1. See a vuln domain reported, clone the site.
2. Wait for it to expire and snag it.
3. Republish the site with malware
4. Watch people dither about domain names and stuff instead of taking time to fix things.
GitHub.io domains, workers.dev domains, etc are all free domains.
Clever use and abuse of some startups can get you a free domain with a signup package that you can subsequently transfer out, but those are harder to find these days.
Seriously, the bad guys figure this out all the time.
Sure, but domains aren't going to be more than $10 or $20 for the year they're relevant.
\o/
1. See a vuln domain reported, clone the site. 2. Wait for it to expire and snag it. 3. Republish the site with malware 4. Watch people dither about domain names and stuff instead of taking time to fix things.
Sure they are. The domain you want isn't.
GitHub.io domains, workers.dev domains, etc are all free domains.
Clever use and abuse of some startups can get you a free domain with a signup package that you can subsequently transfer out, but those are harder to find these days.
Seriously, the bad guys figure this out all the time.