Skip to content

Comment on Gmail Account Takeover Phishing Scam Exploiting Salesforce and Google Processesparent

Comments

Here's another discovery I made, it looks like they are using wordplay:

"Ceci n'est pas" (French for "This is not"):

1 ceci.njalla.do

2 nest.pipe.ma

3 pas.njalla.in

Translates loosely to "This is not domain information" or "This is not DO (Domain Operations)."

"You can get no info":

1 you.njalla.no

2 can.njalla.in

3 get.njalla.fo

If anyone has come across something similar, wordplay, etc, if would be interesting to hear.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.