{
  "name": "Over 2,000 Holiday-Themed Fake Stores Detected Exploiting Black Friday and Festive Sales",
  "slug": "over-2000-holiday-themed-fake-stores-detected-exploiting-black-friday-and-festive-sales",
  "description": "Two clusters of holiday-themed fake online stores have been identified ahead of Black Friday and other festive sales. The first cluster includes over 750 interconnected sites using uniform holiday banners and misleading trust indicators, many impersonating Amazon. The second cluster spans a .shop ecosystem with domains mimicking well-known consumer brands. These fake stores use identical phishing kits, fake urgency tactics, and shell checkout pages to capture sensitive financial information from victims. The scams exploit the holiday shopping season when consumers are actively searching for steep discounts. The fraudulent sites are likely to activate during peak shopping periods to maximize victim traffic and transaction volume, posing significant risks to unsuspecting shoppers.",
  "published": "2025-11-27T18:04:42+00:00",
  "created_at": "2025-11-27T18:04:42+00:00",
  "modified_at": "2025-12-21T17:17:05+00:00",
  "created_at_opencti": "2025-11-27T18:04:42+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-11-27",
    "black friday scams",
    "e-commerce impersonation",
    "fake online stores",
    "financial data theft",
    "holiday shopping fraud",
    "phishing",
    "social engineering",
    "typosquatting"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "www.amabxestore.com"
      },
      {
        "id": "",
        "name": "www.amzliquidationpallet.com"
      },
      {
        "id": "",
        "name": "www.amaboxhub.com"
      },
      {
        "id": "",
        "name": "www.amzreturnpallet.com"
      },
      {
        "id": "",
        "name": "www.qiotong.com"
      },
      {
        "id": "",
        "name": "www.amazhotsales.com"
      },
      {
        "id": "",
        "name": "www.amzpalletliquidation.com"
      },
      {
        "id": "",
        "name": "www.amznpallet.com"
      },
      {
        "id": "",
        "name": "www.amaboxmarketplus.com"
      },
      {
        "id": "",
        "name": "www.amaluckybx.com"
      },
      {
        "id": "",
        "name": "www.qinsony.com"
      },
      {
        "id": "",
        "name": "www.amznsliquidation.com"
      },
      {
        "id": "",
        "name": "www.amawarehousebox.com"
      },
      {
        "id": "",
        "name": "www.amaznshop.com"
      },
      {
        "id": "",
        "name": "www.amafastsale.com"
      },
      {
        "id": "",
        "name": "www.hiwoji.com"
      },
      {
        "id": "",
        "name": "www.amaznsalepallets.com"
      },
      {
        "id": "",
        "name": "www.pasony.com"
      },
      {
        "id": "",
        "name": "www.amazpalletsgift.com"
      },
      {
        "id": "",
        "name": "www.amazonreturnsbox.com"
      },
      {
        "id": "",
        "name": "www.amapalletsreturn.com"
      },
      {
        "id": "",
        "name": "www.amawarehousesale.com"
      },
      {
        "id": "",
        "name": "www.amasuprisepallet.com"
      },
      {
        "id": "",
        "name": "www.amazrpallets.com"
      },
      {
        "id": "",
        "name": "www.amapalletmarket.com"
      },
      {
        "id": "",
        "name": "www.amazsaleboxus.com"
      },
      {
        "id": "",
        "name": "www.tisuny.com"
      },
      {
        "id": "",
        "name": "www.kinwony.com"
      },
      {
        "id": "",
        "name": "www.amznboxsales.com"
      },
      {
        "id": "",
        "name": "www.amaznboxsaleus.com"
      },
      {
        "id": "",
