MEDIUMMalware
Global

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

·Source: The Hacker News

Updated:

Executive Summary

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain becomes available for registration and is then snapped up by another party. During the first half of 2026, 50,400

Analysis

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain becomes available for registration and is then snapped up by another party. During the first half of 2026, 50,400
Source Attribution

Originally published by The Hacker News on Aug 14, 2026.

Related Threats