Sometimes, website owners no longer want to own a domain name and they allow it to expire without attempting to renew it.

This happens all the time and is totally normal, but it’s important to remember that attackers regularly monitor domain expirations and may target certain domains that meet specific criteria.

Vendor domains can be an easy backdoor

A vendor (supplier) domain is defined as a website that is used to host and load third party Javascript resources — for example, something like a live chat widget or also advertisements.

Continue reading Hackers Love Expired Domains at Sucuri Blog.

Via Sucuri.net