Tag: newly-registered-domains

2 Attack Reports | 0 Vulnerabilities

Attack reports

The Next Level: Typo DGAs Used in Malicious Redirection Chains

A new campaign leveraging newly registered domains (NRDs) and a novel variant of domain generation algorithms (DGAs) has been uncovered. The campaign used over 6,000 NRDs redirecting to domains resembling dictionary-based DGAs. These NRDs led to advertisements of potentially unwanted Android applic…
2025-03-06
dictionary dga
typo dga
newly registered domains
Published: March 6, 2025
Downloadable IOCs: 17

Phishing via 'com-' prefix domains

This analysis reveals a new phishing trend using domains with a "com-" prefix to mimic legitimate websites. The scam targets users of Florida's Sunpass toll system, exploiting the similarity between sunpass.com and fraudulent "com-" domains. A surge in "com-" prefix domain registrations has been ob…
phishing
2025-02-06
newly-registered-domains
domain-spoofing
sunpass
dns-monitoring
com-prefix
toll-fraud
Published: February 6, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports