Dangerous Domain Corp.com Goes Up for Sale
Summary: Mike O'Connor, who registered corp.com in 1994, is selling the domain for $1.7 million after 26 years, because Windows Active Directory deployments that used the default 'corp' label cause machines to resolve internal resources at corp.com. In an eight-month 2019 study funded in part by the U.S. Department of Homeland Security, Jeff Schmidt found more than 375,000 Windows PCs sending internal traffic to corp.com, and a brief experiment accepting logins produced what a consultant described as credentials 'raining' down before it was stopped after 15 minutes.
Key Takeaway: Whoever controls corp.com could hold an instant foothold into roughly 30 of the world's largest companies, per Schmidt, and Microsoft declined to answer specific questions about the traffic while noting it offered $20,000 for the domain years earlier.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026