Online Shopping Danger? We Discovered 13K+ Cybersquatting Properties Targeting the Top E-Commerce Sites
Online shoppers have always been prone to cybercrime, such as financial scams, hacking, and credential theft. Domains and subdomains are common vehicles for these criminal activities, but more compelling are those that imitate major e-commerce sites.
When IBM X-Force Exchange1 reported a cybersquatting campaign targeting AliExpress, WhoisXML API researchers decided to look deeper and expand the DNS monitoring to include other major e-commerce platforms. Here are our key findings:
- We found 13,700+ domains and subdomains added since 1 May 2022 imitating AliExpress, Amazon, Avito, eBay, Etsy, Rakuten, and Walmart.
- Of these, 7,600+ properties actively resolved to 4,200+ IP addresses.
- An alarming 7% or 960 cybersquatting properties have already been flagged as malicious barely a month after they were registered.
Download a sample of the threat research materials now or contact us to access the complete set of research materials.
—
- [1] https://exchange.xforce.ibmcloud.com/collection/83329cb6a94107553aebfc5a42372b7d
Latest Reports
Integrity Technology Group-Backed Actors Combine Automated and Manual Tools in Global Attack
WhoisXML API uncovered 7,100+ additional artifacts linked to the Integrity Tech-enabled global data theft attack. Download the threat research materials now.
Earth Sirrush Espionage Tool Evolution: DNS Facts Unveiled
WhoisXML API uncovered 400+ additional artifacts linked to Earth Sirrush. Download the threat research materials now.
Four hours before PHP2Shell’s Disclosure
A server scouted our honeypots 4 hours before PHP2Shell’s disclosure, then returned with exploit attempts. The report covers its traffic history and IoCs.