Phishing site : minimap2.com

[SRooke]

Not sure how to label this one, but I have come across a website minimap2.com which appears to be AI generated but is serving it's own copy of the Github repository.

If you search the address or email address listed in the About Us page on google similar sites can be found so it seems that minimap is not the only target: ie Czkawka.

According to the thread on Czkawka's issues, they haven't appeared to have altered the files...according to the MD5 hash at least - though this apparently can be spoofed.

Posting for awareness, if it hasn't already been caught.

[lh3]

Thanks. This is new to me. I have added a note in Getting Started. Not sure what else I can do.

[niemasd]

Based on an ICANN lookup, here's the registrar information:

• Name: Spaceship, Inc.
• IANA ID: 3862
• Abuse contact email: abuse@spaceship.com
• Abuse contact phone: tel:+1.6613102107

I would suggest emailing and calling them ASAP

[jchorl]

+1 to @niemasd suggestions.

In addition to going after the registrar, they appear to be fronted by cloudflare. Likely worth reporting to them as well. Curling the URL nets the header:

< report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UnJfwDXK5CR4qbMe%2FWQPhB0uO6OPkG%2BOFZVb67kAeDC1vRehEf5niQBuhR7UMMzPtAfdA3kq8mWTnqa9xJgZJodBV7TQT9O%2FdXNEKA%3D%3D"}]}                                                                                          

[SRooke]

I have contacted Spaceship, referencing this thread.

Though I have to wonder what their end goal is, squatting the domain with the threat that they could distribute malware to extort someone to purchase the domain from them?

[niemasd]

If you Google the registrant's phone number and address, it seems like this person runs phishing scams (multiple results come up over the past few years, e.g. Better Business Bureau report and other complaints)

https://bsky.app/profile/niema.net/post/3lyg5lidejs2a

[lh3]

@jkbonfield provides an easy way to find the scam sites from this group: google "+447950904740" or "emmawatsofficial54". So many of them. I guess registrars don't care or don't know how to ban them.