home.social

#lookalike — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #lookalike, aggregated by home.social.

fetched live
  1. Having trouble finding a free 📺 streaming site for World Cup 🏟️ matches? This threat actor has you covered with thousands of websites for all 104 matches! ⚽

    We've been tracking a likely Vietnam-based actor that mass purchases expired domains (we call these dropcatch) and repurposes their existing web traffic to funnel visitors into illegal sports streaming sites, and then straight into a betting platform the same actor operates. The domain portfolio is a graveyard of real internet history: 2026worldcupnorthamerica[.]com (once cited by the Dallas Morning News and the US Men's National Team Facebook fan page), childreninachangingclimate[.]org (formerly a children's aid program), thebreastcancercharities[.]org (formerly non-profit The Breast Cancer Charities of America), and a domain officially used by major US grocery store chains involved in a large proposed merger. Collectively, this actor has spent hundreds of thousands of dollars acquiring dropcatch domains alone — a strong signal that dropcatching is a genuinely effective vehicle for cyber fraud. Behind all of it sits a staggering tech stack operated by a single actor: 5,000+ domains, illegal streaming services, CDNs, TDSs, trackers, cloakers, betting platforms, and mobile apps. That's not a side hustle, that's an enterprise. 🏗️

    While the platform largely targets Vietnamese-speaking users, as well as others in Asia and Oceania, the financial damage reaches much further. Sports authorities and broadcasters worldwide are 📉 losing revenue every time someone watches a live NBA 🏀 , MLB ⚾ :, esports 🎮 , poker 🃏 , or World Cup 🏆 match for free on one of these sites, and this actor has all of them covered.

    Some examples from the domains we've uncovered so far:

    :Dropcatch domains host or redirect to illegal streaming services

    autoredistrict[.]org
    childreninachangingclimate[.]org
    2026worldcupnorthamerica[.]com
    folsomprisonmuseum[.]org
    allaboutbasketball[.]us
    thebreastcancercharities[.]org

    :Fraudulent domains host or redirect to illegal streaming services

    90phutaa[.]cc
    90phutab[.]cc
    90phutac[.]cc
    xoilaczzzzw[.]tv
    xoilaczzzzt[.]tv
    xoilaczzzzh[.]tv

    :Lookalike domains used by the betting platforms

    fifa001[.]com
    fifa002[.]com
    fifa02[.]com
    worldcup00[.]com
    worldcup000[.]com
    worldcup02[.]com

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #dropcatch #malvertising #illegalstreaming #sportsbetting #domainabuse #vietnam #worldcup #asia #fifa #streaming #betting #2026worldcup #charities #nonprofit #lookalike #xoilac #90phut

  2. 𝗠𝗔𝗙𝗦-𝗸𝗶𝗷𝗸𝗲𝗿𝘀 𝘀𝗽𝗼𝘁𝘁𝗲𝗻 𝗹𝗼𝗼𝗸𝗮𝗹𝗶𝗸𝗲 𝘃𝗮𝗻 𝗞𝘆𝗹𝗲 𝗶𝗻 𝘀𝗲𝗿𝗶𝗲𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗴𝗲: '𝗗𝗲 𝘃𝗲𝗿𝗹𝗼𝗿𝗲𝗻 𝘇𝗼𝗼𝗻'

    De deelname van Kyle aan 'Married at First Sight' houdt de gemoederen flink bezig op social media. Terwijl hij zelf nog zoekt naar zijn gevoelens voor Danique, zien kijkers op X vooral een opvallende gelijkenis met een wereldberoemd seriepersonage.

    rtl.nl/boulevard/artikel/55966

    #MAFS #lookalike #verlorenzoon

  3. Am I wrong, or have I seen something very like this before? 🤔

    I'm not convinced that buying one of these as a "companion" to your high-end iPhone or Pixel is a great selling point. If you've already splashed out 1,000 spondoolacks on your chosen flavour of smartphone, do you really want to hand over another 500? If you're an Apple fanboi, do you want to have an Android device as well? Dunno. Jus' sayin'. 🤷‍♂️

    (Oh, and "communciation"? 😂)

    clicksphone.com/en/communicator

    #Tech #BlackBerry #Lookalike

  4. @theplaguedoc Next time you're in London, look out for the loyal DLR dogs bringing you a third rail so your train can stay powered.

