Cyber Risks · Krebs on Security

Phish-Friendly Domain Registry “.top” Put on Notice

Summary: ICANN gave the Chinese operator of the .top domain registry, Jiangsu Bangning Science & Technology Co. Ltd., until mid-August 2024 to show it has systems for handling phishing reports and suspending abusive domains or forfeit its license to sell domains. Interisle Consulting Group's study of nearly two million phishing attacks found .top was the most common suffix in phishing sites after .com, with more than 117,000 of its roughly 2.76 million domains identified as phishing sites between May 2023 and April 2024.

What's compelling: More than four percent of all new .top domains registered in the past year were phishing sites, and ICANN's letter notes the registry did not even open its emailed notifications - so abuse reports sent to this TLD have been going nowhere.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related