Intel Name: Strategically aged domains used in tds for investment and job scams
Date of Scan: March 21, 2025
Impact: High
Summary: We’ve identified an ongoing campaign leveraging strategically aged domains in Traffic Direction System (TDS) activity. The final landing pages promote investment scams and fraudulent part-time or work-from-home opportunities. To evade detection, attackers register new domains and keep them dormant for at least a month before activation. Our analysis uncovered over 80,000 domains that eventually redirect to URLs under linksapp[.]top. This campaign primarily targets users in Japan and South Africa and is still active.
