JamieMay 17, 2023

The new ".zip" domain is being used almost solely for malware. Some of the clicks are very deceptive, even to technically knowledgeable people. See the attached image for an example.

You can block all zip domains with the following uBlock Origin rule under My Filters:

||zip^

Tell everyone you know.

Show threadCharles ☭ is now tooting from queer.partyJun 7, 2023
@suprjami which one is which?
Show threadCreature Of The Hill  
@celesteh @suprjami
Top one with the @ is potentially malicious. The domain is v1271.zip with the bit to the left of the @ as a username crafted to look like a URL.
An old trick with a slightly new twist as you can use .zip and .mov now, which allows it to look like a zip archive or a video file to a casual user.

*(Blocked both on our network via the piHole)*
Jun 7, 2023 at 1:22pmWeb