It's in the article.. they hijacked the DNS to send the users to an alt phishing website.. looked identical to the Entra (M365) flow.. but the victims were sending their data/secrets/TOTP to hackers on slightly different URLs.
Most people are so used to the login flow, they don't inspect the URLS if the page looks right. Some popups even obscure the URL (almost impossible to detect).
You apparently signed a waver saying you accepted this process[2], verfication from id.music: https://www.id.music/ starting on the webpage: https://verify.music/ (via Porkbun[2])
> - Starting April 1, 2026, newly registered .MUSIC domains are immediately active for use. Domains registered before this date will be placed on serverHold until verification is completed.
> - Private registration is not allowed due to the Music Verification policies.
> - The Music Nexus policy remains in full effect; you must complete the simple Music Nexus Checkbox during registration.
> - The registry will send an email to registrants about identity verification at ID.MUSIC.
> - Though verification is required, registrants have up to one (1) year from registration to complete the verification process.
As far as I'm concerned, CD-35 2722 B can self identify however they want.
If they want to identify as a planet, however, they can claim the almost unique distinction of having a gas giant as their moon. I wonder if the gas giant itself has their own small rocky and potentially habitable moons.
reply