Date of First Publication: March 4, 2026

Plaintiffs Microsoft Corporation (“Microsoft”) and Health-ISAC have sued Defendants Saad Fridi and John Does 1-4 associated with the Tycoon 2FA cybercriminal operation and domains listed in the documents set forth herein. You are receiving this email because you are the registrant of a domain that Tycoon 2FA Defendants use as part of their cybercriminal operation, and accordingly we have reason to believe that you are part of the cybercriminal operation and have violated federal and state law. Plaintiffs allege that the Tycoon 2FA Defendants have violated federal and state law by hosting a cybercriminal operation through these domains and selling, distributing, purchasing, and utilizing the Tycoon 2FA phishing kits that support a Phishing-as-a-Service enterprise. The phishing kits made and sold by the Tycoon 2FA Defendants facilitate sophisticated spear phishing and are designed to steal sensitive information that is then used to perpetrate additional cybercrimes including business email compromise, financial fraud, and ransomware attacks. Tycoon 2FA Defendants have also committed intellectual property violations irreparably harming Plaintiffs’ customers and member organizations. Plaintiffs seek a preliminary injunction directing the registrars associated with these domains to take all steps necessary to disable access to and operation of these domains and that all content and material associated with these domains are to be isolated and preserved pending resolution of the dispute. The Clerk has granted Plaintiffs’ request for entry of default. Plaintiffs have also filed a motion for default judgment and permanent injunction. Full copies of the pleading documents are available at www.noticeofpleadings.com/Tycoon2FA.

NOTICE TO DEFENDANT: READ THESE PAPERS CAREFULLY! You must “appear” in this case or the other side will win automatically. To “appear” you must file with the court a legal document called a “motion” or “answer.” The “motion” or “answer” must be given to the court clerk or administrator within 21 days of the date of first publication specified herein. It must be in proper form and have proof of service on the Plaintiffs’ attorney, Jeffrey L. Poston at Crowell & Moring LLP, 600 Fifth Street NW, Washington D.C. 20001, jposton@crowell.com. If you have questions, you should consult with your own attorney immediately.

NOTICE TO DEFENDANTS: Pursuant to Court Order, the Court has ORDERED Plaintiffs to file by October 9, 2026 any motion for default judgment against Saad Fridi and John Does 1-4. The Court has ORDERED that the Default Judgment Hearing will be SCHEDULED for October 20, 2026 at 3:00 p.m. in Courtroom 18B at the Daniel Patrick Moynihan Courthouse in the Southern District of New York located at 500 Pearl Street, New York, New York, before Judge Denise L. Cote.