Provide current and historical ownership information on domains / IPs. Identify all connections between domains, registrants, registrars, and DNS servers.
It’s ironic to think that sites hinting at promoting data privacy awareness and/or protection are serving malware instead, but that’s a sad truth. We found thousands of web properties through WHOIS, IP, and DNS searches to identify malicious data privacy-related sites.
Our deep dive allowed us to build detailed threat research materials containing:
- Thousands of domains and subdomains containing the strings “data + privacy,” “data + protection,” and “protect + privacy,” several of which turned out to be malicious
- Very few of the web properties had unredacted WHOIS records
- Thousands of IP address resolutions, several of which were dubbed “dangerous” by various malware engines, resulting in a considerable number of additional malicious domains
Download the threat research materials now to access the complete list of identified artifacts used to conduct additional enrichment and threat analysis.