<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Dots News &#187; ICANN</title>
	<atom:link href="http://dotsnews.com/domain-name-news/category/icann/feed" rel="self" type="application/rss+xml" />
	<link>http://dotsnews.com</link>
	<description>Domain Name News</description>
	<lastBuildDate>Sat, 20 Feb 2010 00:16:56 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>ESTDomains Buys Time</title>
		<link>http://dotsnews.com/domain-name-news/117</link>
		<comments>http://dotsnews.com/domain-name-news/117#comments</comments>
		<pubDate>Thu, 30 Oct 2008 17:25:32 +0000</pubDate>
		<dc:creator>Andrew Naylor</dc:creator>
				<category><![CDATA[ICANN]]></category>
		<category><![CDATA[Legal]]></category>
		<category><![CDATA[Registrars]]></category>
		<category><![CDATA[crime]]></category>
		<category><![CDATA[registrar de-accreditation]]></category>
		<category><![CDATA[ESTDomains]]></category>

		<guid isPermaLink="false">http://dotsnews.com/?p=117</guid>
		<description><![CDATA[
ICANN has delayed ESTDomains de-accreditation because the troubled registrar submitted documents to ICANN indicating that CEO Vladimir Tsastsin was removed as CEO on June 25. In a letter yesterday ESTDomains raised additional reasons to delay their de-accreditation; they tried to remove Vladimir before his conviction, ICANN documents do not state that registrars must notify ICANN [...]]]></description>
			<content:encoded><![CDATA[<p><img class="aligncenter size-full wp-image-118" title="clock" src="http://dotsnews.com/wp-content/uploads/2008/10/clock.jpg" alt="" width="123" height="123" /></p>
<p>ICANN has <a href="http://www.icann.org/en/announcements/announcement-2-29oct08-en.htm" target="_blank">delayed</a> <a href="http://dotsnews.com/domain-name-news/93" target="_self">ESTDomains de-accreditation</a> because the troubled registrar <a href="http://www.icann.org/correspondence/poltev-to-burnette-29oct08-en.pdf" target="_blank">submitted documents</a> to ICANN indicating that CEO Vladimir Tsastsin was removed as CEO on June 25. <span id="more-117"></span>In a letter yesterday ESTDomains raised additional reasons to delay their de-accreditation; they tried to remove Vladimir before his conviction, ICANN documents do not state that registrars must notify ICANN of executive management changes, and his conviction has been appealed to the Estonian supreme court so his conviction has been stayed according to Estonian law.</p>
<p>It&#8217;s hard to say which direction the de-accreditation will now take. The contact information on the ICANN website indicates the new CEO&#8217;s name and contact information, but what I am most curious about is what legal duties they have to the State of Delaware regarding changes to a directorship. I read through some of the <a href="http://delcode.delaware.gov/title8/c001/index.shtml#P-1_0" target="_blank">Delaware corporation law</a> and the <a href="http://www.icann.org/en/registrars/ra-agreement-17may01.htm#3" target="_blank">ICANN Accreditation Agreement</a> but was unable to find any provisions that require official notification of an executive management change.</p>
]]></content:encoded>
			<wfw:commentRss>http://dotsnews.com/domain-name-news/117/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Is OnlineNIC The Next Registrar to Fail?</title>
		<link>http://dotsnews.com/domain-name-news/75</link>
		<comments>http://dotsnews.com/domain-name-news/75#comments</comments>
		<pubDate>Thu, 30 Oct 2008 01:29:18 +0000</pubDate>
		<dc:creator>Andrew Naylor</dc:creator>
				<category><![CDATA[Registrars]]></category>
		<category><![CDATA[registrar de-accreditation]]></category>
		<category><![CDATA[China Chanel]]></category>
		<category><![CDATA[OnlineNIC]]></category>
		<category><![CDATA[phishing]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://dotsnews.com/?p=75</guid>
		<description><![CDATA[
With the recent demise of ESTDomains due to alleged sketchy behavior, where are all the spammers going? They seem to be headed for OnlineNIC because they are the friendliest registrar to phishers and spam.I have received more than ten registrar phishing e-mails in two days and it appears to be the same group perpetrating the [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><img class="aligncenter size-full wp-image-85" style="border: 1px solid black;" title="registrar_failure" src="http://dotsnews.com/wp-content/uploads/2008/10/registrar_failure.jpg" alt="" width="116" height="106" /></p>
<p>With the recent <a href="http://dotsnews.com/domain-name-news/93" target="_self">demise of ESTDomains</a> due to alleged sketchy behavior, where are all the spammers going? They seem to be headed for OnlineNIC because they are the friendliest registrar to phishers and spam.<span id="more-75"></span>I have received more than ten registrar phishing e-mails in two days and it appears to be the same group perpetrating the scam using OnlineNIC (or OnlineNIC reseller China Channel) as their registrar. Here is the first e-mail:</p>
<table border="0" cellpadding="5" bgcolor="#cccccc">
<tbody>
<tr>
<td>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Dear user,</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">On Tue, 28 Oct 2008 22:08:29 +0100 we received a third party  complaint of invalid domain contact information in the Whois database for this  domain Whenever we receive a complaint, we are required by ICANN regulations to  initiate an investigation as to whether the contact data displaying in the Whois  database is valid data or not. If we find that there is invalid or missing data,  we contact both the registrant and the account holder and inform them to update  the information.</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">The contact information for the domain which displayed  in the Whois database was indeed invalid. On Tue, 28 Oct 2008 22:08:29 +0100 we  sent a notice to you at the admin/tech contact email address and the account  email address informing you of invalid data in breach of the domain registration  agreement and advising you to update the information or risk cancellation of the  domain. The contact information was not updated within the specified period of  time and we canceled the domain. The domain has subsequently been purchased by  another party. You will need to contact them for any further inquiries regarding  the domain.