campaigns

WannaCry malware cybercriminals made more than $6,300 in BTC so far

Posted by DomainGang on May 13, 2017, at 5:03 pm

The cybercriminals behind the WannaCry ransomware attack have already made a small fortune in Bitcoin. Once security analysts reverse-engineered the WannaCry code, the following Bitcoin address was revealed: 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn So far, that address has received 30 payments from victims whose computer files were encrypted, and succumbed to this type of digital blackmail. According to Blockchain.info, […]

Filed under Domain News · Tagged with 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn, WannaCry, WannaCry malware, cybercriminals, digital blackmain, malware

New domain registration scam intends to spread malware, ransomware

Posted by DomainGang on January 9, 2017, at 5:42 pm

A new domain registration scam is attempting to spread malware and ransomware via email. The emails, sent by cybercriminals in Russia and Ukraine, pretend to bear domain registration notices. The spear-phishing email reads: Whois Data Reminder <support@fromhost%> Dear customer: You have successfully registered ***.com. Order ID: [redacted] Domain registered date: 2017-01-09 Domain expired date: 2018-01-09 […]

Filed under Domain Crime · Tagged with Domainers, Domains, domain ransomware, domain registration scam, domain scams, malware, mic.qb-i.ru