Comment by bmo-at

Literally just received some .top spam last night, nothing new there but curiously it was addressed to the mailing list for all students in my department. Very sparse content too: Just a t.co link shortener address, which resolved to a .top domain (interestingly with an invalid https cert instead of going just with http). It was sent from an obviously compromised gmail address. Fellow students in other mailing lists got other shorteners with other domains, all resolving to the same russian ip address. Thats as far as I investigated.