Insights into an Active Malicious Spam Domain Portfolio
Age clearly doesn’t matter when it comes to cyber threats, as proven by spam. Malicious spam emails cost businesses as much as US$20.5 billion a year.1
This fact prodded us to subject an active malicious spam domain portfolio to WHOIS, DNS, and IP queries in a bid to identify as many connected web properties as possible. Our findings, including those mentioned below, can help organizations block the threats from the source.
- 70+ IP addresses to which the domains identified as indicators of compromise (IoCs) resolved, a majority of which are geolocated in the U.S.
- Almost 20 unredacted email addresses used to register the IoCs obtained from historical WHOIS records
- 300+ additional domains that shared the IoCs’ registrant email addresses or IP hosts
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://dataprot.net/statistics/spam-statistics/
Latest Reports
Integrity Technology Group-Backed Actors Combine Automated and Manual Tools in Global Attack
WhoisXML API uncovered 7,100+ additional artifacts linked to the Integrity Tech-enabled global data theft attack. Download the threat research materials now.
Earth Sirrush Espionage Tool Evolution: DNS Facts Unveiled
WhoisXML API uncovered 400+ additional artifacts linked to Earth Sirrush. Download the threat research materials now.
Four hours before PHP2Shell’s Disclosure
A server scouted our honeypots 4 hours before PHP2Shell’s disclosure, then returned with exploit attempts. The report covers its traffic history and IoCs.