        "name": "www.amaboxmarkets.com"
      },
      {
        "id": "",
        "name": "www.amazgeheimnisbox.com"
      },
      {
        "id": "",
        "name": "www.amzonpaletten.com"
      },
      {
        "id": "",
        "name": "www.amzreturenbox.com"
      },
      {
        "id": "",
        "name": "www.amaboxpallet.com"
      },
      {
        "id": "",
        "name": "www.amzreturn.com"
      },
      {
        "id": "",
        "name": "www.amazusboxes.com"
      },
      {
        "id": "",
        "name": "www.howokin.com"
      },
      {
        "id": "",
        "name": "www.amaznsbigsale.com"
      },
      {
        "id": "",
        "name": "www.amazpalette.com"
      },
      {
        "id": "",
        "name": "www.georgmat.com"
      },
      {
        "id": "",
        "name": "www.sintayo.com"
      },
      {
        "id": "",
        "name": "www.thewonsel.com"
      },
      {
        "id": "",
        "name": "www.amaluckybox.com"
      },
      {
        "id": "",
        "name": "www.amzelectronicbox.com"
      },
      {
        "id": "",
        "name": "www.amazxpallets.com"
      },
      {
        "id": "",
        "name": "www.amznpalletmarket.com"
      },
      {
        "id": "",
        "name": "www.amawarehousex.com"
      },
      {
        "id": "",
        "name": "www.hwujo.com"
      },
      {
        "id": "",
        "name": "www.amaznbxstore.com"
      },
      {
        "id": "",
        "name": "www.amznreturnsale.com"
      },
      {
        "id": "",
        "name": "www.amazsalepalletus.com"
      },
      {
        "id": "",
        "name": "www.amzpaletten.com"
      },
      {
        "id": "",
        "name": "www.amaznsliquidation.com"
      },
      {
        "id": "",
        "name": "www.amaboxmarket.com"
      },
      {
        "id": "",
        "name": "www.amanwarehouse.com"
      },
      {
        "id": "",
        "name": "www.amzglobalpallets.com"
      },
      {
        "id": "",
        "name": "www.amznsmysterybox.com"
      },
      {
        "id": "",
        "name": "www.amapalletmarkets.com"
      },
      {
        "id": "",
        "name": "www.amznbigsale.com"
      },
      {
        "id": "",
        "name": "www.amapalletsales.com"
      },
      {
        "id": "",
        "name": "www.amanpalets.com"
      },
      {
        "id": "",
        "name": "www.amazonpalletrush.com"
      },
      {
        "id": "",
        "name": "www.amastorages.com"
      },
      {
        "id": "",
        "name": "www.amapalettes.com"
      },
      {
        "id": "",
        "name": "www.amaxboxsalex.com"
      },
      {
        "id": "",
        "name": "www.amazboxde.com"
      },
      {
        "id": "",
        "name": "www.amzonboxshop.com"
      },
      {
        "id": "",
        "name": "www.amawhsepallets.com"
      },
      {
        "id": "",
        "name": "www.loyoyi.com"
      },
      {
        "id": "",
        "name": "095a3ebc77f4e46b3adda543b61d90b7d3f20b41532c07772edd31908d060bb2"
      }
    ],
    "attack_patterns": [
      {
        "id": "16e4fc82-7c0b-4d1a-b784-b804b4df26dc",
        "name": "T1204.001"
      },
      {
        "id": "5c67e5d2-bc85-4ce0-822d-f2f5d3b0ae4e",
        "name": "T1185"
      },
      {
        "id": "7e3e3784-9547-42ca-b888-482972d14be3",
        "name": "T1528"
      },
      {
        "id": "c9ee9b30-ba84-4c24-95e9-e8242d42af3f",
        "name": "T1071.001"
      },
      {
        "id": "ef72da1d-2eaa-4d94-8913-06978609cfb4",
        "name": "T1608.001"
      },
      {
        "id": "397ed6b1-0142-4167-b0e0-bd69a9adf819",
        "name": "T1566.003"
      },
      {
        "id": "9594762e-9e74-466b-a460-3fd2a8aa7e10",
        "name": "T1608.005"
