Krebs On Security: Who's Behind the "Reopen" Domain Surge?

[erronis]

Some great analysis by Brian Krebs detailing some of the ownership/control of a large number of new domain registrations made after the dump called on his followers to "Liberate" some of the states.

Whoops: Here's the URL: https://krebsonsecurity.com/2020/04/whos-behind-the-reopen-domain-surge/

The past few weeks have seen a large number of new domain registrations beginning with the word “reopen” and ending with U.S. city or state names. The largest number of them were created just hours after President Trump sent a series of all-caps tweets urging citizens to “liberate” themselves from new gun control measures and state leaders who’ve enacted strict social distancing restrictions in the face of the COVID-19 pandemic. Here’s a closer look at who and what appear to be behind these domains.

KrebsOnSecurity began this research after reading a fascinating Reddit thread over the weekend on several “reopen” sites that seemed to be engaged in astroturfing, which involves masking the sponsors of a message or organization to make it appear as thought it originates from and is supported by grassroots participants.

The Reddit discussion focused on a handful of new domains — including reopenmn.com, reopenpa.com, and reopenva.com — that appeared to be tied to various gun rights groups in those states. Their registrations have roughly coincided with contemporaneous demonstrations in Minnesota, California and Tennessee where people showed up to protest quarantine restrictions over the past few days.

Same old (r)epuglicon slime working on behalf of Kochs, Putin, etc.