Well, it didn't really stop it. It slowed it for a little bit, and then it was modified and spread again.

I also wonder if now ransomware developers will leave red-herrings in the code where if the wrong domain is registered, it will do something more destructive.

It's like knowing which wire to cut when you're defusing a bomb!