      },
      {
        "id": "60c4a8ad-741c-440a-af12-3bf9e6c4f5b9",
        "name": "T1583.002"
      },
      {
        "id": "52b92395-d3d3-4e05-976a-0fccccfce8d2",
        "name": "T1566.002"
      },
      {
        "id": "d19f56ca-5ce8-4bd1-af90-7d83e394470c",
        "name": "T1583.001"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Retail (distribution)"
      },
      {
        "id": "",
        "name": "blueboxstore.shop"
      },
      {
        "id": "",
        "name": "westerndigitalsafe.shop"
      },
      {
        "id": "",
        "name": "bravensafe.shop"
      },
      {
        "id": "",
        "name": "bublysafe.shop"
      },
      {
        "id": "",
        "name": "apremiumsafe.shop"
      },
      {
        "id": "",
        "name": "jomalonesafe.shop"
      },
      {
        "id": "",
        "name": "timhortonssafe.shop"
      },
      {
        "id": "",
        "name": "bwesafe.shop"
      },
      {
        "id": "",
        "name": "burstsafe.shop"
      },
      {
        "id": "",
        "name": "bluepetsafe.shop"
      },
      {
        "id": "",
        "name": "babymoovsafe.shop"
      },
      {
        "id": "",
        "name": "careallsafe.shop"
      },
      {
        "id": "",
        "name": "astroaisafe.shop"
      },
      {
        "id": "",
        "name": "diadorasafe.shop"
      },
      {
        "id": "",
        "name": "8bitdosafe.shop"
      },
      {
        "id": "",
        "name": "banquetfast.shop"
      },
      {
        "id": "",
        "name": "blueorangesafe.shop"
      },
      {
        "id": "",
        "name": "brandname-safe.shop"
      },
      {
        "id": "",
        "name": "bybenyarsafe.shop"
      },
      {
        "id": "",
        "name": "sunnysideupbakerysale.shop"
      },
      {
        "id": "",
        "name": "samsungsafe.shop"
      },
      {
        "id": "",
        "name": "avengerssafe.shop"
      },
      {
        "id": "",
        "name": "beelinksafe.shop"
      },
      {
        "id": "",
        "name": "bluettisafe.shop"
      },
      {
        "id": "",
        "name": "bricosafe.shop"
      },
      {
        "id": "",
        "name": "boaosafe.shop"
      },
      {
        "id": "",
        "name": "brynsafe.shop"
      },
      {
        "id": "",
        "name": "avedasafe.shop"
      },
      {
        "id": "",
        "name": "bett1safe.shop"
      },
      {
        "id": "",
        "name": "bluemoonsafe.shop"
      },
      {
        "id": "",
        "name": "brpsafe.shop"
      },
      {
        "id": "",
        "name": "bianyosafe.shop"
      },
      {
        "id": "",
        "name": "atarisafe.shop"
      },
      {
        "id": "",
        "name": "fiiosafe.shop"
      },
      {
        "id": "",
        "name": "balancesafe.shop"
      },
      {
        "id": "",
        "name": "bluntsafe.shop"
      },
      {
        "id": "",
        "name": "hpksafe.shop"
      },
      {
        "id": "",
        "name": "bboxsalede.shop"
      },
      {
        "id": "",
        "name": "billiesales.shop"
      },
      {
        "id": "",
        "name": "atuvossafe.shop"
      },
      {
        "id": "",
        "name": "barberbosssafe.shop"
      },
      {
        "id": "",
        "name": "blackburnsafe.shop"
      },
      {
        "id": "",
        "name": "ascotsafe.shop"
      },
      {
        "id": "",
        "name": "omronsafe.shop"
      },
      {
        "id": "",
        "name": "bsnsafe.shop"
      },
      {
        "id": "",
        "name": "carnivalsafe.shop"
      },
      {
        "id": "",
        "name": "biibsafe.shop"
      },
      {
        "id": "",
        "name": "rarebeautysafe.shop"
      },
      {
