Inchcape Shipping Services Warns of Fraudulent Domains Impersonating Its Brand

Overview

Inchcape Shipping Services (ISS), a prominent global maritime services provider, has issued a security notice regarding the identification of fraudulent domains actively impersonating its brand. These domains were detected by ISS’s cybersecurity monitoring tools on July 19, 2026. The company has clarified that these domains are not legitimate, are not affiliated with ISS, and have not been authorized. This incident highlights ongoing brand impersonation tactics used by threat actors to deceive customers and partners, likely for phishing or other malicious purposes.

Technical Details

Inchcape Shipping Services identified two specific fraudulent domains designed to closely imitate its legitimate brand: issfreeportbahamasiss-shipping[.]agency and issfreeportbahamasiss-shipping[.]com. The use of “issfreeportbahamas” and “iss-shipping” in conjunction with common top-level domains (.agency, .com) is a classic tactic used in typosquatting and brand impersonation. These domains are crafted to appear credible enough to trick unsuspecting individuals who might not scrutinize the URL carefully.

Upon detecting these domains through its cybersecurity monitoring tools, ISS immediately initiated several mitigating actions:

• Internal Blocking: Both fraudulent domains were blocked across ISS’s internal email and web filtering systems to prevent their employees from accidentally accessing or receiving communications from these fake sites.
• Reporting to Hosting Provider: The domains were reported to their respective hosting providers, with the aim of facilitating their removal and takedown.
• Increased Monitoring: ISS has ramped up its monitoring efforts to detect any additional malicious domains that might attempt to impersonate the company.

While the immediate impact reported is the identification and mitigation of these fraudulent sites, the underlying intent of the threat actors is likely to conduct phishing campaigns. By using these fake domains, attackers can:

• Send deceptive emails to ISS customers, partners, or even employees, appearing as legitimate communications from Inchcape Shipping Services.
• Host fake login pages to steal credentials.
• Distribute malware or solicit sensitive information under false pretenses.
• Conduct business email compromise (BEC) attacks, attempting to trick recipients into making fraudulent payments or divulging confidential information.

Real-World Impact

The real-world impact of brand impersonation, even without a direct breach of the legitimate company’s systems, can be significant for both the impersonated organization and its stakeholders.

• Customer and Partner Exposure: Customers and partners of Inchcape Shipping Services could be targeted by phishing attacks originating from these fraudulent domains, potentially leading to credential theft, financial fraud, or malware infections.
• Reputational Damage: Even if ISS’s internal systems remain secure, the existence of fraudulent domains can erode trust among its clientele, who might perceive a lapse in security or confusion regarding official communications.
• Financial Loss: If phishing attacks are successful, individuals or companies could suffer direct financial losses through fraudulent transactions or data breaches.
• Operational Disruption: ISS has to allocate resources to monitor, report, and communicate about these fraudulent domains, diverting efforts from core business operations.

Threat Landscape

Brand impersonation, typosquatting, and phishing remain pervasive threats in the cybersecurity landscape. Threat actors continually register domain names that are similar to legitimate brands to exploit trust and trick users. This tactic is particularly effective against organizations with large customer and partner bases, where communication volumes are high.

The maritime industry, in particular, is a frequent target for cyberattacks, including phishing and BEC, due to the high-value transactions involved and the distributed nature of global shipping operations. Attackers often seek to intercept communications related to payments, cargo, or vessel movements. The continuous creation of such fraudulent domains underscores the persistent need for vigilance and proactive monitoring of the digital brand footprint.

Remediation

Inchcape Shipping Services has already taken initial steps to address the fraudulent domains. However, continued vigilance and communication are essential.

Recommended remediation and preventative measures include:

• Customer Communication: Proactively communicate with customers and partners, informing them about the fraudulent domains and advising them on how to identify legitimate ISS communications. Emphasize checking full URLs and email headers.
• Domain Takedowns: Continue working with domain registrars and hosting providers to ensure the fraudulent domains are swiftly taken down.
• Enhanced Monitoring: Maintain and enhance domain monitoring services to detect new impersonating domains quickly. Consider registering defensive domains to preemptively prevent typosquatting.
• Security Awareness Training: Conduct regular security awareness training for employees, emphasizing the risks of phishing, spoofed emails, and the importance of verifying sender authenticity and URL legitimacy.
• Email Security: Implement advanced email security solutions, including DMARC, DKIM, and SPF, to help prevent email spoofing from domains impersonating the organization.
• Multi-Factor Authentication (MFA): Encourage or enforce MFA for all online services, especially those accessed by customers and partners, to protect against credential theft from successful phishing attempts.
• Website Integrity Checks: Regularly check the integrity of official websites and online portals for any signs of compromise or unauthorized alterations.
• Reporting Phishing: Advise customers and partners to report any suspicious emails or websites impersonating ISS to the company’s official security channels.

This incident reinforces the need for strong brand protection strategies extending beyond internal network security to the wider digital ecosystem.