Batch-registered typosquat domains like claude2shell.com and kubernetes2shell.com flagged
rez0__ · x · 2026-11-06
A monitoring page shared by rez0 tracks newly registered domains ending in "2shell" — including claude2shell.com, kubernetes2shell.com, nextjs2shell.com, wordpress2shell.com, nodejs2shell.com, windows2shell.com, and wiz2shell.com — registered in bulk between late October and early November.
The pattern resembles prior supply-chain attacks on developer toolchains: typosquatting names of AI tools, Kubernetes, popular frameworks, and cloud providers for phishing, malicious packages, or CI/CD poisoning. Developers should beware untrusted install scripts and links; the page offers an RSS feed for tracking.
More from Safety
- Google DeepMind shows AI agents accelerating cryptanalysis of encryption schemes — sebkrier · 2026-11-07
- Congresswoman calls to pause advanced AI and ban superintelligence; Yudkowsky backs her — ESYudkowsky · 2026-11-07
- Greenlight builds autonomous SOC on Bedrock AgentCore, 90% of 4,000 monthly cases auto-resolved — AWS ML Blog · 2026-11-07
- Paul Christiano joins OpenAI board's Safety and Security Committee, warns of intelligence explosion — teortaxesTex · 2026-11-07
- Taxbit ships a cited, permission-aware AI assistant on Bedrock AgentCore with 55% 24h return rate — AWS ML Blog · 2026-11-07
- AI plush toy for kids as young as 3 tells BBC reporter: "I can't help with killing you" — Polymarket · 2026-11-07