Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Perils of an .xyz Domain

spotvirtual.com

Post reply on HN
Print view View original

181–190 of 282 posts

Re: The Perils of an .xyz Domain

#181

Post by SilverRed »

maxwell wrote: post #40
Spivak wrote: post #28

Earlier quoted context omitted.

Because spam really is that rampant. There aren't that many communication systems with a small search domain of user ids where anyone can send and receive messages from anyone by default.

Why not impose costs instead of filtering?

The latest spam method right now is to get malware on to android phones and have the actual phones do the spamming. So if there is a cost, it gets applied to random people and not the spammers.

Also if there was a cost per SMS on phones these days it would be the death of SMS because no other system charges.

Re: The Perils of an .xyz Domain

#182

Post by dvtrn »

honkdaddy wrote: post #161
skrtskrt wrote: post #122

Earlier quoted context omitted.

Seconded, having worked in this space I can assure everyone that there are multiple orders of magnitude more (attempted) spam SMS than legitimate SMS.

Very interesting. I definitely get phishing SMS messages from time to time, but I didn't realize these were some of the very few which actually made it through. Any idea how these bad actors are able to send out these massive batches of spam SMS? My naiive guess would be bulk purchasing disposable SIMs but I imagine it's more sophisticated?

Lately one doesn’t even need a SIM card, instead SMS via VoIP or a SIP trunk and bulk-purchased phone numbers

Re: The Perils of an .xyz Domain

#183

Post by SilverRed »

ISL wrote: post #158

Whoa. I use an xyz domain daily. This thread is eye-opening. Here's the reply from a SpamAssassin validator. My domain is almost marked as spam solely on TLD grounds. What's the point of a TLD if it isn't a first-party domain on the internet? SpamAssassin Score: -0.599 Message is NOT marked as spam Points breakdown: -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high trust [***.***.***.*** listed…

I think the problem is that xyz was and maybe still is the cheapest TLD so it naturally attracts all the spammers.

Re: The Perils of an .xyz Domain

#184

Post by SilverRed »

3836293648 wrote: post #177
tombert wrote: post #27

I was pretty excited when ICANN opened up a bunch of new domain extensions, but it does sometimes feel like "all these extensions are great if you don't plan on using them". It was pretty cool that I managed to buy a bunch of domains like . , but to be honest I really don't see myself using my .blackfriday domain for anything. For that matter, I think that (somewhat ironically) `my-last-name.email` would not be taken…

You're obviously American. .com is not the only acceptable domain. Each country's tld is perfectly fine for anything in said country. In fact, it's really weird when companies here in Sweden use a .com domain instead of a .se

It's kind of a pain to use .com.au because you have to register an ABN and have a company / yourself be directly related to that name. So I can't just come up with any cool domain name I want and create a .com.au for myself without legally registering that name too.

Re: The Perils of an .xyz Domain

#185

Post by SilverRed »

sneak wrote: post #93
kureikain wrote: post #59

Before I get into email business(I run my own email forwarding service[0]), I don't understand why provider block those domains. Then I immediately got it. The amount of spam emails from .xyz .click .faith .top is huge. And with every email comes from them, we have to run spam scanner, which isn't cheap. So we have to score those TLDs more sensitive. https://www.spamhaus.org/statistics/tlds/ can give some insight abo…

Seems like an easy solution is to simply start spamming from .coms like we had to back in my day.

They spam from these weird TLDs because they often have really cheap deals like $1/year for the first registration so you can buy a load of them.

Re: The Perils of an .xyz Domain

#186

Post by SilverRed »

invokestatic wrote: post #31
jordemort wrote: post #4

I have a .haus domain for personal use. I can send and receive email just fine, but I do run into a lot of apps that do some sort of misguided "validation" on the email address and reject .haus as an invalid domain. One retailer lets me use the .haus email address as a login, but once I log in and try to make a payment it requires me to enter a different "valid" email address to send the receipt to. It's very irritat…

I have a .co domain that gets rejected occasionally as well. Highly regret that domain choice since people often mistake it for .com.

I used to have a weird .red domain and I always found it awkward to tell people. So I ended up going with firstname@lastname.me and literally no one has got it wrong or looked at me funny.

Re: The Perils of an .xyz Domain

#187

Post by dmuth »

donatj wrote: post #174

I have had similar experiences with corporate firewalls blocking my .app domain. I got in a painfully stupid argument with a middle-age IT admin “we don’t want to our employees installing apps” It’s not an app, you don’t install it, it’s a “WebApp”, it’s just a freaking fancy website who’s domain ends in .app - lol, this was like three years ago and just thinking about it is getting me heated

> I got in a painfully stupid argument with a middle-age IT admin “we don’t want to our employees installing apps”

If they think that any domain that ends in .app is for installing apps, their mind is gonna be blown about some of the sites on .net and .org domains...

Re: The Perils of an .xyz Domain

#188

Post by psutor »

ISL wrote: post #158

Whoa. I use an xyz domain daily. This thread is eye-opening. Here's the reply from a SpamAssassin validator. My domain is almost marked as spam solely on TLD grounds. What's the point of a TLD if it isn't a first-party domain on the internet? SpamAssassin Score: -0.599 Message is NOT marked as spam Points breakdown: -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high trust [***.***.***.*** listed…

I host my own email, and I got nothing but huge amounts of spam from .xyz domains, so I manually increased the SpamAssassin score for just .xyz to +4.0, as KAM was only adding 0.75 for it. It's the only TLD I've had to do that for.

Unfortunately for the people with legitimate uses, for email admins it's just a really easy (and arguably necessary) shortcut to block a ton of spam.

Re: The Perils of an .xyz Domain

#189

Post by davchana »

DaiPlusPlus wrote: post #37
kop316 wrote: post #24

Earlier quoted context omitted.

...whoa, yeah same here. tried "test spot.xyz" then "test spot.com" T-mobile T-Mobile. "test spot.xyz" did not send. Even weirder, I got a confirmmation that it was delivered. It looks like T-Mobile looks for ".xyz" within the SMS and will silent drop the SMS (though it will claim it is delivered). ".xxyz" works, "..xyz" or ".xyzz" does not. "xyz" works, so does ".xy".

> though it will claim it is delivered I thought SMS didn’t have delivery receipts?

Many years ago when incoming messages used to cost, each delivery report I recieved after sending a message out costed me exactly one incoming message, in India in 2000s. Many phones still offer Request Delivery Reports.

Re: The Perils of an .xyz Domain

#190

Post by bisby »

I have a .xyz domain for my personal stuff. The biggest issue I've had with it is that steam refused to acknowledge that it was a valid email domain. So they just wouldn't let me switch off gmail to me@mydomain.xyz because it didnt get past their filters. That was the biggest roadbump I had for switching off gmail.
Post reply on HN