It wasn’t until an SEO company re-registered the.com as a re-tread domain that the put a wildcard record in the.com‘s zone file and ended up redirecting a portion of traffic for the entire university’s infrastructure—potentially including student logins, email, and other legally sensitive data—to their own servers that anyone started to take notice.