@abyssdomainexpert
@abyssdomainexpert.bsky.social
Also @[email protected] -- Abyss Domain Expert. Infosec, security, phishing, maritime and OPSEC in the PNW.
Hello, scam domain recruiter-linkedin[.]com
October 23, 2025 at 5:49 PM
Hello, scam domain recruiter-linkedin[.]com
Papa Legba, lord of the pathways
July 28, 2025 at 9:48 PM
Papa Legba, lord of the pathways
if I got paid for the time I spent dealing with this, I'd be loaded
February 28, 2025 at 9:26 PM
if I got paid for the time I spent dealing with this, I'd be loaded
see also: havewibeenpawned[.]com
February 20, 2025 at 4:32 PM
see also: havewibeenpawned[.]com
Suspect new domains o' the day: paltoaltonetworks[.]com - 'palto' - superyachttspares[.]com - two T's - hi11dickinson[.]com - all 1 or 2 chars off legit businesses
February 19, 2025 at 4:52 PM
Suspect new domains o' the day: paltoaltonetworks[.]com - 'palto' - superyachttspares[.]com - two T's - hi11dickinson[.]com - all 1 or 2 chars off legit businesses
Somebody has some cojones, trying to masquerade as HIBP - suspect new domain: haveibeenqwned[.]com with a 'q' - cc: @troyhunt.com
February 18, 2025 at 4:34 PM
Somebody has some cojones, trying to masquerade as HIBP - suspect new domain: haveibeenqwned[.]com with a 'q' - cc: @troyhunt.com
Suspect new domain: paloaltonetoworks[.]com - 'neto' - registered with namecheap, of course
February 13, 2025 at 5:00 PM
Suspect new domain: paloaltonetoworks[.]com - 'neto' - registered with namecheap, of course
never change, nextdoor, never change
February 10, 2025 at 4:13 PM
never change, nextdoor, never change
suspect domain roundup o' the day, a thread: first up is sunsseeker[.]com likely targeting legit yacht business sunseeker.com
February 4, 2025 at 5:23 PM
suspect domain roundup o' the day, a thread: first up is sunsseeker[.]com likely targeting legit yacht business sunseeker.com
suspect domain name o' the day: svg-yachtservices[.]com likely impersonating legit yacht biz svgyachtservices.com located in the St Vincent & The Grenadines
January 25, 2025 at 10:13 PM
suspect domain name o' the day: svg-yachtservices[.]com likely impersonating legit yacht biz svgyachtservices.com located in the St Vincent & The Grenadines
Sus domain o' the day #2: myworkdayy\.com - likely impersonating or typosquatting legit business myworkday.com
January 23, 2025 at 6:38 PM
Sus domain o' the day #2: myworkdayy\.com - likely impersonating or typosquatting legit business myworkday.com
Suspect domains o' the day #1: americanfleet-inc[.]com - with hyphen, likey impersonating legit business americanfleetinc.com
January 23, 2025 at 6:36 PM
Suspect domains o' the day #1: americanfleet-inc[.]com - with hyphen, likey impersonating legit business americanfleetinc.com
suspect new domain name oilsspillresponse[.]com likely targeting/mimicking legit UK business oilspillresponse.com
January 22, 2025 at 7:04 PM
suspect new domain name oilsspillresponse[.]com likely targeting/mimicking legit UK business oilspillresponse.com
peak facebook right here, wow. Such automation, much engagement wow
January 18, 2025 at 6:09 PM
peak facebook right here, wow. Such automation, much engagement wow
oh hey suspect domain coastalmarineservices[.]net hosted on zoho, attempting likely invoice fraud, impersonating a legit .com of the same name out of San Diego & Puget Sound - been around for a while, too
January 17, 2025 at 6:16 PM
oh hey suspect domain coastalmarineservices[.]net hosted on zoho, attempting likely invoice fraud, impersonating a legit .com of the same name out of San Diego & Puget Sound - been around for a while, too
Sus domain engalvoelkers[.]com targeting legit business engelvoelkers.com - it is, of course, with Namecheap. I have never seen domain fraud dudes love a businesses domain as much as I have seen them love E&V's
January 15, 2025 at 4:40 PM
Sus domain engalvoelkers[.]com targeting legit business engelvoelkers.com - it is, of course, with Namecheap. I have never seen domain fraud dudes love a businesses domain as much as I have seen them love E&V's
Today's sus domain: vikingsyachts[.]com - with an S - likely targeting legit east coast yacht business vikingyachts.com
January 10, 2025 at 4:39 PM
Today's sus domain: vikingsyachts[.]com - with an S - likely targeting legit east coast yacht business vikingyachts.com
Holy shit, the Malicious Life podcast has come to an end :(
January 9, 2025 at 6:15 PM
Holy shit, the Malicious Life podcast has come to an end :(
Final suspect domain o' the day: scotiabanlk[.]com with that extra 'l' in there - likely mimicking/targeting legit business Scotia Bank - registered w/ Porkbun
January 9, 2025 at 5:01 PM
Final suspect domain o' the day: scotiabanlk[.]com with that extra 'l' in there - likely mimicking/targeting legit business Scotia Bank - registered w/ Porkbun
More suspect domains: pacificspowergroup[.]com - with an 's' - likely mimicking legit business pacificpowergroup.com
January 9, 2025 at 4:56 PM
More suspect domains: pacificspowergroup[.]com - with an 's' - likely mimicking legit business pacificpowergroup.com
Suspect domain o' the day: klelnattorneys[.]com - with an "L" and not "I" - likely targeting legit family law firm kleinattorneys.com based in FL. Suspect domain name is with namecheap, of course
January 9, 2025 at 4:34 PM
Suspect domain o' the day: klelnattorneys[.]com - with an "L" and not "I" - likely targeting legit family law firm kleinattorneys.com based in FL. Suspect domain name is with namecheap, of course
suspect new domain name fraseyachts[.]com - likely mimicking legit yacht business Frayser Yachts
January 6, 2025 at 5:52 PM
suspect new domain name fraseyachts[.]com - likely mimicking legit yacht business Frayser Yachts
suspect new domain name: daimlertrucck\.com reg'd with godaddy
January 6, 2025 at 5:49 PM
suspect new domain name: daimlertrucck\.com reg'd with godaddy
Suspect new domain name "wartsaila[.]com" likely set up to mimic legit energy/tech company Wartsila - reg'd with namecheap, of course - heads up @wartsilacorp.bsky.social
January 2, 2025 at 4:35 PM
Suspect new domain name "wartsaila[.]com" likely set up to mimic legit energy/tech company Wartsila - reg'd with namecheap, of course - heads up @wartsilacorp.bsky.social