home.social

#lookalike — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #lookalike, aggregated by home.social.

fetched live
  1. Quiz time: which of these domains is impersonating Apple?

    quizearny[.]shop, rewardquiz[.]org look like generic quiz sites. applerewards[.]net is more obvious. All of them belong to a cluster serving identical Apple impersonation content, prompting victims to claim an Apple gift card reward by handing over their personal details. testar[.]ink, "to test", was the first to be created, nearly a month before the others went live, which may say something about how this campaign got started.

    What makes this cluster more interesting is what happens after you click the "Claim Your Apple Reward" button on the initial page. Different locations, different device types, different destinations. Classic TDS.

    This cluster is a good reminder that brand impersonation lives in the page content, not just the domain name. A quiz site with no Apple in its name can be just as dangerous as an obvious lookalike.

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #axur #lookalike #scam #tds

  2. Celebrity lookalike generates media attention and fan debate

    📰 Original title: Suri steps into the spotlight... Tom's girl makes stage debut treading the boards at the Fringe

    🤖 IA: It's clickbait ⚠️
    👥 Users: It's clickbait ⚠️

    View full AI summary en.killbait.com/celebrity-look

    #culture #lookalike #media

  3. UK healthcare assistant jailed for helping woman enter Ireland on ‘lookalike’ passport

    Natasha ReidSunday July 19, 2026 Dublin Airport passport control, where a woman presented a document with a photograph…
    #Ireland #IE #Europe #Europa #EU #Assistant #enter #for #healthcare #helping #ireland #jailed #lookalike #ON #passport #UK #woman
    europesays.com/3141422/

  4. WANZ-072-UNCENSORED-EDIT: Manami Irie's Idol Playful Prank

    Stream WANZ-072-UNCENSORED-EDIT starring Manami Irie. Dive into an idol‑themed, big‑tits adventure with a cheeky prank twist – watch now!

    jav.do/videos/wanz-072-uncenso

    #BigTits #Breasts #TittyFuck #Prank #Lookalike

  5. Having trouble finding a free 📺 streaming site for World Cup 🏟️ matches? This threat actor has you covered with thousands of websites for all 104 matches! ⚽

    We've been tracking a likely Vietnam-based actor that mass purchases expired domains (we call these dropcatch) and repurposes their existing web traffic to funnel visitors into illegal sports streaming sites, and then straight into a betting platform the same actor operates. The domain portfolio is a graveyard of real internet history: 2026worldcupnorthamerica[.]com (once cited by the Dallas Morning News and the US Men's National Team Facebook fan page), childreninachangingclimate[.]org (formerly a children's aid program), thebreastcancercharities[.]org (formerly non-profit The Breast Cancer Charities of America), and a domain officially used by major US grocery store chains involved in a large proposed merger. Collectively, this actor has spent hundreds of thousands of dollars acquiring dropcatch domains alone — a strong signal that dropcatching is a genuinely effective vehicle for cyber fraud. Behind all of it sits a staggering tech stack operated by a single actor: 5,000+ domains, illegal streaming services, CDNs, TDSs, trackers, cloakers, betting platforms, and mobile apps. That's not a side hustle, that's an enterprise. 🏗️

    While the platform largely targets Vietnamese-speaking users, as well as others in Asia and Oceania, the financial damage reaches much further. Sports authorities and broadcasters worldwide are 📉 losing revenue every time someone watches a live NBA 🏀 , MLB ⚾ :, esports 🎮 , poker 🃏 , or World Cup 🏆 match for free on one of these sites, and this actor has all of them covered.

    Some examples from the domains we've uncovered so far:

    :Dropcatch domains host or redirect to illegal streaming services

    autoredistrict[.]org
    childreninachangingclimate[.]org
    2026worldcupnorthamerica[.]com
    folsomprisonmuseum[.]org
    allaboutbasketball[.]us
    thebreastcancercharities[.]org

    :Fraudulent domains host or redirect to illegal streaming services

    90phutaa[.]cc
    90phutab[.]cc
    90phutac[.]cc
    xoilaczzzzw[.]tv
    xoilaczzzzt[.]tv
    xoilaczzzzh[.]tv

    :Lookalike domains used by the betting platforms

    fifa001[.]com
    fifa002[.]com
    fifa02[.]com
    worldcup00[.]com
    worldcup000[.]com
    worldcup02[.]com

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #dropcatch #malvertising #illegalstreaming #sportsbetting #domainabuse #vietnam #worldcup #asia #fifa #streaming #betting #2026worldcup #charities #nonprofit #lookalike #xoilac #90phut

