Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware