.zip Domains really suck

If you haven't heard, Google has launched a couple of new domains; including .zip and .mov.

Terribly dangerous, but I'll let the below pages explain themselves (click on them!)

Example URLs

• https://internet-banking.dbs.com.sg∕ib∕statements@consolidated-statement.zip
• https://drive.google.com∕file∕d∕11v6POMSp972∕view@my-movie.mov
• https://financialstatement.zip/

Personally, I own a couple of these domains for no reason other than to prove a point, and maybe have a little fun with friends. But this can, and will be wielded by threat actors in even more sophisticated phishing attacks on vulnerable users.

Google has singlehandedly, out of blind optimism (or more likely, negligence), created brand new attack vectors that are already being abused.

Enough said. I'll talk about Google's unfair dominance of the Internet some other day.