Suspicious domains on file.pizza

Hello,

Has I told by email to [email protected] (25/12/25), there are requests to suspicious domains while loading file.pizza.

• To: infoworldbriefs.com/redirect
• Them to: changelesschoir.com

Now file.pizza is down but the redirection change from <changelesschoir.com> to <signedquick.com> in the last 24h.

Very suspicious activity that may be caused an infection from CVE-2025-66478.

Have a good day, ache