        "id": "",
        "name": "americansafe.shop"
      },
      {
        "id": "",
        "name": "allegracesafe.shop"
      },
      {
        "id": "",
        "name": "bodyguardsafe.shop"
      },
      {
        "id": "",
        "name": "bontecsafe.shop"
      },
      {
        "id": "",
        "name": "amazonshome.com"
      },
      {
        "id": "",
        "name": "arussafe.shop"
      },
      {
        "id": "",
        "name": "bradleysafe.shop"
      },
      {
        "id": "",
        "name": "bernysafe.shop"
      },
      {
        "id": "",
        "name": "amazonamazonbasicsonline.shop"
      },
      {
        "id": "",
        "name": "flipclock.blackfriday"
      },
      {
        "id": "",
        "name": "beyerdynamicsafe.shop"
      },
      {
        "id": "",
        "name": "cosrxus.shop"
      },
      {
        "id": "",
        "name": "aetnasafe.shop"
      },
      {
        "id": "",
        "name": "buglessaleus.shop"
      },
      {
        "id": "",
        "name": "bonessafe.shop"
      },
      {
        "id": "",
        "name": "snapplesales.shop"
      },
      {
        "id": "",
        "name": "alpensattelus.shop"
      },
      {
        "id": "",
        "name": "babygosafe.shop"
      },
      {
        "id": "",
        "name": "awarasafe.shop"
      },
      {
        "id": "",
        "name": "bulovasafe.shop"
      },
      {
        "id": "",
        "name": "bridgestonesafe.shop"
      },
      {
        "id": "",
        "name": "bonsafe.shop"
      },
      {
        "id": "",
        "name": "gotraxsafe.shop"
      },
      {
        "id": "",
        "name": "billieusbst.shop"
      },
      {
        "id": "",
        "name": "aspectsafe.shop"
      },
      {
        "id": "",
        "name": "benfeisafe.shop"
      },
      {
        "id": "",
        "name": "aquafreshsafe.shop"
      },
      {
        "id": "",
        "name": "alpakaonline.shop"
      },
      {
        "id": "",
        "name": "skhynixsafe.shop"
      },
      {
        "id": "",
        "name": "avantreesafe.shop"
      },
      {
        "id": "",
        "name": "babylisssafe.shop"
      },
      {
        "id": "",
        "name": "alovesafe.shop"
      },
      {
        "id": "",
        "name": "flipclock.christmas"
      },
      {
        "id": "",
        "name": "viomisafe.shop"
      },
      {
        "id": "",
        "name": "ahavasafe.shop"
      },
      {
        "id": "",
        "name": "borosafe.shop"
      },
      {
        "id": "",
        "name": "aqarasafe.shop"
      },
      {
        "id": "",
        "name": "btfbmsafe.shop"
      },
      {
        "id": "",
        "name": "biggamesafe.shop"
      },
      {
        "id": "",
        "name": "busysafe.shop"
      },
      {
        "id": "",
        "name": "atoztreasure.com"
      },
      {
        "id": "",
        "name": "berkshirestore.shop"
      },
      {
        "id": "",
        "name": "bellavitasafe.shop"
      },
      {
        "id": "",
        "name": "billblasssafe.shop"
      },
      {
        "id": "",
        "name": "bluewavesafe.shop"
      },
      {
        "id": "",
        "name": "baronsafe.shop"
      },
      {
        "id": "",
        "name": "fujifilmsafe.shop"
      },
      {
        "id": "",
        "name": "bahcosafe.shop"
      },
      {
        "id": "",
        "name": "butterfingersafe.shop"
      },
      {
        "id": "",
        "name": "bionairestore.shop"
      },
      {
        "id": "",
        "name": "alintorsafe.shop"
      },
      {
        "id": "",
        "name": "bonidesafe.shop"
      },
      {
        "id": "",
        "name": "arrissafe.shop"
      },
      {
        "id": "",
