The incident, which affected 1.2 million users, raises concerns about domain impersonation attacks and other malicious activities.