Epik Sends CloudBleed Email Update

You may have already heard about a recently discovered security bug called CloudBleed. Based on what I have read about the bug, users of many websites could potentially be impacted, and people may not even know their accounts could become compromised. I presume there is the potential that this could involve domain industry companies.

Yesterday, I received an email from Epik that I want to share with you. I think it is a good idea for Epik (and other companies) to address this ASAP and make sure their customers are aware of the situation. Kudos to Epik for informing customers of the issue almost immediately. Hopefully other industry companies that may be impacted will follow suit.

Important update – Cloudfare vulnerability

Recently, a serious vulnerability discovered in a service called Cloudfare – a technology widely used by companies worldwide to enhance site performance and increase security. The service is not used directly by Epik, but is used by a 3rd party service called Zendesk, used for live chat support. While we are confident that your account at Epik has been in no way compromised, this note provides background and explains recommended precautions.

The Cloudflare vulnerability, so-called CloudBleed opened the possibility that sensitive data, such as account names and passwords, may have leaked from some sites. The exact extent of any leak, if it occurred, is still unclear. While Epik is not affected as we do not use Cloudfare directly, we do take your account security very seriously. As a precaution, we are resetting all customer account PINs. Should you need your new PIN, you can login at Epik.com and see your new PIN.

If you use the same password also in other places on the web, you will also want to come up with a unique password for your Epik account. When choosing your password, please try using a strong, unique combination. A good password should contain a mix of at least eight letters, numbers and symbols. Besides keeping good passwords, there are several additional measures you can take for securing your account:

1. Enable WHOIS privacy for your domains – we offer it for free
2. Enable 2-Factor SMS authentication
3. Enable IP address restriction
4. Enable free Max-Lock which will block all transfers out requests

Please reach us out anytime at support@epik.com if you need assistance with the steps above or have any further questions.

Regards,
Epik

Elliot Silver
Elliot Silver
About The Author: Elliot Silver is an Internet entrepreneur and publisher of DomainInvesting.com. Elliot is also the founder and President of Top Notch Domains, LLC, a company that has closed eight figures in deals. Please read the DomainInvesting.com Terms of Use page for additional information about the publisher, website comment policy, disclosures, and conflicts of interest. Reach out to Elliot: Twitter | Facebook | LinkedIn

2 COMMENTS

  1. It is an interesting thing that now we truly focusing in on cyber security as a nation and the real impact on businesses and not only public but national security.

    As an investor, I’m wondering if the $17 I spent on these two hand regs will pan out…
    CloudbleedSecurity.com
    &
    CloudleakSecurity.com

    It may be too short term of a security threats for a domain investment. Let’s see. I’m open to some feedback.

  2. As an investor, I’m wondering if the $17 I spent on these two hand regs will pan out…
    CloudbleedSecurity.com
    &
    CloudleakSecurity.com

    It may be too short term of a security threats for a domain investment. Let’s see. I’m open to some feedback.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Recent Posts

2024 Global Domain Report Released Today

0
The annual Global Domain Report, produced jointly by InterNetX and Sedo, has been released and is now available to download at no cost. The...

Grok Knows .com

5
Grok is a generative AI chatbot developed by Elon Musk's company, xAI. Grok has been promoted within the X / Twitter ecosystem, and X...

Dynadot Now Offering Cryptocurrency Payments

1
Dynadot just announced that it now offers customers the ability to make payments using cryptocurrency. The offering is made via Bitpay, which supports more...

Sedo to Host .AI Auction

0
.AI domain names have become a popular topic of late. Some of the most popular domain industry auctions these days are the monthly expiry...

Scaffolding Company Gets Industry Matching .com for Under $50k

0
Sedo’s Senior Broker Dave Evanson reported the sale of Scaffolding.com yesterday. The domain name sold for $46,666, and it was the largest domain name...