Story thread · 2 reports / 2 sources

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

thehackernews.com · 2dShare

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain becomes available for registration and is then snapped up by another party. During the first half of 2026, 50,400

First report: Expired domains are a goldmine for hackers – and some cyber crime groups are investing millions in 'dropcatch' scams to deliver malware — itpro.com, 3d