Security News > 2023 > May > Don't panic. Google offering scary .zip and .mov domains is not the end of the world

Comment In early May, Google Domains added support for eight new top-level domains, two of which -.

Zip domain could be registered and used to host, say, a Flask application that responds to any request with a malicious.

He contends that's not a particularly exciting or likely attack vector, and suggests it might be a good idea to exempt those particular domains from app hyperlinking routines.

Finally, he sees the new TLDs as having a potential upside in that newer domains can be rolled out with more stringent security defaults for registrars.

"The risk of confusion between domain names and file names is not a new one," a spokesperson said.

"Google takes phishing and malware seriously and Google Registry has existing mechanisms to suspend or remove malicious domains across all of our TLDs, including.zip. We will continue to monitor the usage of.zip and other TLDs and if new threats emerge we will take appropriate action to protect users." .

News URL

https://go.theregister.com/feed/www.theregister.com/2023/05/17/google_zip_mov_domains/