Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
nerdculture.de is one of the many independent Mastodon servers you can use to participate in the fediverse.
Be excellent to each other, live humanism, no nazis, no hate speech. Not only for nerds, but the domain is somewhat cool. ;) No bots in general. Languages: DE, EN, FR, NL, ES, IT

Administered by:

Server stats:

1.2K
active users

nerdculture.de: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#domains

4 posts4 participants0 posts today
Public *
JohnW

I discovered a new scam today through one of my clients. Some of you may already know about it but even if this info helps 1 person it's worth it.

So heres how it happened.

I'm hosting a number of clients, so I go in and check their domains on a regular basis. I find one domain that is expiring soon, (Registered elsewhere) so I contact the client.

1/3

#Scams#Scamming#Hosting
Public *
Infoblox Threat Intel

This week, we encountered a new phishing campaign utilizing the Tycoon 2FA Phishing-as-a-Service (PhaaS) to bypass multifactor authentication (MFA).

The RDGA domains have Russian TLDs but are hosted on CloudFlare infrastructure. We have been seeing them use shared infrastructure for a few months now, definitely trying to make detection more challenging. They continue to obfuscate every piece of code but have updated their verification page. Previously, we always saw their custom Cloudflare Turnstile page, but now they also use a new captcha challenge, as shown below.(You can also check it here urlscan.io/result/0195ed8b-7a4 )

Their old Cloudflare Turnstile page seems to still be their favorite, even though they now change their message more frequently: "Checking response before request" or "Tracking security across platform" are some of the new messages they use.

Here is a sample of the hundreds of domains we are detecting:
womivor[.]ru
nthecatepi[.]ru
toimlqdo[.]ru
dantherevin[.]ru
xptdieemy[.]ru

New verification page associated with Tycoon PhaaS
Cloudflare verification page associated with Tycoon PhaaS
#dns#domains#phishing
Public
ocean

I have a question about naming my #website #domains . Currently I have my professional #academic site which is just my nameand my fun #tech / #selfhosting site. It would be nice to have a non-work related site that using my name but for blogging and hosting. I especially want to have my name attached to my blogs and selfhosting write ups but I don’t want that connected to work.

I do like that my ActivityHub accounts are not connected to my name so I can be more open though.

What should I do?

Public *
Jonathan Matthews

I'm looking for #recommendations for a UK-based #domain #registrar.

Requirements:
- MFA auth
- be a UK entity
- VAT invoices

Anti-requirements:
- not be Beasts (as I already like+use them, and the purpose of this change is to decouple my hosting+DNS-provider from my registrar)
- not be PF (I sincerely hope that TB-at-PF is doing ok, but their lack of responsiveness on a recent issue has made me conclude that relying on a 1-man-band for domain regs isn't sensible)

#tech#ISP#domains
Public
Walled Culture

Massive expansion of Italy’s Piracy Shield underway despite growing criticism of its flaws

Walled Culture has been following closely Italy’s poorly-designed Piracy Shield system. Back in December we reported how copyright companies used their access to the Piracy Shield system to order Italian Internet service providers (ISPs) to block access to all of Google Drive for the entire country, and how malicious actors could similarly use that unchecked power to shut down critical […]

#agcom #audiovisual #blocking #ccia #computer #copyright #costs #critical #deIndex #dns #DNSs #domains #DSA #elisaGiomi #eu #film #football #google #IP #ISPs #italy #linear #network #piracyShield #reporters #serietv #singleMarket #tris #tv #vpns #wipo

walledculture.org/massive-expa

Public *
datenwolf

When I created my internet #domains I never felt comfortable with tying them to a particular place or culture, for I consider myself a #cosmopolite. The only TLDs that felt right for that are the international, generic ones: .org. and .net. –but those are in the control of Verisign, a US company, which also always felt icky.

I'm thinking about moving, but what iTLDs are there, that are "neutral", and not under US control?

For ham radio there's .radio. which is EU controlled.

Public *
Blort™ 🐀Ⓥ🥋☣️

Omg, I can't believe I managed to snag the domain opossum.town for my forthcoming fedi instance (GoToSocial? Snac?)!

* opossum.net and opossum.xyz both go for around $4k USD
* opossum.ai goes for around $10k USD.
* opossum.inc is around $2k USD (and renews at $1.3k USD per year?!)

I paid... uh... around six bucks, USD equivalent...

Expect many opossum themed custom emoji's... :awesome:

Photo of a baby opossum with an overjoyed look on it's face as it walks on grass.
#Fediverse#Opossum#Domains
Public
Inautilo

#Development #Launches
Six-day certificates · Let’s Encrypt brings short-lived SSL/TLS certificates ilo.im/162g23

_____
#LetsEncrypt #CA #Certificates #Https #Domains #Website #Security #WebDev #Frontend #Backend

ilo.imWe Issued Our First Six Day CertEarlier this year we announced our intention to introduce short-lived certificates with lifetimes of six days as an option for our subscribers. Yesterday we issued our first short-lived certificate. You can see the certificate at the bottom of our post, or here thanks to Certificate Transparency logs. We issued it to ourselves and then immediately revoked it so we can observe the certificate’s whole lifecycle. This is the first step towards making short-lived certificates available to all subscribers.
ExploreLive feeds
About