IN THE UNITED STATES DISTRICT COURT

FOR THE EASTERN DISTRICT OF VIRGINIA

Alexandria Division

OATH RESEARCH, LLC, an Arizona limited

liability company; and STACEY JON GRANT,

an individual,

Plaintiffs,

v. Civil Action No.

1:26-cv-02916-MSN-WBP

JOHN DOES 1-10, individuals or entities

operating under the alias "modastores,"

Defendants,

OATHRESEARCH.COM, OATHPEPTIDES.COM,

OATHPEPTIDE.COM,

OATHRESEARCHLLC.COM,

OATHRESEARCHSUPPLY.COM,

OTHRESEARCHSUPPLY.COM,

OATHSCRIPT.COM

and RXOATH.COM,

Internet domain names,

Defendants in rem,

and

VERISIGN, INC., a Delaware corporation,

Nominal Defendant.

AMENDED TEMPORARY RESTRAINING ORDER

This matter came before the Court on the Plaintiffs' Emergency Motion to Modify and Extend the Temporary Restraining Order entered September 17, 2026 (ECF 15) and Plaintiffs' Motion to Publish Notice of Action (ECF 17). Having considered the Motion and supporting papers, the Court will GRANT Plaintiffs' motions. Unless explicitly stated, this Amended Order does not modify the TRO entered September 18, 2026 (ECF 14). In addition to the findings and relief granted in the TRO, and for good cause, it is hereby:

1. ORDERED that Pursuant to 15 U.S.C. §§ 1125(d)(2)(D)(i), 1125(d)(1)(C) and 1116(a) as applicable to the Mark Domain Names, 18 U.S.C. § 1030(g) as to all Defendant Domain Names, and 28 U.S.C. § 1651(a), Verisign, as the registry for the .com top-level domain, shall immediately and in any event within one (1) business day of receipt of this Order take all steps necessary to CHANGE THE REGISTRAR OF RECORD for each of the twenty-five Defendant Domain Names listed in Schedule A to Digital Candy, Inc. (IANA ID 3253), 1775 Eye Street NW, Suite 1150, Washington, D.C. 20006. Digital Candy, which Plaintiffs have designated and which has agreed to accept the Defendant Domain Names, is AUTHORIZED to accept and hold each Defendant Domain Name in an account designated in writing by Plaintiff Oath Research, LLC and subject to this Order pending further order of the Court. The change shall be effected without any authorization code, approval, consent, or other action by the current registrar of record, registrant, or account holder, and any registry or registrar status that would otherwise prevent the court-ordered change may be removed solely to the extent necessary to implement this paragraph. It is further

2. ORDERED that immediately after the change ordered in paragraph 1 is completed, Digital Candy shall place and maintain each Defendant Domain Name on clientTransferProhibited and clientDeleteProhibited status. Verisign shall maintain serverTransferProhibited and serverDeleteProhibited status. Any serverUpdateProhibited or clientUpdateProhibited status may be lifted only as necessary to implement paragraph 3 or another update authorized by Plaintiffs through Digital Candy, and shall be reapplied when the authorized update is complete if technically compatible with continued operation. No Defendant Domain Name may be sold, deleted, transferred to another registrar, or transferred to another registrant absent further order of the Court. It is further

3. ORDERED that contemporaneously with the change ordered in paragraph 1, Verisign and Digital Candy shall cause each Defendant Domain Name to use the authoritative nameservers listed for it in the “Pre-Theft DNS Configuration” column of Schedule A, or secure replacement nameservers designated by Plaintiffs through Digital Candy. For any name whose Pre-Theft DNS Configuration consists of nameservers controlled by Fewmoretaps OÜ d/b/a Trustname.com, Plaintiffs may designate replacement nameservers under their control. Thereafter Plaintiffs may manage nameserver delegation and ordinary registration data through Digital Candy as reasonably necessary to operate the names, subject to the prohibitions in paragraph. It is further

4. ORDERED that the registrar of Domain Names REG.RU LLC, NiceNIC International Group Co., Limited, Fewmoretaps OÜ d/b/a Trustname.com, any registrar to which ICANN transfers names sponsored by Fewmoretaps OÜ, and any other current registrar of record of a Defendant Domain Name shall take no action inconsistent with this Order or interfere with the registry-level change directed in paragraph 1. No affirmative operational action by a current registrar is required. The change of registrar ordered herein is made by order of a court having jurisdiction over the transfer, and no authorization-code, sixty-day, or other transfer restriction shall prevent implementation of this Order. It is further

5. ORDERED that all preservation duties and all restraints imposed by ECF No. 14 on the Doe Defendants, Verisign, the registrars, and persons acting in active concert or participation with the Doe Defendants remain in full force except to the extent modification is necessary to carry out paragraphs 1–4 of this Order. It is further

6. ORDERED that to the extent provided by 15 U.S.C. § 1125(d)(2)(D)(ii) and other applicable law, Verisign, Digital Candy, and the registrars shall have no liability for goodfaith actions taken in compliance with this Order. It is further

7. ORDERED that the waiver of bond in the Temporary Restraining Order remains in effect. It is further

8. ORDERED that for good cause under Fed. R. Civ. P. 65(b)(2), the Temporary Restraining Order, is modified by this Amended Order to provide for a hearing regarding the issuance of a preliminary injunction shall be held on October 2, 2026 at 10:00 am unless earlier dissolved, superseded, or further extended as permitted by law. The TRO shall remain in effect until after the preliminary injunction hearing. It is further

9. ORDERED Plaintiffs shall immediately serve this Amended Order on Verisign, Digital Candy, the current registrars of record, and John Does 1-10 by the same means used to provide actual notice of Temporary Restraining Order. It is further

10. ORDERED that, within seven (7) days of the entry of this Amended Order, Plaintiff will cause a copy of this Order to be published in the Washington Post or the Washington Times. It is further

11. ORDERED that the Defendant Domain Names are hereby advised:

A. the Plaintiff has filed a Complaint charging the Defendant Domain Names oathresearch.com; oathpeptides.com; oathpeptide.com; oathresearchllc.com; oathresearchsupply.com; othresearchsupply.com; oathscript.com; rxoath.com; re-searchersonly.com; summerscientific.com; oaclinic.com; promiseclinical.com; promisehealthrx.com; promisepeptide.com; mypromisepeptides.com; promisetele-med.com; startpromise.com; vowamino.com; vowaminos.com; vowchemistry.com; vowlaboratory.com; vowpeptide.com; vowpeptides.com; vowscience.com; and vowscientific.com with violation of the Anticybersquatting Consumer Protection Act of 1999 (the

“Act) and violation of the Computer Fraud and Abuse Act. A copy of the Complaint may be obtained from the Plaintiffs’ attorney, Jonathan Westreich, Esq., 604 Cameron Street, Alexandria, Virginia 22314, 703-299-9050.

B. In the event that the Plaintiff prevails against the Defendant Domain Names under the Act, remedies could include the forfeiture or cancellation of the Defendant Domain Names or the transfer of the Defendant Domain Names to the Plaintiff in this action as well as money damages and an award of attorney fees. It is further

ORDERED that Plaintiff will immediately serve Doe Defendants as to all claims asserted in the Complaint in this matter, process, and all future filings by email and by the publication of notice as ordered herein.

IT IS SO ORDERED.

The Clerk is directed to forward a copy of this Order to counsel of record.

/s/ Michael S. Nachmanoff

United State District Judge

September 18, 2026

Alexandria, Virginia

Run Date: September 23rd, 2026

AD#105440