News for hackers. Stuff that matters.
Re:Domain Matching 2FA by ImPostingOnHN on Saturday June 10, 2023 @04:13AM (#36268672)
this is done by some darknet sites running tor hidden services on generated onion domains, for similar reasons:

https://shufflingbytes.com/posts/ripping-off-professional-cr...

Re:Domain Matching 2FA by joskvw on Saturday June 10, 2023 @11:14AM (#36271229)
That's a really good post, interesting read. This is similar in some ways but I don't see how their approach protects the user from more advanced attacks (an attacker could still swap the captcha).