Ian Campbell on Nostr: Seeing a handful of newly registered domains with VMware-impersonating landing pages. ...
Seeing a handful of newly registered domains with VMware-impersonating landing pages.
Registrar: Gname
IP: CloudFlare
NS: share-dns[.]com
First observed: 2024-04-24
Landing page impersonating vmware:
gl-vmwareopts[.]com
vmwarewebs[.]com
gl-vmwarewebs[.]com
Same domain profile, currently 404's:
vmwareopts[.]com
Published at
2024-04-29 14:59:41Event JSON
{
"id": "0c46303f8ea1daecee52a8d6158b3417dcac92a065b63172a93f5ac2833eedcf",
"pubkey": "a516f2358a20a90c560bed25b34fb39ee5bd12a7187837df8c96a19e0070ce6d",
"created_at": 1714402781,
"kind": 1,
"tags": [
[
"proxy",
"https://masto.deoan.org/users/neurovagrant/statuses/112355100679866899",
"activitypub"
]
],
"content": "Seeing a handful of newly registered domains with VMware-impersonating landing pages.\n\nRegistrar: Gname\nIP: CloudFlare\nNS: share-dns[.]com\nFirst observed: 2024-04-24 \n\nLanding page impersonating vmware:\ngl-vmwareopts[.]com\nvmwarewebs[.]com\ngl-vmwarewebs[.]com\n\nSame domain profile, currently 404's:\nvmwareopts[.]com\n\nhttps://masto.deoan.org/system/media_attachments/files/112/355/088/230/643/596/original/b357edfa1d5b5c7f.jpeg",
"sig": "c1145d506b8d4d5e68d9792a27f0c7bd04601efdcb8a63720394fc82754f955e98d46ae63ae4608ece157316318913a3125b2694d459c4e68df0ae12e650b28d"
}