</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">PLEASE VERIFY YOUR CONTACT INFORMATION &#8211; <a title="http://www.enom.com.com62.biz" href="http://www.enom.com.com62.biz/">http://www.enom.com</a></span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">If you find  any invalid contact information for this domain, please respond to this email  with evidence of the specific contact information you have found to be invalid  on the Whois record for the domain name. Examples would be a bounced email or  returned postal mail. If you have a bounced email, please attach or forward with  your reply or in the case of returned postal mail, scan the returned letter and  attach to your email reply or please send it to:</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Attn: Domain Services  14455 N Hayden Rd Suite 219 Scottsdale, AZ 85260</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">LINK TO CHANGE  INFORMATION &#8211; <a title="http://www.enom.com.com62.biz" href="http://www.enom.com.com62.biz/">http://www.enom.com</a></span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Thank  you,<br />
Domain Services</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">[IncidentID:####]</span></p>
</td>
</tr>
</tbody>
</table>
<p>Then I received this e-mail today from someone else at my company:</p>
<table border="0" cellpadding="5" bgcolor="#cccccc">
<tbody>
<tr>
<td>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Dear Network Solutions  Customer,</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">We recently notified you that the registration period for your  Network Solutions domain name had expired. As a benefit of having previously  registered a domain name(s) with Network Solutions, you are eligible to receive  a percentage of the net proceeds that were generated from the renewal and  transfer of the domain name you chose not to renew. Since you have chosen not to  renew the domain name listed below during the applicable grace period, we were  successful in securing a backorder for this domain name on your behalf and it  has been transferred to another party in accordance with the Service Agreement.</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Renew your domain now &#8211; <a title="http://www.networksolutions.com.com55.asia/" href="http://www.networksolutions.com.com55.asia/">http://www.networksolutions.com</a></span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">You must click on the following link, enter your domain name, and  confirm your contact information in order to claim these funds. If your contact  information is not correct, you must enter Account Manager and make the  appropriate changes prior to clicking &#8220;submit&#8221; from the confirmation screen. If  you do not do this, you will be confirming inaccurate information and will not  receive any payment. Checks will only be made payable and mailed to the Account  Holder of record.</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Sincerely,</span></p>
<p class="MsoNormal"><span style="font-size: 9.5pt; font-family: 'Courier New';">Network Solutions® Customer Support</span></p>
</td>
</tr>
</tbody>
</table>
<p>It definitely raises questions to see their numbers of new registrations shooting past Godaddy (courtesy of webhosting.info):</p>
<p><a href="http://dotsnews.com/wp-content/uploads/2008/10/fastest-growing-registrars.jpg"><img class="aligncenter size-full wp-image-86" title="fastest-growing-registrars" src="http://dotsnews.com/wp-content/uploads/2008/10/fastest-growing-registrars.jpg" alt="" width="500" height="230" /></a></p>
<p>The whois records for both phishing domains point to Yuriy Shestakov with the same contact information. The DNS servers then server up a variety of possible web servers which appear to be located on compromised computers around the world (The University of Queensland, and West Central Wireless, but mostly at Comcast). While the eNom phishing sites were shut off, the NetworkSolutions phishing sites are still working. How many people will lose their domains because of this scam?</p>
<p>Even though I find Register.com&#8217;s archaic requirements to speak to a representative during abbreviated operating hours to be annoying and a big inconvenience, it should be no surprise that this style of phishing attempts is not targetting that registrar.</p>
]]></content:encoded>
			<wfw:commentRss>http://dotsnews.com/domain-name-news/75/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>ESTDomains Loses ICANN Accreditation</title>
		<link>http://dotsnews.com/domain-name-news/93</link>
		<comments>http://dotsnews.com/domain-name-news/93#comments</comments>
		<pubDate>Thu, 30 Oct 2008 01:25:49 +0000</pubDate>
		<dc:creator>Andrew Naylor</dc:creator>
				<category><![CDATA[Registrars]]></category>
		<category><![CDATA[crime]]></category>
		<category><![CDATA[registrar de-accreditation]]></category>
		<category><![CDATA[ESTDomains]]></category>
		<category><![CDATA[ICANN]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://dotsnews.com/?p=93</guid>
		<description><![CDATA[
ESTDomains has lost its accreditation after CEO Vladimir Tsastsin was convicted of various cyber-crime charges, according to the Washington Post. The funniest quote was from Chris Barton of McAfee, &#8220;I don&#8217;t think anyone in their right mind is going to want to take on these domain names&#8221;.
That certainly raises the question, if nobody wants the [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://dotsnews.com/wp-content/uploads/2008/10/estdomains-criminals.jpg"><img class="aligncenter size-full wp-image-94" title="estdomains-criminals" src="http://dotsnews.com/wp-content/uploads/2008/10/estdomains-criminals.jpg" alt="" width="125" height="97" /></a></p>
<p>ESTDomains has lost its accreditation after CEO Vladimir Tsastsin was convicted of various cyber-crime charges, according to the Washington Post. <span id="more-93"></span>The funniest quote was from Chris Barton of McAfee, &#8220;I don&#8217;t think anyone in their right mind is going to want to take on these domain names&#8221;.</p>
<p>That certainly raises the question, if nobody wants the 281,000 domains then what will happen to them?</p>
]]></content:encoded>
			<wfw:commentRss>http://dotsnews.com/domain-name-news/93/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
