The new ".zip" domain is being used almost solely for malware. Some of the clicks are very deceptive, even to technically knowledgeable people. See the attached image for an example.
You can block all zip domains with the following uBlock Origin rule under My Filters:
||zip^
Tell everyone you know.
@celesteh @suprjami see here, the / in the first url are not real /
https://medium.com/@bobbyrsec/the-dangers-of-googles-zip-tld-5e1e675e59a5
@HydrePrever @celesteh @suprjami Damn. That’s subtle. Unicode for the phishing win here…
That said, the domain is already blocked on my internal DNS servers, but now I’m more seriously thinking about forcing their use even when on public cellular internet connections
Jamie
Charles ☭ is now tooting from queer.party
Le Néandertal se sent las, las
Erik Ableson