Fake domain ransomware domain registration