Scammers use Cheap Domains to Create Fake Sites
ID: 70d4673b-035e-5c2c-a686-f1dbd5fd30b4
STIX ID: report--70d4673b-035e-5c2c-a686-f1dbd5fd30b4
Feed Name: Zscaler Security Research Blog
Threat Score
Zscaler ThreatLabZ describes an active, large-scale scam campaign leveraging bulk-registered cheap domains and injected redirection scripts to redirect users to fake tech-support, financial, medical, airline, adult, and other fraudulent sites; the report documents shared infrastructure (IP addresses and hundreds of domains), reuse of page templates (scam kits), redirection chains via ad networks, and provides a pastebin link with IOCs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
