Father’s Day: Bad Guys’ Activities
Whois API researchers previously uncovered suspicious web properties related to Mother’s Day1. Some of them were outright malicious, while others hosted questionable content. This Father’s Day, we detected a similar trend, indicating that the bad guys are also getting ready for the special occasion.
Here are our key findings:
- We found 1,700+ domains and subdomains containing Father’s Day-related text strings, particularly “father” and “dad,” alongside “gift,” “game,” “shop,” “store,” “card,” and “gift.”
- About 85% of the cyber resources actively resolved to 1,600+ IP addresses, some hosting questionable content, including login and look-alike pages, giveaways, and news sites.
- Over a dozen properties have been reported as malicious by various malware engines.
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://main.whoisxmlapi.com/threat-reports/we-dont-want-to-spoil-mothers-day-but-these-domains-might
Latest Reports
Integrity Technology Group-Backed Actors Combine Automated and Manual Tools in Global Attack
WhoisXML API uncovered 7,100+ additional artifacts linked to the Integrity Tech-enabled global data theft attack. Download the threat research materials now.
Earth Sirrush Espionage Tool Evolution: DNS Facts Unveiled
WhoisXML API uncovered 400+ additional artifacts linked to Earth Sirrush. Download the threat research materials now.
Four hours before PHP2Shell’s Disclosure
A server scouted our honeypots 4 hours before PHP2Shell’s disclosure, then returned with exploit attempts. The report covers its traffic history and IoCs.