Rename 'aquila.it' to 'laquila.it'#2747
Open
raffysommy wants to merge 1 commit intopublicsuffix:mainfrom
Open
Conversation
Contributor
|
Good catch. Although it appears that both LAquila.it and Aquila.it exist in the most recent version of the registry’s publication These do not appear to be controlled by NIC.IT and are highly likely in the hands of someone other than the registry. The ones controlled by the registry usually resolves to something look like this: Additionally, there are three more entries in the .it section which show similar indicator (privately-controlled nameservers) in WHOIS, suggesting they might also not be controlled by the registry. aquila.itSpam websites: 
trentinosudtirol.itvaldaosta.italtoadige.it |
Contributor
|
I sent an email to the NIC.IT contact (cc'd @simon-friedberger and @dnsguru ) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR requests the removal of aquila.it from the Public Suffix List, as it does not represent a valid public suffix for administrative subdomains in Italy and replace it with laquila.it.
https://www.comune.laquila.it/
The domain aquila.it is not the administrative suffix under which municipal or provincial subdomains are delegated. Its inclusion in the PSL therefore misrepresents the real domain hierarchy.
A WHOIS lookup further confirms the mismatch between administrative use and domain ownership:
$ whois laquila.it
Domain: laquila.it
Status: UNASSIGNABLE
This indicates that laquila.it is reserved and not registrable, consistent with its role as an institutional domain.
$ whois aquila.it
Domain: aquila.it
Status: ok
Created: 2012-11-30
Registrant:
Organization: Puglia.com Srls
Admin / Technical Contact:
Domain Profit Srl
Registrar:
Algorithmedia S.r.l.
This shows that aquila.it is a privately registered domain, owned and operated by commercial entities, and not delegated by any public authority.
While investigating certificate issuance patterns, we observed thousands of TLS certificates issued for arbitrary subdomains of aquila.it, many of which resemble phishing or impersonation attempts (for example comune.aquila.it):
https://crt.sh/?q=comune.aquila.it
At the time of writing, aquila.it resolves using a wildcard configuration, responding to essentially any subdomain with the same IP address.