    #DLR #Dog #Lookalike

  5. There is another Lizard on the radar! Looming Lizard is an actor creating hundreds of lookalike domains impersonating popular banks and telecommunication companies targeting Spanish speaking countries, such as Mexico. Not only they are lookalikes, but are also RDGAs (Registered DGAs), with new domains created on a daily basis. These are some of the entities they impersonate:

    - Banks: Banorte, BBVA, Citi, HSBC, Itaú, Santander, Scotiabank
    - Telecommunications: AT&T, BTC, Claro, Liberty, Movistar, Telcel, Tigo
    - Others: post offices, department stores, energy companies

    For one of the lookalikes to Tigo (tigoppy[.]club), the actor was kind enough and offered the ability to trade our (fake) account points for nice prizes (wink wink). Sample of domains for each mentioned company:

    - banortex[.]vip, banortepmex[.]store, banorteoi[.]icu, banorteoi[.]sbs, banortebc[.]top
    - bbvamex[.]xin, bbvamex[.]xyz, bbvamxn[.]cyou, bbvamxn[.]store, bbvamxn[.]sbs
    - citiprr[.]top, citipr[.]top, citipr[.]vip, citiipir[.]top, citiipir[.]vip
    - mex-hsbc[.]xyz, mexhsbc[.]icu, mex-hsbc[.]icu, mex-hsbc[.]xin, mexhsbck[.]pro
    - itauupy[.]top, ittau[.]top, itauupyi[.]top, itaui[.]cfd, itaupy[.]top
    - santander-mex[.]xin, santandermox[.]vip, santander-mex[.]sbs, santander-mex[.]icu, santandermox[.]xyz
    - scotiabank-mx.xyz, scotiabok[.]xyz, scotiiiai[.]vip, scotiabanukmx[.]sbs, scotiiiai[.]xin
    - attmiex[.]pro, att-com-mx[.]top, attmmex[.]xyz, att-com-mx[.]xin, attmmex[.]vip
    - btcbahamass[.]vip, btcbahamasni[.]vip, btcbahamasni[.]xin, btcbahamasi[.]top, btcbahamasni[.]top
    - claroar[.]top, claroec[.]vip, clarosv[.]top, claropy[.]vip, clarolo[.]top
    - liberty-cr[.]xyz, liberty-cr[.]vip, liberty-cr[.]icu, liberty-cr[.]xin, liberty-cr[.]cc
    - movisstar[.]pro, movisstar[.]xyz, movistar-uy[.]xin, movisstar[.]sbs, movistarui[.]icu
    - telcelsi[.]top, telcelt[.]bond, telcele[.]info, telceln[.]qpon, telcel0[.]online
    - tiiigopy[.]xyz, tigosv[.]top, tigosv[.]cc, tigosvi[.]top, tigoipy[.]top

    urlscan.io/result/375469cb-d1a
    urlscan.io/result/019656a1-67b

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infoblox #infobloxthreatintel #lookalike #phishing #rdga #scam

  6. CW: Joke that can be misinterpreted as racist, but meant as humor. Please remember that different people enjoy different types of humor. Muting or blocking me saves time for everyone, including moderators. Have a great day. Love, Esmie.

    A Chinese child asked his father:
    "Why does the world say we all look alike?"
    The father replied: "People have nothing better to say...
    And besides, I'm your uncle, not your father."

    #ChineseJoke #LookAlike #FamilyHumor #DadJokes #CulturalHumor #LightHumor

  7. Immer wenn ich Herbert #Kickl in den Nachrichten sehe, denke ich, jetzt übernimmt Jens Söring die Macht in #Österreich 😅

    #HerbertKickl #JensSoring #lookalike

  8. #Talent needed for live New Years Eve event!!!

    Seeking #lookalike #actors with strong #improvisational skills to interact with guests in character to fill the following #roles:

    -Pulp Fiction (Samuel L Jackson and John Travolta)
    -My Cousin Vinny (Vinny and Mona Lisa)
    -Frank Sinatra
    -Elvis

    Please submit to [email protected] with the subject line NYE. Submit one full body photo and one close up photo.

  9. Ostin siskontytön joulumyyjäisistä virkkaamansa turvalonkero-mustekalan eli tuttavallisemmin Cthulhun. Siitä tulee oiva suojelushahmo mökkerölle. (Testattu 4kk vauvalla, jonka reaktio puoltaa vertausta.) #cthulhu #lookalike #virkkaus

  10. I uploaded my Mastodon profile picture.

    >>I found my IVE lookalike!
    Rei 90.3% match!

