Looks similar
Ghrc.io appears to be malicious(bmitch.net)
352 points by todsacerdoti | 58 comments
Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.
Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)
227 points by cubefox | 98 comments
AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.