  6. SABA-170: Akira Kanagawa’s Amateur Debut in Creampie POV

    Explore SABA-170, where Akira Kanagawa delivers a raw amateur debut in a steamy creampie POV. Dive into the scene now and feel the intensity.

    jav.do/videos/saba-170-saba-17

    #Creampie #POV #Amateur #Lookalike #AkiraKanagawa

  7. NIRVANNA THE BAND THE SHOW THE LOOKALIKE CONTEST

    In a corner of Waterloo Park on a windy and rainy May 3, 2026 afternoon, over two dozen people formed a semi-circle around a picnic table. Some came wearing various shades of brown and beige blazers, some dragging long extension cords behind them and one even had their own crocheted fedora. The plan: put on the best Nirvanna the Band the Show lookalike contest Waterloo Region has ever seen. […]

    communityedition.ca/nirvanna-t
  8. 𝗠𝗔𝗙𝗦-𝗸𝗶𝗷𝗸𝗲𝗿𝘀 𝘀𝗽𝗼𝘁𝘁𝗲𝗻 𝗹𝗼𝗼𝗸𝗮𝗹𝗶𝗸𝗲 𝘃𝗮𝗻 𝗞𝘆𝗹𝗲 𝗶𝗻 𝘀𝗲𝗿𝗶𝗲𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗴𝗲: '𝗗𝗲 𝘃𝗲𝗿𝗹𝗼𝗿𝗲𝗻 𝘇𝗼𝗼𝗻'

    De deelname van Kyle aan 'Married at First Sight' houdt de gemoederen flink bezig op social media. Terwijl hij zelf nog zoekt naar zijn gevoelens voor Danique, zien kijkers op X vooral een opvallende gelijkenis met een wereldberoemd seriepersonage.

    rtl.nl/boulevard/artikel/55966

    #MAFS #lookalike #verlorenzoon

  9. Am I wrong, or have I seen something very like this before? 🤔

    I'm not convinced that buying one of these as a "companion" to your high-end iPhone or Pixel is a great selling point. If you've already splashed out 1,000 spondoolacks on your chosen flavour of smartphone, do you really want to hand over another 500? If you're an Apple fanboi, do you want to have an Android device as well? Dunno. Jus' sayin'. 🤷‍♂️

    (Oh, and "communciation"? 😂)

    clicksphone.com/en/communicator

    #Tech #BlackBerry #Lookalike

  10. @theplaguedoc Next time you're in London, look out for the loyal DLR dogs bringing you a third rail so your train can stay powered.

    #DLR #Dog #Lookalike

  11. There is another Lizard on the radar! Looming Lizard is an actor creating hundreds of lookalike domains impersonating popular banks and telecommunication companies targeting Spanish speaking countries, such as Mexico. Not only they are lookalikes, but are also RDGAs (Registered DGAs), with new domains created on a daily basis. These are some of the entities they impersonate:

    - Banks: Banorte, BBVA, Citi, HSBC, Itaú, Santander, Scotiabank
    - Telecommunications: AT&T, BTC, Claro, Liberty, Movistar, Telcel, Tigo
    - Others: post offices, department stores, energy companies

    For one of the lookalikes to Tigo (tigoppy[.]club), the actor was kind enough and offered the ability to trade our (fake) account points for nice prizes (wink wink). Sample of domains for each mentioned company:

    - banortex[.]vip, banortepmex[.]store, banorteoi[.]icu, banorteoi[.]sbs, banortebc[.]top
    - bbvamex[.]xin, bbvamex[.]xyz, bbvamxn[.]cyou, bbvamxn[.]store, bbvamxn[.]sbs
    - citiprr[.]top, citipr[.]top, citipr[.]vip, citiipir[.]top, citiipir[.]vip
    - mex-hsbc[.]xyz, mexhsbc[.]icu, mex-hsbc[.]icu, mex-hsbc[.]xin, mexhsbck[.]pro
    - itauupy[.]top, ittau[.]top, itauupyi[.]top, itaui[.]cfd, itaupy[.]top
    - santander-mex[.]xin, santandermox[.]vip, santander-mex[.]sbs, santander-mex[.]icu, santandermox[.]xyz
    - scotiabank-mx.xyz, scotiabok[.]xyz, scotiiiai[.]vip, scotiabanukmx[.]sbs, scotiiiai[.]xin
    - attmiex[.]pro, att-com-mx[.]top, attmmex[.]xyz, att-com-mx[.]xin, attmmex[.]vip
    - btcbahamass[.]vip, btcbahamasni[.]vip, btcbahamasni[.]xin, btcbahamasi[.]top, btcbahamasni[.]top
    - claroar[.]top, claroec[.]vip, clarosv[.]top, claropy[.]vip, clarolo[.]top
    - liberty-cr[.]xyz, liberty-cr[.]vip, liberty-cr[.]icu, liberty-cr[.]xin, liberty-cr[.]cc
    - movisstar[.]pro, movisstar[.]xyz, movistar-uy[.]xin, movisstar[.]sbs, movistarui[.]icu
    - telcelsi[.]top, telcelt[.]bond, telcele[.]info, telceln[.]qpon, telcel0[.]online
    - tiiigopy[.]xyz, tigosv[.]top, tigosv[.]cc, tigosvi[.]top, tigoipy[.]top

