Re: Fraudulent Domain

[Brad Judy <brad.judy () CU EDU>]

I’m battling an identical battle at the moment. So far, the registrar for the domain has not replied to my email and 
voicemail contacts with their abuse department. I’m curious to hear the other advice you receive.

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<http://www.cu.edu/>

[cu-logo_fl]


From: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Gomez, Joshua" <J.Gomez () SNHU EDU>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Monday, September 24, 2018 at 9:12 AM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Fraudulent Domain

Hello Everyone,

We have had a fraudulent domain pop up impersonating the University sending out fake Purchase Orders to suppliers.  
This website domain does not have an active website but we still reported the domain to reputation reference websites 
such as VirusTotal, ESET, Google Safe Browsing etc.  We plan to contact the registrar of the website and having our 
legal team request a DMCA takedown notice.

What other steps can we take to expedite having this fraudulent domain taken down?

Thanks

Josh

Joshua Gomez | Consultant, Information Security
Information Technology Solutions
Physical Address: 1230 Elm Street, Manchester, NH 03101
Mailing Address: 2500 North River Road, Manchester, NH 03106
Office Phone: 603-626-9100 x7777 | Service Portal<https://snhu.service-now.com/sp>

[SNHU horizontal logo]




Please consider the environment before printing this e-mail.