Don’t Let Your Domain Name Become a “Sitting Duck”

Infoblox and Eclypsium warn that roughly one million "Sitting Duck" domains with lame DNS delegations remain vulnerable to takeover at several major DNS/hosting providers; attackers have hijacked at least 30,000 such domains since 2019 and used them for phishing, spam, impersonation, and malware command-and-control. The report details affected providers and examples, explains root causes (delegation to authoritative DNS that lacks correct records and weak provider verification), and urges stronger registrar/provider verification and coordination to prevent further abuse.