@celesteh@lgbt.io @suprjami@fosstodon.org
Top one with the @ is potentially malicious. The domain is v1271.zip with the bit to the left of the @ as a username crafted to look like a URL.
An old trick with a slightly new twist as you can use .zip and .mov now, which allows it to look like a zip archive or a video file to a casual user.

*(Blocked both on our network via the piHole)*