Domain Daily · 1 November 2026

TrueCrypt.com Hijacking Warning Resurfaces – And Now Name.com Users Are Hit Too

A warning from Domain Gang has me rethinking which old, trusted websites are worth clicking on without a second thought.

By Maggi Ferguson

Domain Gang posted on Saturday that they'd reported "the domain hijacking method and the outcome" to NetSol's support account, @netsolcares, and told readers plainly not to trust the software on TrueCrypt's download pages. TrueCrypt was once a well-known disk encryption tool, discontinued years ago, which makes an old download link exactly the kind of thing people still stumble on through search engines.

This isn't a new alarm. Domain Gang says they flagged the issue back in February, and reported last year that TrueCrypt.com had been "transferred out in a typical hijacking fashion," adding that control of a related name doesn't give anyone a claim on the .com. What's new here is the follow-up: Domain Gang says the method and the outcome have now been formally reported to the registrar. I haven't seen a response from NetSol yet, so that part is still open.

It wasn't the only hijacking story doing the rounds. On Sunday, Domain Gang reported a separate DNS hijacking at Name.com, saying at least 15 domains were redirected as part of a crypto wallet attack. Domain Gang's fuller writeup adds the detail the post lacked: Name.com has confirmed the incident on X, says the affected domains have been restored, and has an investigation underway. The redirects happened late on Friday 30 October and sent visitors to copies of legitimate crypto sites carrying wallet-draining software. The loss figures are estimates from independent researchers, roughly $138,000 by one blockchain analysis and about $202,000 from 32 wallets by another, and the method of compromise is still unknown. Name.com has told customers to check their nameserver and DNS records and turn on two-factor authentication.

My take: if you've ever bookmarked TrueCrypt for any reason, don't use those download links. And whichever registrar you use, two hijacking stories landing the same weekend is as good a prompt as any to go check your transfer locks and DNS settings.

Rams.com wants $2.5 million

Away from security scares, Domain Gang also flagged that Rams.com has gone up for sale on Spaceship with a minimum offer of $2.5 million.

That's a listing price, not a sale, so nobody should read it as money that's changed hands. Four-letter sports-team-adjacent .com names like this tend to get priced high and sit for a while, so I'd treat the number as an opening position rather than a market signal.

What sold on Saturday

NameBio's daily rundown, posted Sunday morning, put Saturday's total at roughly $574,000 across its tracked sales. A fuller breakdown shared on NamePros put the $100-plus total at $539,821 across 760 sales, with another $33,978 from 2,371 sales under $100 – and noted both the sale count and dollar volume were down on the day before. As always, these are figures NameBio pulls from registrar marketplaces, not firsthand confirmations from the sellers.

The names at the top:

  • 8225.com – $33,500 (GoDaddy)
  • Onchain.xyz – $25,199 (Namecheap)
  • 16000.com – $22,938 (GoDaddy)
  • MemoryVault.com – $15,250 (GoDaddy)
  • Artwork.org – $11,049 (GoDaddy)
  • WorldCasinos.com – $10,099 (Dynadot)
  • MaxDrama.com – $5,500 (Afternic)
  • LunaPay.com – $5,033 (Namecheap)
  • InspiredFoundation.com – $3,600 (Afternic)

Numeric .coms and short brandables still carry most of the weight on a day like this.

.si: a real niche, and some pointed commentary

NameBio's own breakdown shows .si had nine sales on Saturday for $13,244 total, an average of $1,472 – including Candid.si and Humans.si at $3,000 each and Inquire.si and Enact.si at $2,200 each. After weeks of .si headlines, that's still a useful bit of scale: a real niche, not yet a large one.

What's more interesting is the commentary attached to it. Replying to a comment that .si names "selling high" still mostly means domainers trading with each other rather than end users buying, Domain Gang agreed, calling it "the current consolidation phase" of investor-to-investor sales, and naming the buyer side as a Chinese investor. That's Domain Gang's characterisation, not something I've checked independently, but it fits a pattern worth watching: domainers reshuffling .si names among themselves rather than genuine end-user demand showing up yet.

Separately, Constantin (@EnterpriseRobot) posted that a bulk sale of six .si domains, including Consultation.si, closed for $22,500 via escrow. That's a single, self-reported claim from someone describing their own deal, with nothing else to corroborate it, so I'd leave that figure unconfirmed for now.

Also on my radar

  • New gTLD sales for October: TLDInvestors puts the month at $1.2M across 1,283 sales, level with September, with an average price of $933. ASI.inc led at $90,000 (22 October, Ultra.inc), ahead of compute.xyz at $80,000 and 30.vip at $53,100.
  • Honey.ai, $150,000: NamePros' weekly Top Topics says it changed hands through Atom.com, citing NameBio. The write-up doesn't give the sale date, so I'd treat it as a recent report rather than something from this weekend.
  • A US registrar goes to auction: the same roundup says Applicant Auction is running a no-reserve sale of a US registrar with over a million domains under management. Its name is only available after signing an NDA.
  • Sedo's quiet week: Domain Gang says Sedo skipped its usual weekly sales report but flagged one fresh sale: juiceproducts.com for $3,500.
  • A 30-year-old .org on the block: Domain Gang covered Immortal.org heading to its DropCatch auction finale.

Would you trust an old download link without checking the registrar's transfer lock first? And does this .si run look like real end-user demand to you, or domainers trading names amongst themselves? Let me know in the comments.

I love domaining and support the domain industry