[ad_1]
Govt abstract
Malicious actors all the time attempt to be artistic and discover new methods to trick individuals right into a rip-off. On this case a brand new web site is providing 75% low cost on all Timberland sneakers. The data seems virtually equivalent to the unique web page, however when wanting nearer questions begin to pop.
Key takeaways:
Faux web sites and phishing makes an attempt are inclined to rise earlier than holidays.
Santa’s 75% low cost within the case beneath will most likely result in lack of cash or individuals being dissatisfied by shopping for pretend sneakers
Evaluation
Yesterday I obtained a message in one in every of my WhatsApp teams:
“75% low cost on Timberland model for 72 hours, Take pleasure in!” and a hyperlink to the web site kopwor[.]com
To be sincere, for a second wanting on that web site, I believed how fortunate I’m with Santa’s presents this 12 months with 75% low cost on all Timberland sneakers! Within the first look on the web site it appeared promising and bonafide, all kinds of sneakers and detailed data on all.
Determine 1. 75% low cost on all sneakers
Then I began to suppose, properly let’s verify this web site, first – I by no means heard about it, and second – it is too good to be true.
So let’s see what data we will extract from the web site. Very first thing we will verify when it was registered utilizing a whois on-line service similar to who.is or domaintools.com. Whois question tells us that the web site was registered solely 5 months in the past on 2021-07-07 on “NameSilo”. As well as, taking a look at web site historical past utilizing the wayback machine – an archive of web web sites – we see that on 2021-12-10 the web site had no content material.
The web site is hosted on Cloudflare and utilizing the host certificates service for SSL:
Determine 2. Web site certificates
Wanting on the web page supply we will discover some feedback in Chinese language:
Determine 3. Chinese language touch upon web page supply
Clicking on any of the hyperlinks within the backside of the web page together with “About Us” and “Transport & Deliveries” returns “Web page not discovered”:
Determine 4. Lacking net pages such “About Us”
If we go to buy, there is no such thing as a enter validation:
Determine 5. No enter validation
And final, let’s examine one shoe from the suspicious web site with Timberland’s unique web site.
Let’s look nearer at: “Males’s Timberland Premium 6-Inch Waterproof Boots” on kopwor web site VS “Males’s Timberland® Premium 6-Inch Waterproof Boots” on Timberland web site. (discover the lacking “R” image after Timberland title in shoe description in kopwor web site)
Determine 6. Comparability between related sneakers on each web sites
Unique value US$ 198 on each, discounted value on kopwor: US$ 49.50.
in a fast look, we will see the similarities between the sneakers – shade is a bit totally different however total their construction seems related.
When wanting extra carefully we will discover extra important adjustments, so let’s play “discover the variations”:
Determine 7. Nearer take a look at each sneakers
Some variations on the picture marked in colours:
Colour of the stitches
R mark signal measurement and placement
Couple of variations on the brand
The colour of the only
As well as, there are some good web sites similar to scamadvisor which may assist us with deciding on suspicious web sites.
In our case it tells us the damaging highlights of kopwor web site:
The registrar has a excessive % of spammers and fraud websites
The proprietor of the web site is utilizing a service to cover their id on WHOIS
This web site is (very) younger.
Excessive variety of suspicious web sites on this server
Backside line, both it is a phishing web site aimed to steal person cash, or it is a web site promoting pretend Timberland sneakers. Both means it is best to all the time search for suspicious indicators when unknown web sites supply wonderful offers.
At the moment the 72 hour sale is over, however discounted costs are nonetheless the identical – one other crimson flag.
Protected browsing and Joyful holidays!
Really useful actions
Watch out when shopping for from untrustworthy web sites.
Strive to concentrate for vital data, similar to web site certificates
[ad_2]