The newly introduced top-level domains .zip and .mov can be used for malicious purposes and it is better to block them. This article shows you how to block .zip and .mov domains in Windows in 4 simple steps.
Table of contents:
- Why block .zip and .mov domains?
- How to block .zip domains in Windows
- How to block .mov domains in Windows
Why block .zip and .mov domains?
To put it simply, .zip and .mov domains are a security nightmare.
As most of you already know, .zip and .mov are file extensions commonly used for zip and video files. However, Google has introduced the ability to register domains with .zip and .mov top-level domains (TLDs). This development has the potential to create confusion and open doors for attackers to exploit these domains for malicious purposes.
One of the main risks involves attackers utilizing domain spoofing techniques and special Unicode characters to make .zip and .mov domains appear as harmless file links. Unsuspecting users may be tricked into downloading malicious files or visiting infected websites, putting their computers at risk.
In addition to that, there is another significant security issue. Due to the automatic conversion of text resembling links or domains into hyperlinks by various software and websites, any mention of an existing zip file on the internet can inadvertently turn into a clickable link, potentially leading users to unintended and harmful downloads.
For example, you receive an email from a colleague mentioning an “attachment.zip” that you should check out. Your email client may automatically convert this text into a clickable hyperlink without the sender’s intention. If you were to click on it, you could end up on an unknown website, and in the worst-case scenario, your computer could become infected with malware.
To protect yourself from these risks, it is better to block .zip domains on your Windows system. Additionally, you might also consider blocking .mov domains for added security.
How to block .zip domains in Windows
Follow the below steps to block all .zip domains in Windows:
- Press the Windows key + R on your keyboard to open the Run dialog box.
- Type “gpedit.msc” (without quotes) and press Enter. This will open the Group Policy Editor.
- In the Group Policy Editor window, navigate to “Computer Configuration” > “Windows Settings” > “Name Resolution Policy.”
- Select “Suffix” from the first dropdown under “Create Rules.”
- Type “.zip” (without quotes) in the blank field next to the “Suffix” dropdown.
- Click on the “Generic DNS Server” tab.
- Under it, select the “Enable DNS settings” checkbox and click the “Add” button.
- Type the local IP address “127.0.0.1” (without quotes) in the blank field and click/tap the “Add” button.
- Scroll down and click on the “Create” button to create the rule.
- Finally, click/tap the “Apply” button to apply the DNS rule you just created.
Important note: Clear the DNS cache after creating the rules. That way, you can be sure that .zip domains are no longer accessible from your Windows computer.
From now on, all .zip domains are blocked on your Windows computer.
How to block .mov domains in Windows
To block the .mov domains in Windows, follow the below steps.
- Open Group Policy Editor by searching for “Edit Group Policy” in the Start menu.
- Navigate to “Computer Configuration” > “Windows Settings” > “Name Resolution Policy” in the Group Policy Editor.
- Select “Suffix” from the dropdown and type “.mov” (without quotes) in the blank field next to it.
- Click on the “Generic DNS Server” tab.
- Check the “Enable DNS settings” checkbox and click the “Add” button.
- Type “127.0.0.1” (without quotes) and click/tap the “Add” button.
- Click the “Create” and “Apply” buttons at the bottom.
- Close the Group Policy Editor.
- Clear the DNS cache.
- Reboot the computer.
Important note: Clear the DNS cache after creating the rules. That way, you can be sure that .zip domains are no longer accessible from your Windows computer.
From now on, all .mov domains are blocked on your Windows computer.
—
That is all. It is that simple to block .zip and .mov domains on Windows.
Related guides on blocking websites:
If you are stuck or need help, send an email, and I will try to help as much as possible.
