5 ms·

> Most spam comes from domains registered with these fake TLDs From: https://en.wikipedia.org/wiki/.cm https://en.wikipedia.org/wiki/.cm > In a report publish

> Most spam comes from domains registered with these fake TLDs From: https://en.wikipedia.org/wiki/.cm https://en.wikipedia.org/wiki/.cm > In a report published in December 2009 by McAfee, "Mapping the Mal Web - The world's riskiest domain", .cm was reportedly the riskiest domain in the world, with 36.7% of the sites posing a security risk to PCs From: http://news.cnet.com/8301-1009_3-10407530-83.html http://news.cnet.com/8301-1009_3-10407530-83.html > The African nation of Cameroon (.cm) is deemed the most dangerous, and the popular .com domain comes in second place.

missingmarshall 8y ago
I'm inclined to think '.cm' is top because of its visual similarity to '.com' so it can be used to fool easier, rather than any reasons related to the country itself.
extra88 8y ago
I don't agree with the previous comment at all, I'm happy to have more TLDs, but a report from 2009, before creating new ones really opened up, isn't useful.
- evgen 8y ago
  It would also be useful to know how many domains in the TLD or what the distribution of requests is over all TLDs. Yes, .com should have a large percentage because there are so many domains registered in that TLD, but if 20% of the .amazon domains are spam/malware/phishing then a savvy admin will block by default and just whitelist the small number of exceptions.
  - extra88 8y ago
    A savvy admin should outsource spam management and not spend time on crude techniques that inevitably cause false positives.
    - AnIdiotOnTheNet 8y ago
      Savvy admins do both, because outsourced filtering isn't 100% and can always be tuned better for your businesses actual needs.
    - evgen 8y ago
      I am less concerned about spam management than I am of phishing sites and the like. Email from bogus tlds is of little concern because it will hit the spam bucket just like everything else, but if you do a DNS lookup on one of these joke tlds you can expect a high probability of having the request filtered.
iod 8y ago
There is also .om for Oman. But I don't see how either of these domains are "risky", at least not anywhere as bad as subdomains of the pattern [actual].com.[impersonator].com https://en.wikipedia.org/wiki/.om https://en.wikipedia.org/wiki/.om

missingmarshall 8y ago

I'm inclined to think '.cm' is top because of its visual similarity to '.com' so it can be used to fool easier, rather than any reasons related to the country itself.

extra88 8y ago

I don't agree with the previous comment at all, I'm happy to have more TLDs, but a report from 2009, before creating new ones really opened up, isn't useful.

evgen 8y ago
It would also be useful to know how many domains in the TLD or what the distribution of requests is over all TLDs. Yes, .com should have a large percentage because there are so many domains registered in that TLD, but if 20% of the .amazon domains are spam/malware/phishing then a savvy admin will block by default and just whitelist the small number of exceptions.
- extra88 8y ago
  A savvy admin should outsource spam management and not spend time on crude techniques that inevitably cause false positives.
  - AnIdiotOnTheNet 8y ago
    Savvy admins do both, because outsourced filtering isn't 100% and can always be tuned better for your businesses actual needs.
  - evgen 8y ago
    I am less concerned about spam management than I am of phishing sites and the like. Email from bogus tlds is of little concern because it will hit the spam bucket just like everything else, but if you do a DNS lookup on one of these joke tlds you can expect a high probability of having the request filtered.

iod 8y ago

There is also .om for Oman. But I don't see how either of these domains are "risky", at least not anywhere as bad as subdomains of the pattern [actual].com.[impersonator].com https://en.wikipedia.org/wiki/.om https://en.wikipedia.org/wiki/.om