@celesteh@lgbt.io@suprjami@fosstodon.org Top one with the @ is potentially malicious. The domain is v1271.zip with the bit to the left of the @ as a username crafted to look like a URL. An old trick with a slightly new twist as you can use .zip and .mov now, which allows it to look like a zip archive or a video file to a casual user.
@celesteh @suprjami see here, the / in the first url are not real /
https://medium.com/@bobbyrsec/the-dangers-of-googles-zip-tld-5e1e675e59a5