dotnet / dotnet/website-feedback
Stop allowing content hosted on windows.net.
- Dominant language
- No language data
- Stars
- 7
- Forks
- 57
- PR merge metrics
- No merged PRs in 30d
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### URL
windows.net content, sites, and subdomains.
### Describe what you'd like to see
Please, please, please stop allowing new sites to be created and hosted at windows.net. Use or buy domains that can be used for free content hosting as desired, but does not appear to be associated with Microsoft or any other major company just by looking at the domain name.
### Additional context
The use of this domain for phishing landing pages has been rampant and constant for many years and attempts at user education are harmed when a 'trusted' site is hosting this content. Currently the platform is being used so that 'good' links can be placed in an email, and that link is just a landing page that requires some minor user interaction to then get to another page (and sometimes a third site is used) to prevent email scanners from detecting that a threat exists.
In addition, please do security checks of hosted content every time the page is edited and make sure these checks are several links deep just like email security attempts to do so that detection of these multiple click phishing exploits can be eliminated.
You can see what this type of attack looks like here, the starting URL was in a spear phishing email today: https://app.any.run/tasks/3fc7eaa4-4aaa-44e2-92eb-40e88a7d5046
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.