Crypto exchange Coinbase has sued an alleged cybersquatter over the domain coinbase.de, which it says has been used to redirect users to an app used to trade physical coins and to potentially extort the exchange into buying it. 

Coinbase sued Tobias Honscha from Isernhagen, Germany, in a California federal court on Thursday, claiming he is squatting on the domain coinbase​.de to use for different purposes, including redirecting visitors to his app for trading physical coins and making money as a Coinbase affiliate. 

“Coinbase recently became aware that Honscha is using and trafficking in the domain coinbase​.de in bad faith to capitalize on the goodwill that Coinbase has developed in the Coinbase name over the past decade and more,” the exchange said in a lawsuit. 

Cybersquatting, or domain squatting, involves buying a web domain name similar to an existing well-known brand. Phishing scammers often use the practice to trick unwitting users, while some domain owners will try to sell the domain to the trademark holder for a profit.

URL broke Coinbase affiliate agreement, exchange claims

Coinbase claimed Honscha had, at one time, used the domain name to host his affiliate link to the crypto exchange, fetching rewards for those who sign up through it.

The company said this violated its affiliate agreement, which says an affiliate link can’t “masquerade as being the same as Coinbase” or use the words “Coinbase or Coin Base” in domain names. 

“Honscha violated the terms of the Affiliate Agreement by using the coinbase​.de domain, which fully incorporates the COINBASE trademark and gives the impression that Honscha is one in the same with Coinbase,” the complaint read. 

Coinbase claims pressure to buy domain at “inflated price”

The exchange accused Honscha of attempting “to profit from the domain by threatening potential fraud or cybercrimes unless Coinbase pays an inflated price.”

Coinbase claimed that in conversations with Honscha, he noted the “‘risks of a phishing attack via the Coinbase email account’” along with “‘unsolicited submission of ID documents, passwords, and one-time 2FA codes’ if Coinbase were to not purchase the domain from Honscha.”

“This is a clear attempt to hold Coinbase hostage by threatening to offload it to a buyer who would weaponize it even more,” the company said. 

Coinbase says domain used for other means, including email

Coinbase claimed that after it told Honscha to stop using the domain to host his affiliate link, the site was then used to redirect visitors to a mobile app for trading physical coins.

The company also accused Honscha of “operating an email service through the @coinbase​.de email account,” which would allow him to communicate with and get sensitive information from “individuals who may mistakenly believe they are communicating with Coinbase.”

Related: Dragonfly to ‘vigorously defend’ itself against DOJ scrutiny over Tornado Cash investment

“These mistaken emails have and will continue to occur,” Coinbase wrote in the complaint. “The public may very well expect that a company’s corporate or product website can be found at a domain name that consists of or includes that company’s name or trademark or variations thereof.”

At the time of writing, the domain redirected to a forum for discussing physical coins, which listed Honscha as a “responsible person” for the site. An email listed on the site did not immediately return a request for comment.

Coinbase has asked the court to grant it damages and profits from Honscha’s alleged misuse of the domain, to stop him from using it, and to possibly transfer the domain to Coinbase.

The company is also seeking damages over Honscha’s alleged breach of the affiliate contract, including commissions he might have received through the domain.

Magazine: Coinbase hack shows the law probably won’t protect you — Here’s why

]]> https://earlybirdsinvest.com/coinbase-sues-man-using-a-coinbase-like-url-to-make-money/feed/ 0 50058 https://earlybirdsinvest.com/vmware-workstation-auto-updates-broken-after-broadcom-url-redirect/ https://earlybirdsinvest.com/vmware-workstation-auto-updates-broken-after-broadcom-url-redirect/#respond Tue, 01 Apr 2025 06:22:00 +0000 https://earlybirdsinvest.com/vmware-workstation-auto-updates-broken-after-broadcom-url-redirect/

VMware Workstation users report that the software’s automatic update functionality is broken after Broadcom redirected the download URL to its generic support page, triggering certificate errors.

The software contains a feature that checks for new updates on startup (if configured) and can be manually triggered by clicking Help > Software Updates. This will cause the program to connect to the software update server at https://softwareupdate.broadcom.com/cds to check for and download software updates.

However, this URL now redirects to Broadcom’s generic support page, https://support.broadcom.com/, causing the application to issue certificate validation errors and rendering its built-in update mechanism unusable.

“A certificate error occurred while connecting to the update server. Check your Internet settings or contact your system administrator,” reads the VMware Workstation error.

Users are now forced to log in and manually check Broadcom’s website for updates, download the correct version, and install it themselves, making it frustrating for customers who expect a seamless experience.

“To update your VMware Workstation Pro, you’ll need to manually download the latest installer from the Broadcom support portal. It’s worth noting that this change has caused frustration among users, as it was implemented without prior notice,” reads a post to the Broadcom community forums.

While VMware Workstation continues to function, this broken update system may cause users to miss important bug fixes or security patches, especially when it is not apparent that the automatic update feature is broken until you try to use it.

Broadcom has not yet issued a public statement or workaround for the issue, and BleepingComputer has confirmed it is still broken in VMware Workstation 17.6.3, the latest software version.

BleepingComputer contacted Broadcom with questions about the change but has not received a response.