Post #3475461

@aredridel@kolektiva.social That is a hot take, and one with which I fervently disagree. .xyz is a great example. In any list of current domain IOCs, it would float to the top of obviously malicious top-levels. It is not a ccTLD, so I'm not sure where "US hegemony" comes into play for that one. Same with .shop. Not blocking such a TLD would be negligence on my part as a defender. The odds of a request to that domain from my network being benign are infinitesimal compared to the odds that it's malicious/unwanted in some way. Several other TLDs share that characteristic, as .garden appears to now.