Skip to content

Eliminate any messages on your mobile device that carry these specific three characters.

Witnessing this signal indicates a cyber assault. Be on guard.

Woman's focused scrutiny of messages on digital device against a dark backdrop.
Woman's focused scrutiny of messages on digital device against a dark backdrop.

Eliminate any messages on your mobile device that carry these specific three characters.

Staying secure from cyber threats can sometimes be as simple as recognizing telltale signs. One of these signs is the presence of a link in malicious text messages, often accompanying a lure such as an unpaid toll, a missed delivery, or an account problem. The text message's top section often mimics an organization, serving as the convincer, while the link functions as the call to action, prompting users to pay bills, update accounts, or retrieve packages.

To fuel these attacks, cybercriminals register an estimated hundreds of thousands of new domains yearly. These domains are crafted with relevant keywords and brand names to match the scam. Remarkably, these domains usually live for less than a day, sometimes just ten minutes, allowing scammers to send millions of malicious texts every month.

The danger lies in top-level domains (TLDs) under which these malicious domains reside. While multiple TLDs are in circulation, some TLDs issued by Chinese registrars have been linked to the most dangerous cyber threats. Among these, the .TOP domain stands out as the most hazardous. Initially introduced in 2014 for businesses aiming to promote premium or 'top' services, the .TOP domain has become notorious for its abuse.

By 2017, the .TOP domain surpassed even the .com and .cn domains in China, becoming the most registered domain name. However, its low-cost registrations and minimal oversight have turned it into a hub for cybercrime activities. According to a report by Interisle, four of the top 10 TLDs had more than 10% of their domains under management reported for use in cybercrime activities. Worst among these was .TOP, where 30% of that TLD's domains were reported for cybercrime use.

Extracted from the document:

It's important to note that phishers often register their phishing sites under lesser-known TLDs such as .TOP, .CYOU, and .XIN. These scam messages can be spotted easily. If you receive any text containing a link under the .TOP domain, it's advisable to delete it immediately, regardless of the rest of the message's content. The Anti-phishing Working Group warns that it is unlikely for a legitimate western organization to use a .TOP domain.

To stay safe, be vigilant and avoid interacting with links from unfamiliar sources, especially those associated with the .TOP domain. If you receive such a message, do not click on the link or provide any personal information. Instead, report the message to the relevant authorities or your service provider.

  1. In the realm of cybersecurity, receiving a text message with a link from the .TOP domain should prompt an immediate deletion, as these have been associated with high levels of cybercrime activity.
  2. Staying secure in today's technological era requires general awareness, particularly when it comes to warning signs such as text messages containing links under suspicious top-level domains (TLDs), like .TOP, which have been linked to numerous cyber threats.
Table display data from report's examination

Read also:

    Latest