    urlscan.io/result/375469cb-d1a
    urlscan.io/result/019656a1-67b

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infoblox #infobloxthreatintel #lookalike #phishing #rdga #scam

  12. #monalisa #sophyridge #skynews #art #masterpiece #funny #smile #painting #lookalike #smiling #enigmatic #picture #pictures #leonardo #women #beauty
    A slightly crazy post, but this photo turned up on my phone again. Sophy Ridge from Sky News and the Mona Lisa. It’s the smile that somehow links the pictures!

  13. CW: Joke that can be misinterpreted as racist, but meant as humor. Please remember that different people enjoy different types of humor. Muting or blocking me saves time for everyone, including moderators. Have a great day. Love, Esmie.

    A Chinese child asked his father:
    "Why does the world say we all look alike?"
    The father replied: "People have nothing better to say...
    And besides, I'm your uncle, not your father."

    #ChineseJoke #LookAlike #FamilyHumor #DadJokes #CulturalHumor #LightHumor

  14. Immer wenn ich Herbert #Kickl in den Nachrichten sehe, denke ich, jetzt übernimmt Jens Söring die Macht in #Österreich 😅

    #HerbertKickl #JensSoring #lookalike

  15. #Talent needed for live New Years Eve event!!!

    Seeking #lookalike #actors with strong #improvisational skills to interact with guests in character to fill the following #roles:

    -Pulp Fiction (Samuel L Jackson and John Travolta)
    -My Cousin Vinny (Vinny and Mona Lisa)
    -Frank Sinatra
    -Elvis

    Please submit to [email protected] with the subject line NYE. Submit one full body photo and one close up photo.

  16. Ostin siskontytön joulumyyjäisistä virkkaamansa turvalonkero-mustekalan eli tuttavallisemmin Cthulhun. Siitä tulee oiva suojelushahmo mökkerölle. (Testattu 4kk vauvalla, jonka reaktio puoltaa vertausta.) #cthulhu #lookalike #virkkaus

  17. I uploaded my Mastodon profile picture.

    >>I found my IVE lookalike!
    Rei 90.3% match!

    Find your match at youlookalike.com/ive<<

    #Kpop #Lookalike

  18. According to my waiter this evening, I look something like #AphexTwin. So add that to the list of people I (somewhat implausibly) look like.

    #Lookalike #doppelganger

  19. #Dogs and their owners really do #lookalike—here’s why

    New research reveals that people aren’t just imagining it—dogs and their #owners share striking #similarities, from matching #hairstyles to mirrored #temperaments.

    nationalgeographic.com/animals

  20. That time that I swore I saw Walter White at Walmart.. #Hawaii #BreakingBad #LookAlike (April 14, 2017

  21. 𝗔𝗰𝘁𝗲𝘂𝗿 𝗧𝗶𝗺𝗼𝘁𝗵é𝗲 𝗖𝗵𝗮𝗹𝗮𝗺𝗲𝘁 𝘃𝗲𝗿𝘀𝗰𝗵𝗶𝗷𝗻𝘁 𝗼𝗽 𝗹𝗼𝗼𝗸𝗮𝗹𝗶𝗸𝗲-𝘄𝗲𝗱𝘀𝘁𝗿𝗶𝗷𝗱 𝗶𝗻 𝗡𝗬

    Acteur Timothée Chalamet heeft zondag opeens zijn opwachting gemaakt tijdens een Timothée Chalamet-lookalikewedstrijd in New York. Op sociale media worden zondagavond veel beelden gedeeld waarop te zien is hoe de ster, bekend van Willy Wonka en Call me by your name, zich door de gillende...

