dotnet / dotnet/website-feedback

Stop allowing content hosted on windows.net.

Open
#262 2 comments 0 reactions 0 assignees View on GitHub
idea
Dominant language
No language data
Stars
7
Forks
57
PR merge metrics
No merged PRs in 30d

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### URL

windows.net content, sites, and subdomains.

### Describe what you'd like to see

Please, please, please stop allowing new sites to be created and hosted at windows.net. Use or buy domains that can be used for free content hosting as desired, but does not appear to be associated with Microsoft or any other major company just by looking at the domain name.

### Additional context

The use of this domain for phishing landing pages has been rampant and constant for many years and attempts at user education are harmed when a 'trusted' site is hosting this content. Currently the platform is being used so that 'good' links can be placed in an email, and that link is just a landing page that requires some minor user interaction to then get to another page (and sometimes a third site is used) to prevent email scanners from detecting that a threat exists.

In addition, please do security checks of hosted content every time the page is edited and make sure these checks are several links deep just like email security attempts to do so that detection of these multiple click phishing exploits can be eliminated.

You can see what this type of attack looks like here, the starting URL was in a spear phishing email today: https://app.any.run/tasks/3fc7eaa4-4aaa-44e2-92eb-40e88a7d5046

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.