Comment by Crunchified
19 hours ago
This advice from the article to the affected retailers:
Brands and their ordering providers that watch for their site loading under someone else's domain, or for checkout sessions that never reach the real payment provider, are well placed to catch these sites early.
It can be detected if the IT folks look in the right places. I suppose a SCAM ALERT page could be presented to a reverse proxy when discovered.
I don't see what you could do about "people browse the site but don't check out." I'm sure that is normal for any website regardless.
In this case, wouldn’t you see a lot of abandoned carts coming from the reverse proxy sessions?
I don't know the scale of cart-abandonment for a website like Jimmy John's, but it has got to be large enough that a few dozen more wouldn't be _too_ surprising.