Post #3848158
2026-07-15 12:15 UTC
RE: https://infosec.exchange/@urldna/116918452809633800
How Geoshitties are added:
X Free sign-up with [@]duck email
X No email verification
X Custom images and AI generation
X Allow redirects and links off-site
And some good things:
[+] No subdomains
[+] Abuse contact form exists
Mitigation of low-regret? Highly likely for most orgs since real use by partners and vendors would likely be behind a domain and use their paid hosting integrations to Google or Wix.
https://github.com/BadSamuraiDev/bs-lists/blob/main/geoshitties.txt
Replies (1)
-
@deepthoughts10@infosec.exchange 2026-07-16 02:28
@badsamurai@infosec.exchange notice the url redirect on this cred stealer page goes to a domain already on the Geoshitties list!