←back to thread

Ghrc.io appears to be malicious

(bmitch.net)
407 points todsacerdoti | 3 comments | 24 Aug 25 23:27 UTC | HN request time: 0s | source
Show context
TZubiri ◴[25 Aug 25 00:54 UTC] No.45009201[source]▶
Reminder not to use goofy TLDs, being cute is not worth it when compared to security. There's no guarantees that the process for taking down a malicious domain will be as smooth as a .com.

I'd rather deal with US verisign rather than the British Indian Ocean territory or colombia or anguila

replies(1): >>45009514 #
1. bragr ◴[25 Aug 25 01:58 UTC] No.45009514[source]▶
The .io TLD is administered by Afilias which is an American corporation.
replies(2): >>45009762 #>>45018180 #
2. nicce ◴[25 Aug 25 02:55 UTC] No.45009762[source]▶
Afilias was sold to Ethos Capital and the whole domain is a mess:

https://en.m.wikipedia.org/wiki/.io

3. TZubiri ◴[25 Aug 25 19:49 UTC] No.45018180[source]▶
Confirmed:

>$dig io >$dig a0.nic.io >$whois 65.22.160.17

OrgName: Afilias, Inc. OrgId: AFILI-2 Address: 10500 NE 8th Street City: Bellevue StateProv: WA PostalCode: 98004 Country: US