Black Friday and Thanksgiving Cyber Threat Analysis

This technical report presents an investigation into potential cyber threats associated with Black Friday and Thanksgiving using DNS data. The research identifies various malicious domains and IP addresses that could serve as attack vectors during the holiday season. The study reveals the discovery of 318 email-connected domains, 786 IP addresses—635 of which are deemed malicious—and 1,975 IP-connected domains, with two identified as malicious. The analysis is based on datasets obtained from the First Watch Malicious Domains Data Feed, focusing on domains containing the keywords 'blackfriday' and 'thanksgiving.' It details the WHOIS records of these domains, including their registrars and creation dates, and highlights the geographic distribution of the associated IP addresses. The report concludes with a summary of the findings, emphasizing the importance of monitoring these domains and IPs to mitigate potential cyber threats during significant shopping events.