Comment by mistaken

Yes, but the key difference is that chrome uses a randomly generated domain name, while the ransomware has it hardcoded.