Most Parked Domains Now Serving Malicious Content
Summary: Infoblox researchers found that over 90% of visits to parked domains now redirect to illegal content, scams, scareware, or malware, a reversal from 2014 when fewer than five percent did. The redirects are driven by IP geolocation, device fingerprinting, and cookies, and appear benign when the visitor arrives via VPN or a non-residential IP address.
Bottom line: A domain holder with nearly 3,000 lookalike domains, including gmai[.]com with its own mail server, is catching misdirected email and has been used in business email compromise campaigns with trojan attachments, so a single dropped letter can route a message or a user straight to an attacker.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026