The fraudsters tricked employees of the hosting service provider to gain control over crypto domains.