I think it falls under the definition of Cybersquatting as described here: "Cybersquatting (also known as domain squatting), according to the United States federal law known as the Anticybersquatting Consumer Protection Act, is registering, trafficking in, or using a domain name with bad faith intent to profit from the goodwill of a trademark belonging to someone else" http://en.wikipedia.org/wiki/Cybersquatting

What happens if he is not in the US though? US laws don't apply worldwide(thankfully).

The US law is basically just the same as the cybersquatting provisions of ICANN's Uniform Domain-Name Dispute Resolution Policy, which is binding on all registrars worldwide.

ICANN UDRP is international so that would be one possible venue. Also, org's registrar is subject to US jurisdiction so it shouldn't matter where the registrant is located.

Is dsploit a trademarked term?

In the US, yes.

> "Common Law" trademark rights are acquired automatically when a business uses a name or logo in commerce, and are enforceable in state courts.

https://en.wikipedia.org/wiki/United_States_trademark_law

Interesting, thanks for the link!

> Certainly it's crummy and dishonest

For those of us who are less familiar with dsploit, can you explain why it's crummy and dishonest? All I know about it I got from reading the project's summary just now. Ostensibly, it's a penetration testing tool. Penetration testing is a legitimate and necessary part of security auditing.

Can the tools and knowledge of the security industry be exploited by malicious attackers? Of course it can. But as the theory goes, blackhats are going to use the best available attacks regardless of whether whitehats publicize their tools and knowledge. Thus, it's better for legitimate developers to learn how to penetration test, share their tools, and spread knowledge of the exploits far and wide, so that legitimate developers the world over may know their enemy and better defend against attacks.

Is there reason to believe dsploit is anything more nefarious than a legitimate penetration testing tool?

I think he is asking how the scam site is illegal.

The important thing is to know if it breaks the adsense TOS. Does it?

The relevant policy page:

https://support.google.com/adsense/answer/1348688?hl=en#Hack...

Also, from https://support.google.com/adsense/answer/2581949:

"We offer email support in several languages for our publishers earning more than US$25 (or local equivalent) per week on a consistent basis."

If you're above that threshold, it's possible to ask for a clarification and some advice on improving the site content. Google's policies exist to make the advertisers happy, so maybe Google might be OK with some more visible clarification of what dsploit is or isn't. (The name certainly isn't helping if it's a whitehat security tool.)