[UA-discuss] .TOP blocked in Microsoft Corpnet

Mark Svancarek marksv at microsoft.com
Thu Jul 13 16:27:56 UTC 2017


Just discovered that our IT policy is to block the entirety of .TOP due to malware.  Investigating.

From: xxxxx
Sent: Wednesday, July 12, 2017 9:28 PM
To: Mark Svancarek <marksv at microsoft.com>
Cc: xxxxx
Subject: RE: Why is this page blocked?

Hi Mark,

Due to the increased usage of .TOP based sites by multiple malware (including Ransomware like Cerber), DSRE blocked access to the .TOP sites from the Microsoft Corporate Machines.

Should you prefer to access the below given site, request you to use other alternatives [for example, you would be able to access the site from an Azure machine].  Let me know if you have any further queries.

Regards,
Jagadeesh. P

[cid:image001.jpg at 01D2FBBA.4E666D30]

xxxxx

Senior Security Analyst  | Information Security Monitoring Services

[cid:image002.jpg at 01D2FBBA.4E666D30]<tel:+9104066933605>  [cid:image003.jpg at 01D2FBBA.4E666D30] <mailto:jparames at microsoft.com>   [cid:image004.jpg at 01D2FBBA.4E666D30] <sip:jparames at microsoft.com>

Digital Security & Risk Engineering<https://microsoft.sharepoint.com/sites/isrm/Pages/default.aspx> | Core Engineering & Services
Working Hours: 09.00AM – 06.00PM IST

From: Mark Svancarek
Sent: Wednesday, July 12, 2017 10:08 PM
To: xxxxx
Subject: Why is this page blocked?

I am trying to access this IRL
http://اختبار-القبولالعالمي.top

And I have received the following error message:
[cid:image013.jpg at 01D2FBBA.4E666D30]

You can see the expected contents of the destination site, below.  It’s affiliated with an Internet community group to which we belong, and it should be completely safe.

Why is it blocked?
[cid:image001.png at 01D2F64A.4AF2BAC0]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3618 bytes
Desc: image001.jpg
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/image001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 2326 bytes
Desc: image002.jpg
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/image002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 2725 bytes
Desc: image003.jpg
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/image003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 2495 bytes
Desc: image004.jpg
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/image004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image013.jpg
Type: image/jpeg
Size: 52317 bytes
Desc: image013.jpg
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/image013.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image014.jpg
Type: image/jpeg
Size: 114608 bytes
Desc: image014.jpg
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20170713/e841d637/image014.jpg>


More information about the UA-discuss mailing list