Why Phishers Love New TLDs Like .shop, .top and .xyz
-
Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) — such as .shop, .top, .xyz — that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds. Meanwhile, the nonprofit entity that oversees the domain name industry is moving forward with plans to introduce a slew of new gTLDs.
https://krebsonsecurity.com/2024/12/why-phishers-love-new-tlds-like-shop-top-and-xyz/
-
indeed... https://interisle.net/ has been tracking abuse, including by TLD, for years and no one paying attention has any illusions that a new TLD round is needed or will be any less of a cesspool than the last one.
enforcement of registry agreements has been slow or non-existent.
-
S. G. Tallentyre (🤨 ┻━┻)replied to BrianKrebs last edited by
Don't most sites—especially which are legitimate—that exist for the purposes of whatever cryptocurrency, usually end in
.xyz
, though? I could be wrong; I don't know much if anything about crypto myself, but a friend of mine does. Another friend of mine sent me screenshots of what she believed to be a scam, and I also thought it looked bogus but I couldn't put my finger on why, so (with her permission) I sent the screenshots to my friend who's into crypto, and he said it was a scam immediately because the website they linked to ended in.com
(IIRC) and not.xyz
. -
@briankrebs I've said it before and I stand by it. Block TLDs under $2.
-
@briankrebs I wanted to share this on BlueSky and was going to reskeet your account, but it seems a poseur is using your good name, poorly. Just a heads up. (If you do join, you can domain verify: https://bsky.social/about/blog/4-28-2023-domain-handle-tutorial )
-
@tom @briankrebs
Reason # 154 why I'm not using Bluesky: "reskeet"*dies of cringe*
-
@screaminggoat @tom I seriously did not know that's what they called a re-post. Eww, and no.