Hijacked Domain Accounts Turned Sites Into Scams

· All blog posts

Free Assessment Or call 903-675-5431

25+

Years in Business

85+

Years of Experience

137

Servers Maintained

1,369

Workstations Served
Twin keys over a domain-lock plate reading Domain Account Takeover - Lock the registrar before attackers do - November 2, 2026.

Late Friday night, October 30, 2026, attackers redirected a cluster of websites by taking over domain accounts at Name.com, a domain registrar that holds your domain registration and the DNS settings that tell browsers where your site lives. Security firm Blockaid flagged about a dozen sites serving wallet-drainer pages, and Name.com later said fifteen customer domains were affected and that it restored them. Vercel, a hosting and domain partner that uses Name.com for some registrations, said ten domains tied to its platform were among those hit and that Name.com put them back.

Name.com told The Block it found unauthorized activity that redirected domains registered through its platform, secured the accounts involved, and is still investigating while urging customers to check DNS records and turn on two-factor authentication. Root cause hasn't been published, though some project teams pointed at Vercel-related nameservers. Vercel's bulletin describes a Name.com takeover campaign that Name.com is investigating, with Vercel assisting. Public registry checks showed the named domains were all registered at Name.com, while their DNS sat across several providers, which is why the lesson is account control, not one hosting brand.

For East Texas businesses the story isn't about crypto, because anyone who owns a company website depends on the same registrar login. If that account falls, an attacker can point your familiar address at a lookalike page that harvests passwords, payments, or customer forms. Turn on multi-factor authentication (MFA), a second proof of identity beyond a password, on the registrar account today, and prefer an authenticator app or hardware key over text messages when the registrar offers it. Enable registrar lock or registry lock so the domain can't transfer or change critical settings without extra verification, set email or dashboard alerts for DNS and nameserver changes, and keep an offline note of current nameservers and a short recovery contact at the registrar for after-hours emergencies.

Chandler firms that want a practical check of registrar MFA, domain locks, and DNS-change alerts can ask My I.T. Consultants for a Free Assessment. Call 903-675-5431 Monday through Friday, 7:00 a.m. to 6:00 p.m. Contract clients get 24/7 coverage across East Texas.

Want help with this at your business? See Cybersecurity on our Services page or contact My I.T. Consultants.


Need this handled for your team?

Free Assessment

My I.T. Consultants are Experts in the IT Industry

Certifications and Affiliations