    Find your match at youlookalike.com/ive<<

    #Kpop #Lookalike

  11. According to my waiter this evening, I look something like #AphexTwin. So add that to the list of people I (somewhat implausibly) look like.

    #Lookalike #doppelganger

  12. #Dogs and their owners really do #lookalike—here’s why

    New research reveals that people aren’t just imagining it—dogs and their #owners share striking #similarities, from matching #hairstyles to mirrored #temperaments.

    nationalgeographic.com/animals

  13. That time that I swore I saw Walter White at Walmart.. #Hawaii #BreakingBad #LookAlike (April 14, 2017

  14. 𝗔𝗰𝘁𝗲𝘂𝗿 𝗧𝗶𝗺𝗼𝘁𝗵é𝗲 𝗖𝗵𝗮𝗹𝗮𝗺𝗲𝘁 𝘃𝗲𝗿𝘀𝗰𝗵𝗶𝗷𝗻𝘁 𝗼𝗽 𝗹𝗼𝗼𝗸𝗮𝗹𝗶𝗸𝗲-𝘄𝗲𝗱𝘀𝘁𝗿𝗶𝗷𝗱 𝗶𝗻 𝗡𝗬

    Acteur Timothée Chalamet heeft zondag opeens zijn opwachting gemaakt tijdens een Timothée Chalamet-lookalikewedstrijd in New York. Op sociale media worden zondagavond veel beelden gedeeld waarop te zien is hoe de ster, bekend van Willy Wonka en Call me by your name, zich door de gillende...

    rtl.nl/boulevard/artikel/54774

    #Timothée #Chalamet #lookalike

  15. Threat actors are using the recent U.S. presidential debate and deep fake videos of Elon Musk to lure victims into crypto scams. Following up on our post from Saturday, we have just released a new blog exploring this campaign.
    blogs.infoblox.com/threat-inte

    #dns #cybersecurity #InfobloxThreatIntel #Infoblox #cryptocurrency #crypto #deepfake #ai #youtube #elonmusk #tesla #trump #harris #debate #scam #lookalike #threatintel

  16. This past week, threat actors quickly reacted to the Trump-Harris presidential debate and used the topic as a theme in their cyber campaigns. In one instance, they hijacked multiple Youtube channels, including one that has over 2.4 million subscribers, and then uploaded a deep fake ai video of Elon Musk. In the video, the Tesla CEO advertises a crypto event and QR code that sends users to a webpage instructing them to send funds to specific wallet addresses. They are promised to receive double the crypto amount they sent within a matter of minutes. Some accounts are no longer serving content but they'll keep trying. This is obviously a scam and users should be wary of these get-rich-quick schemes.

    Hijacked youtube channels: hXXps://www[.]youtube[.]com/@tesla.trump.debate, hXXps://www[.]youtube[.]com/@Tesla.lives.2444, hXXps://www[.]youtube[.]com/@Tesla-i5g/streams. Malicious and fake crypto scam domains: trump-debate[.]com, tesladebate[.]com, teslatrump[.]org.

    Fraudulent wallet addresses: bc1qfwjgvwesz5k2dpjpvwueze2v009wjh76hn9gfn (BTC),bc1qjanjaawj4g0n5xlm03dmpx97u5yrpzljuhuxz8 (BTC),6XxsCPnWBY4ciWhEN5P9GiTWxuDHwomQkDsHJNC7hrTf (SOL),8iwdRkeBDr6RzpkvkcMzqAFqr9L9eGKCKzHHZdzB6MQx (SOL),0x70c774951b96Cb7EcA192505da81CEAddf6F3C92 (ETH),0xD7C3F7dC1Dfa6F64F778ddfC9Ea1a4d2dA2131b4 (ETH),D6ShMStqVGWwgHPAZZkw9UK49oP4JZJAz4 (DOGE),DKV1nsGp6DYVZ4fze8zYJbPti9MbGcXGWB (DOGE).

    One of the addresses have already gathered over 4,300 USD worth of Dogecoin transactions.

    #dns #cybersecurity #InfobloxThreatIntel #Infoblox #cryptocurrency #crypto #deepfake #ai #youtube #elonmusk #tesla #trump #harris #debate #scam #lookalike #threatintel