Father’s Day: Bad Guys’ Activities | WhoisXML API

Threat Reports

Father’s Day: Bad Guys’ Activities

Whois API researchers previously uncovered suspicious web properties related to Mother’s Day1. Some of them were outright malicious, while others hosted questionable content. This Father’s Day, we detected a similar trend, indicating that the bad guys are also getting ready for the special occasion.

Here are our key findings:

  • We found 1,700+ domains and subdomains containing Father’s Day-related text strings, particularly “father” and “dad,” alongside “gift,” “game,” “shop,” “store,” “card,” and “gift.”
  • About 85% of the cyber resources actively resolved to 1,600+ IP addresses, some hosting questionable content, including login and look-alike pages, giveaways, and news sites.
  • Over a dozen properties have been reported as malicious by various malware engines.

Download a sample of the threat research materials now or contact us to access the complete set of research materials.


  • [1] https://main.whoisxmlapi.com/threat-reports/we-dont-want-to-spoil-mothers-day-but-these-domains-might
Try our WhoisXML API for free
Get started