Web Address Risk Ecosystem
An ecosystem of connected business
We receive communications from organisations asking for information to be submitted, reset, updated or changed. Nothing new here, because we receive these kinds of messages every single day. In fact some days it almost seems endless.
This is how businesses communicate to each and every one of their connections. They are routine, expected and almost always trusted.
But here is the thing most people miss. Every one of those communications in some way or another points to a web address. A login page, a portal, a payment link, a password reset. The web address is what makes the message actionable. And that is exactly what makes it exploitable.
Follow the money
This diagram maps a web address risk ecosystem that surrounds every organisation. Suppliers, trusted partners and buyers are all connected through products, services and money. Each of those connections depends on communication. And each communication is a potential entry point for someone pretending to be you, or pretending to be someone you trust.
Criminals use gaps and a lookalike web address is a dirty great big one
None of these interactions are unusual. A supplier updates their bank details. A partner sends a revised invoice. A buyer resets their account password. These are ordinary business processes that happen thousands of times a day across every sector.
The web address risk ecosystem exists because criminals understand this rhythm better than most businesses do. They register a web address that looks close enough to yours, or close enough to one of your partners’, and they send a message that fits the pattern. Submit your details here. Update your payment information. Reset your login.
The message looks right. The web address looks right. The request sounds routine. That is why it works.
It is not your web address that is the only risk
Most organisations think about protecting their own web address. Fair enough. But the diagram tells a wider story. Your organisation sits inside a web of relationships where money and information move in several directions at once. A lookalike web address targeting your supplier puts your business at risk. A lookalike targeting your trusted partner puts their communications with your buyers at risk too.
The web address risk ecosystem does not stop at your own front door. It extends to every organisation you are connected to, and to every organisation connected to them.
Every connection is a communication
Suppliers send invoices. Partners share updates. Buyers receive confirmations. Each of those touchpoints relies on a web address that the recipient trusts without checking. That trust is the vulnerability, because the web address itself is what makes a fraudulent communication feel legitimate.
A lookalike web address does not need to be perfect. It needs to be close enough for someone busy, distracted or unfamiliar with the detail to act without questioning it. And in a connected business ecosystem, there are plenty of those people on every side of every relationship.
This is not an IT problem and it is not a website problem. It is a business risk that sits in the gap between how organisations communicate and how little visibility they have over who else might be using a web address that looks like theirs.
The ecosystem is already there
You do not need to build it or map it. It already exists. Every supplier, partner and buyer you work with is part of it. The question is whether anyone in that ecosystem has visibility of the lookalike web addresses that could be used to exploit the trust between them.
Because a lookalike web address you do not know about is one you cannot deal with. The web address risk ecosystem will never go away. Registries, registrars and hosts cannot take responsibility for how someone uses a web address.