    rtl.nl/boulevard/artikel/54774

    #Timothée #Chalamet #lookalike

  22. Threat actors are using the recent U.S. presidential debate and deep fake videos of Elon Musk to lure victims into crypto scams. Following up on our post from Saturday, we have just released a new blog exploring this campaign.
    blogs.infoblox.com/threat-inte

    #dns #cybersecurity #InfobloxThreatIntel #Infoblox #cryptocurrency #crypto #deepfake #ai #youtube #elonmusk #tesla #trump #harris #debate #scam #lookalike #threatintel

  23. This past week, threat actors quickly reacted to the Trump-Harris presidential debate and used the topic as a theme in their cyber campaigns. In one instance, they hijacked multiple Youtube channels, including one that has over 2.4 million subscribers, and then uploaded a deep fake ai video of Elon Musk. In the video, the Tesla CEO advertises a crypto event and QR code that sends users to a webpage instructing them to send funds to specific wallet addresses. They are promised to receive double the crypto amount they sent within a matter of minutes. Some accounts are no longer serving content but they'll keep trying. This is obviously a scam and users should be wary of these get-rich-quick schemes.

    Hijacked youtube channels: hXXps://www[.]youtube[.]com/@tesla.trump.debate, hXXps://www[.]youtube[.]com/@Tesla.lives.2444, hXXps://www[.]youtube[.]com/@Tesla-i5g/streams. Malicious and fake crypto scam domains: trump-debate[.]com, tesladebate[.]com, teslatrump[.]org.

    Fraudulent wallet addresses: bc1qfwjgvwesz5k2dpjpvwueze2v009wjh76hn9gfn (BTC),bc1qjanjaawj4g0n5xlm03dmpx97u5yrpzljuhuxz8 (BTC),6XxsCPnWBY4ciWhEN5P9GiTWxuDHwomQkDsHJNC7hrTf (SOL),8iwdRkeBDr6RzpkvkcMzqAFqr9L9eGKCKzHHZdzB6MQx (SOL),0x70c774951b96Cb7EcA192505da81CEAddf6F3C92 (ETH),0xD7C3F7dC1Dfa6F64F778ddfC9Ea1a4d2dA2131b4 (ETH),D6ShMStqVGWwgHPAZZkw9UK49oP4JZJAz4 (DOGE),DKV1nsGp6DYVZ4fze8zYJbPti9MbGcXGWB (DOGE).

    One of the addresses have already gathered over 4,300 USD worth of Dogecoin transactions.

    #dns #cybersecurity #InfobloxThreatIntel #Infoblox #cryptocurrency #crypto #deepfake #ai #youtube #elonmusk #tesla #trump #harris #debate #scam #lookalike #threatintel

  24. Threat actor using lookalike domains that drive through a traffic distribution system (TDS) to illegal gambling and malicious content. This actor runs a TDS using a few different domains, including choto[.]xyz and choto[.]click. The attack chain typically begins when an internet user unknowingly mistypes a website (e.g. dizscord[.]com instead of discord.com). Subsequently, the user is profiled via one or two TDS servers and then conditionally redirected to a fraudulent webpage. Earlier this year, they ran campaigns that leveraged a second stage TDS (victory-leads[.]xyz) that conditionally routed users to different malicious content based on their geo-location (see attached image). We recommend blocking the following TDS domains; doing so will effectively disrupt the attack chains that are conducted by this actor. Currently, only choto[.]click appears to be actively used. We have been tracking this TDS since Spring 2023.

    <Lookalike Domains>
    donga[.]delivery (imitating donga.com - South Korean newspaper company)
    tutorialspoint[.]pics (imitating tutorialspoint.com - video tutorial education service)
    icicibank[.]observer (imitating icicibank.com - Indian banking)
    netflixg[.]com (imitating netflix.com - video streaming service)
    capktalone[.]com (imitating capitalone.com - American banking company)
    cbssportas[.]com (imitating cbssports.com - American sports network)
    betwah[.]de (imitating betway.com - British gambling company)

    <TDS Domains>
    choto[.]click
    choto[.]xyz
    choto[.]store
    victory-leads[.]xyz

    <Fraud Landing Page Domains>
    lotto60[.]com
    joya[.]casino
    tickets[.]love

    #dns #cybersecurity #InfobloxThreatIntel #Infoblox #tds #gambling #scam #lookalike #typosquat #threatintel #cybercrime

Share
Share on Mastodon

Enter the server where you have an account.