Microsoft purchases corp.com domain to stop attackers from getting it

Microsoft logo
Microsoft logo (Image credit: Daniel Rubino / Windows Central)

What you need to know

  • Microsoft purchased the corp.com domain.
  • The domain could be used to obtain people's passwords, emails, and other data from Windows PCs.
  • Microsoft did not disclose how much it purchased the domain for, though the old owner was asking for $1.7 million.

Microsoft purchased the corp.com domain recently in order to protect people's passwords, emails, and sensitive data. The domain could be used to obtain data from people's PCs if a company admin sets a generic domain name up within Active Directory. KrebsOnSecurity first reported the purchase.

The domain is important because if admins set up Active Directory with a generic name, in this case, corp.com, then the corp.com domain could be used to obtain people's sensitive data. The domain's old owner, Mike O'Connor, wanted $1.7 million for the domain that he purchased 26 years ago, as reported by KrebsOnSecurity.

In its post covering the auction of the domain, KrebsOnSecurity explained why the domain is so important:

In practical terms, this means that whoever controls corp.com can passively intercept private communications from hundreds of thousands of computers that end up being taken outside of a corporate environment which uses this 'corp' designation for its Active Directory domain.

Microsoft confirmed the purchase to ZDNet and explained some other steps it took for people's security:

To help in keeping systems protected we encourage customers to practice safe security habits when planning for internal domain and network names. We released a security advisory in June of 2009 and a security update that helps keep customers safe. In our ongoing commitment to customer security, we also acquired the Corp.com domain.

ZDNet's Mary Jo Foley asked how much Microsoft spent on the domain. Microsoft did not disclose the purchase amount.

Sean Endicott
News Writer and apps editor

Sean Endicott is a tech journalist at Windows Central, specializing in Windows, Microsoft software, AI, and PCs. He's covered major launches, from Windows 10 and 11 to the rise of AI tools like ChatGPT. Sean's journey began with the Lumia 740, leading to strong ties with app developers. Outside writing, he coaches American football, utilizing Microsoft services to manage his team. He studied broadcast journalism at Nottingham Trent University and is active on X @SeanEndicott_ and Threads @sean_endicott_.