[campuscodi]

There are quite a few of these:

https://keepass.fr/ https://7zip.fr https://audacity.fr https://gparted.fr https://keepass.fr https://nc3354.nexylan.net https://paintnet.fr

[hengheng]

So, basically somebody went through the list of all tools most commonly installed trough ninite, and created a spoof for each of them.

[redsec]

Thanks for the update, they all look to come from the same guys.

[campuscodi]

They do. They're all registered via one email: https://domainbigdata.com/gmail.com/mj/0DnwUjDWo0L7ysS4kB00p...

[pandasun]

Good find! Can't believe this person made that many fake domains.