        "name": "bodisafe.shop"
      },
      {
        "id": "",
        "name": "buoysafe.shop"
      },
      {
        "id": "",
        "name": "akkosafe.shop"
      },
      {
        "id": "",
        "name": "besteksafe.shop"
      },
      {
        "id": "",
        "name": "cartmansafe.shop"
      },
      {
        "id": "",
        "name": "amaboxreturns.com"
      },
      {
        "id": "",
        "name": "fujitsusafe.shop"
      },
      {
        "id": "",
        "name": "sharksafe.shop"
      },
      {
        "id": "",
        "name": "banquetusabst.shop"
      },
      {
        "id": "",
        "name": "paulaschoicefast.shop"
      },
      {
        "id": "",
        "name": "allterrainsafe.shop"
      },
      {
        "id": "",
        "name": "samsunghugesale.shop"
      },
      {
        "id": "",
        "name": "amazfitsafe.shop"
      },
      {
        "id": "",
        "name": "brennenstuhlsafe.shop"
      },
      {
        "id": "",
        "name": "blackflagsafe.shop"
      },
      {
        "id": "",
        "name": "busybeesafe.shop"
      },
      {
        "id": "",
        "name": "bhcosmeticssafe.shop"
      },
      {
        "id": "",
        "name": "benadrylsafe.shop"
      },
      {
        "id": "",
        "name": "bodhisafe.shop"
      },
      {
        "id": "",
        "name": "bubssafe.shop"
      },
      {
        "id": "",
        "name": "badusafe.shop"
      },
      {
        "id": "",
        "name": "bcwsafe.shop"
      },
      {
        "id": "",
        "name": "bodegasafe.shop"
      },
      {
        "id": "",
        "name": "seagatesafe.shop"
      },
      {
        "id": "",
        "name": "akitassafe.shop"
      },
      {
        "id": "",
        "name": "bestwaysafe.shop"
      },
      {
        "id": "",
        "name": "yalesafe.shop"
      },
      {
        "id": "",
        "name": "blackbutterflysafe.shop"
      },
      {
        "id": "",
        "name": "blackstonesafe.shop"
      },
      {
        "id": "",
        "name": "garminsafe.shop"
      },
      {
        "id": "",
        "name": "bizzysafe.shop"
      },
      {
        "id": "",
        "name": "barneysafe.shop"
      },
      {
        "id": "",
        "name": "blindscontrol.shop"
      },
      {
        "id": "",
        "name": "kenwoodsafe.shop"
      },
      {
        "id": "",
        "name": "georgmat.com"
      },
      {
        "id": "",
        "name": "aiwasafe.shop"
      },
      {
        "id": "",
        "name": "armitronsafe.shop"
      },
      {
        "id": "",
        "name": "blossomsafe.shop"
      },
      {
        "id": "",
        "name": "xiaomidea.shop"
      },
      {
        "id": "",
        "name": "badensafe.shop"
      },
      {
        "id": "",
        "name": "meetionsafe.shop"
      },
      {
        "id": "",
        "name": "capturesafe.shop"
      },
      {
        "id": "",
        "name": "barcosafe.shop"
      },
      {
        "id": "",
        "name": "ayeshasafe.shop"
      },
      {
        "id": "",
        "name": "atasus.shop"
      },
      {
        "id": "",
        "name": "amdsafe.shop"
      },
      {
        "id": "",
        "name": "blinksafe.shop"
      },
      {
        "id": "",
        "name": "camechosafe.shop"
      },
      {
        "id": "",
        "name": "atomysafe.shop"
      },
      {
        "id": "",
        "name": "bestronsafe.shop"
      },
      {
        "id": "",
        "name": "boxercraftsafe.shop"
      }
    ]
  },
  "external_refs": [
    "https://otx.alienvault.com/pulse/6928a0ca4226eefa5410be43",
    "https://www.cloudsek.com/blog/cloudsek-detects-over-2-000-holiday-themed-fake-stores-exploiting-black-friday-and-festive-sales"
  ]
}