Used in USAA phishing attack, hit with UDRP — USSA.com, domain

Four letter domain name subject to cybersquatting complaint.

A UDRP cybersquatting complaint has been filed against the domain name USSA.com.

The filing was made at National Arbitration Forum, which does not disclose the name of the complainant until a decision is rendered. Still, there’s a good chance it was filed by USAA, a financial services firm serving military and veteran families.

USSA.com was the domain name used in a recent phishing attack that Joseph Peterson (a veteran of the Navy) wrote regarding.

It’s not clear if the sender’s email address was spoofed, as it often is in phishing attempts, but it would be odd to spoof a typo rather than the target’s actual domain name. [Update: the whois has been unmasked and I really think the address was spoofed.]

At the same time, it’s rare that a good domain name is used in a phishing attack. Normally perpetrators use throwaway domain names, not four letter .coms.