.TOP blocked in Microsoft Corpnet
Just discovered that our IT policy is to block the entirety of .TOP due to malware. Investigating. From: xxxxx Sent: Wednesday, July 12, 2017 9:28 PM To: Mark Svancarek <marksv@microsoft.com> Cc: xxxxx Subject: RE: Why is this page blocked? Hi Mark, Due to the increased usage of .TOP based sites by multiple malware (including Ransomware like Cerber), DSRE blocked access to the .TOP sites from the Microsoft Corporate Machines. Should you prefer to access the below given site, request you to use other alternatives [for example, you would be able to access the site from an Azure machine]. Let me know if you have any further queries. Regards, Jagadeesh. P [cid:image001.jpg@01D2FBBA.4E666D30] xxxxx Senior Security Analyst | Information Security Monitoring Services [cid:image002.jpg@01D2FBBA.4E666D30]<tel:+9104066933605> [cid:image003.jpg@01D2FBBA.4E666D30] <mailto:jparames@microsoft.com> [cid:image004.jpg@01D2FBBA.4E666D30] <sip:jparames@microsoft.com> Digital Security & Risk Engineering<https://microsoft.sharepoint.com/sites/isrm/Pages/default.aspx> | Core Engineering & Services Working Hours: 09.00AM – 06.00PM IST From: Mark Svancarek Sent: Wednesday, July 12, 2017 10:08 PM To: xxxxx Subject: Why is this page blocked? I am trying to access this IRL http://اختبار-القبولالعالمي.top And I have received the following error message: [cid:image013.jpg@01D2FBBA.4E666D30] You can see the expected contents of the destination site, below. It’s affiliated with an Internet community group to which we belong, and it should be completely safe. Why is it blocked? [cid:image001.png@01D2F64A.4AF2BAC0]
Hello, Just noticed you are trying to access http://اختبار-القبولالعالمي.top which has 3 words in the second level domain, but since a _ is missing between the 2nd and 3rd word they have been connected. It should be http://اختبار-القبول-العالمي.top to be read correct. Just a notice for future domain registrations. Regards, Hazem Hezzah From: Mark Svancarek via UA-discuss Sent: Thursday, July 13, 2017 6:27 PM To: UA-discuss@icann.org Subject: [UA-discuss] .TOP blocked in Microsoft Corpnet Just discovered that our IT policy is to block the entirety of .TOP due to malware. Investigating. From: xxxxx Sent: Wednesday, July 12, 2017 9:28 PM To: Mark Svancarek <marksv@microsoft.com> Cc: xxxxx Subject: RE: Why is this page blocked? Hi Mark, Due to the increased usage of .TOP based sites by multiple malware (including Ransomware like Cerber), DSRE blocked access to the .TOP sites from the Microsoft Corporate Machines. Should you prefer to access the below given site, request you to use other alternatives [for example, you would be able to access the site from an Azure machine]. Let me know if you have any further queries. Regards, Jagadeesh. P xxxxx Senior Security Analyst | Information Security Monitoring Services Digital Security & Risk Engineering | Core Engineering & Services Working Hours: 09.00AM – 06.00PM IST From: Mark Svancarek Sent: Wednesday, July 12, 2017 10:08 PM To: xxxxx Subject: Why is this page blocked? I am trying to access this IRL http://اختبار-القبولالعالمي.top And I have received the following error message: You can see the expected contents of the destination site, below. It’s affiliated with an Internet community group to which we belong, and it should be completely safe. Why is it blocked?
participants (2)
-
Hazem Hezzah -
Mark Svancarek