Unauthorized person registered a dot .GOV #domain with fake documents!

Posted by DomainGang on November 27, 2019, at 10:04 am

This is one for the facepalm department. An unauthorized individual managed to register a dot .GOV domain name, using fake papers and social engineering. Apparently, the US General Services Administration– the federal agency responsible for managing the .gov domain registration process – failed to validate the request, made by an individual who impersonated the mayor […]

Filed under Domain Crime · Tagged with Brian Krebs, Domainers, Domains, Exeterri.GOV, Krebs, dot .GOV, security

#Data leak involves 1.2 billion user accounts – are #domainers affected?

Posted by DomainGang on November 22, 2019, at 10:23 am

A massive new data leak was announced today, involving personal data from 1.2 billion accounts. The result of an obvious hack consists of 4 Tb of personal information, containing profiles of hundreds of millions of people. Such data includes: home and cell phone numbers, associated social media profiles like Facebook, Twitter, LinkedIn, and Github, work […]

Filed under Domain Crime · Tagged with Domainers, Domains, data leak, domain crime, security

Domain #security : Proofpoint shares its 2019 report on fraudulent #domains

Posted by DomainGang on June 20, 2019, at 12:13 pm

Millions of domains are registered every year, by people looking to defraud businesses, their employees and customers. By utilizing social engineering tactics and phishing techniques, cybercriminals register domains that impersonate trusted brands. From there, they launch phishing attacks and other scams. More than 75% of businesses came across fraudulent domains posing as their brand, according […]

Filed under Domain Crime · Tagged with Domainers, Domains, Proofpoint, domain crime, fraudulent domains, security

#Hacker group claims to have defaced a #GoDaddy server

Posted by DomainGang on April 30, 2019, at 2:08 pm

A hacker group shared captures of a GoDaddy server, a few hours ago, claiming dibs to its defacement. The attack involved the subdomain pwsgallery.godaddy.com which has now been taken offline. According to cached information from Google, PWS Gallery appears to be a demonstration of content created for GoDaddy customers. While www.pwsgallery.com is currently offline, videos.pwsgallery.com […]

Filed under Domain News · Tagged with GoDaddy, GoDaddy defaced, PWS, PWS GoDaddy, security

#Bodybuilding .com : Data breach leads to password reset

Posted by DomainGang on April 24, 2019, at 3:28 pm

One of the world’s biggest online fitness stores, Bodybuilding.com, announced that a breach of its systems compromised personal user data. A phishing attack targeting its staff in July 2018, led to the subsequent exposure of its servers to hackers. Registered in 1999, Bodybuilding.com claims to receive 35 million unique visitors per month, with well over […]

Filed under Domain News · Tagged with Bodybuilding.com, data breach, security

MarkMonitor #security expert : Protect the #domains that define your brand

Posted by DomainGang on March 5, 2019, at 5:24 pm

MarkMonitor security expert, Sherry Hildebrand, has put together an informative report on protecting domains from cyberattacks. Domain names are the quintessential elements of brands; downtime can hurt a brand’s livelihood and sustainability. Here some key points from the MarkMonitor report: Use registry lock on core domains. All core domains should have an additional lock, called […]

Filed under Domain News · Tagged with Domainers, Domains, MarkMonitor, security

Alex Stamos on #domain WHOIS and Michael Cohen : European push for #GDPR enables criminal activity

Posted by DomainGang on February 27, 2019, at 5:26 pm

Security expert, Alex Stamos, worked for Yahoo! and Facebook at managerial positions; he’s currently at Stanford as an Adjunct Professor at Stanford’s Freeman-Spogli Institute. Under the light of Michael Cohen’s testimony at the Congress, Mr. Stamos pointed out that the domain ShouldTrumpRun.com was under the control of a “Michael Cohen” with a NYC address in […]

Filed under Domain News · Tagged with Alex Stamos, DomainTools, Domainers, Domains, GDPR, WHOIS, domain security, security

Half a million #domains at #GoDaddy were exposed to #DNS vulnerability

Posted by DomainGang on January 23, 2019, at 12:33 pm

A serious vulnerability in the way DNS records are created, left more than 500,000 expired domains at GoDaddy in the hands of cybercriminals. While this was not a GoDaddy-specific issue, the ability to create free DNS records at GoDaddy, literally cost nothing to the perpetrators. Expired domains with nameservers under domaincontrol.com, the domain for GoDaddy’s […]

Filed under Domain Crime · Tagged with Domains, GoDaddy, GoDaddy DNS, GoDaddy vulnerability, cybercrime, domain crime, security

#Spamhaus December 2018 update : The 10 most abused #TLDs

Posted by DomainGang on December 28, 2018, at 12:21 pm

SpamHaus, a global keeper of domain and IP violations, maintains a list of abusive behavior originating from a large variety of gTLDs and TLDs. How does SpamHaus measure that type of negative performance among domain extensions? The abusive behavior of domain TLDs is calculated as the ratio of abusive domains that exist in a given […]

Filed under Domain News · Tagged with Domainers, Domains, abuse, security, top 10 most abused TLDs

#Neustar to acquire Verisign’s #Security Services Customer Contracts

Posted by DomainGang on October 25, 2018, at 10:41 pm

Neustar, a DomainGang sponsor, has announced that they will acquire Verisign’s Security Services customer contracts, consisting of Distributed Denial of Service (DDoS) Protection, Managed DNS, DNS Firewall and fee-based Recursive DNS services. According to a press release we received from Neustar, this acquisition is a testament to the company’s steadfast commitment to its customers; it also differentiates the […]

Filed under Domain News · Tagged with DDoS, Domains, Verisign, neustar, security

#Emojis should not be used in #domain registrations, says #security expert

Posted by DomainGang on October 24, 2018, at 1:37 pm

Patrik Fältström, a security expert from Sweden, has shared his views on why emojis should not be used in domain names. Fältström is known for his work on standardization and development in various Internet agencies, such as the Internet Engineering Task Force and the Internet Architecture Board, which coordinates technical development of the Internet. In a recently […]

Filed under Domain News · Tagged with IDN Domains, Patrik Fältström, emoji domains, emojis, security

#Security intervention : #GoDaddy AWS infrastructure exposed, then patched

Posted by DomainGang on August 13, 2018, at 11:49 am

The GoDaddy infrastructure of its Amazon AWS systems was exposed; the security issue was reported and fixed very recently. According to security firm UpGuard Cyber Risk Team, the discovery involved data exposure of documents appearing to describe the GoDaddy infrastructure running in the Amazon AWS cloud. The UpGuard Cyber Risk Team reported and secured the security […]

Filed under Domain News · Tagged with AWS, GoDadady, UpGuard Cyber Risk Team, domain security, security

« Previous Page — Next Page »