· javascript

Scammers rebuild fake shopping sites within hours of a takedown

One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address.


The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes, according Akamai’s Fraud and Abuse Report 2026. A ticket scam used a similar setup. Several websites impersonating official ticketing and hospitality portals for a major sporting event were designed to route payment and personal information to the same collection system.

Earlier coverage

Related coverage

Also worth reading

  1. Angular 20.3.35 and 21.2.26 released, fixing downgraded component template compilation
  2. next.js 16.4.4 released
  3. next.js 16.5.0-canary.35 released with error handling fixes, cache fixes, and docs clarifications
  4. Next.js 16.5.0-canary.33 released, stopping error inspection patching when source maps are disabled
  5. AWS installs an AI accelerator every 14 seconds and eyes $1 trillion annual revenue