We Don’t Want to Spoil Mothers’ Day but These Domains Might
With Mothers’ Day just around the corner, threat actors may already be devising or have already deployed scams targeting mothers and children looking for Mothers’ Day gifts.
To help the cybersecurity community detect potential scam and other malicious campaign vehicles, WhoisXML API researchers gathered and analyzed Mothers’ Day-related web properties. Our findings include:
- 660+ domain names containing combinations of Mothers’ Day-related text strings, such as “mother,” “mom,” “shop,” “flower,” “gift,” “sale,” and “card” added from 1 April to 3 May 2022
- 580+ subdomains containing the same text strings added within the same period
- Some properties are already reported as malicious by malware detection engines
- Some domains hosted questionable content, including those that imitate Amazon, Walmart, Google, and Messenger
Download a sample of the threat research materials now or contact us for accessing the complete research materials.
Latest Reports
Integrity Technology Group-Backed Actors Combine Automated and Manual Tools in Global Attack
WhoisXML API uncovered 7,100+ additional artifacts linked to the Integrity Tech-enabled global data theft attack. Download the threat research materials now.
Earth Sirrush Espionage Tool Evolution: DNS Facts Unveiled
WhoisXML API uncovered 400+ additional artifacts linked to Earth Sirrush. Download the threat research materials now.
Four hours before PHP2Shell’s Disclosure
A server scouted our honeypots 4 hours before PHP2Shell’s disclosure, then returned with exploit attempts. The report covers its traffic history and IoCs.