DNS

UDRP Dilemma In Proving Bad-Faith Domain Registrations - Part I

The purpose of the Uniform Dispute Resolution Policy, known as the UDRP (hereafter the Policy), is to determine disputes relating to the registration or acquisition of domain names in bad faith. Under the Policy, the complainant must establish that (i) the disputed domain name is identical with or confusingly similar to a trademark or service mark in which the complainant has rights; (ii) the domain name registrant has no right or legitimate interest in respect of the domain name; and (iii) the domain name was registered and is being used in bad faith.

Whilst requirements (i) and (ii), at first glance, do not appear difficult to meet, it is not the same with requirement (iii). In fact, a serious problem arises for the complainant when a registrant has registered domain names in bulk, but has not used them i.e. they have not been resolved to any active website. more

ICANN and the Developing World: Examining The Outreach Program

Shravanti Reddy?s recent piece draws attention to an important issue that has nagged at ICANN ever since the ill-fated at large elections, when participants from the developed world greatly outnumbered those from the developing world. This imbalance was somewhat mitigated by the regional delineation of candidates, but it nonetheless raised two important questions that have yet to be settled:

First, how can ICANN (and, more generally, Internet governance) be more inclusive of developing countries? And second (less often asked, but perhaps even more important): Why should developing countries care about ICANN -- i.e., why does the answer to the first question even matter? This article discusses some recent developments related to the first question; a later article will consider some specific reasons why ICANN matters to the developing world. more

Rolling Out The New .Pro Domain

Professionals can extend their online identities and direct traffic using .pro - the last of seven new top-level domain names approved by the International Corporation for Assigned Names and Numbers (ICANN). Individuals and entities in the accounting, legal and medical professions became eligible to apply to defensively register as of April 23, 2003. In July, .pro domain names will go live. more

98% Of Internet’s Main Root Server Queries Are Unnecccary: Should You Be Concerned?

A recent study by researchers at the Cooperative Association for Internet Data Analysis (CAIDA) at the San Diego Super Computer Center (SDSC) revealed that a staggering 98% of the global Internet queries to one of the main root servers, at the heart of the Internet, were unnecessary. This analysis was conducted on data collected October 4, 2002 from the 'F' root server located in Palo Alto, California.

The findings of the study were originally presented to the North American Network Operators' Group (NANOG) on October 2002 and later discussed with Richard A. Clarke, chairman of the President's Critical Infrastructure Protection Board and Special Advisor to the U.S. President for Cyber Space Security. more

Domain Name Typosquatter Still Generating Millions

Ever visit cartoonneetwork.com? Adaptac.com? Check the URLs carefully, for these aren't the "real" sites operated by the Cartoon Network cable channel or by Adaptec, manufacturer of PC storage devices. Instead, these domains -- and some 5,000+ others -- were registered by a Mr. John Zuccarini. Read on to learn what he is up to and how he has gotten away with it. more

Privacy Matters: Is It Time To Abolish The WHOIS Database?

Recently, I entered my domain name in a "WHOIS" database query to test the results of the database by using WHOIS on a number of domain name registrar websites. WHOIS is a database service that allows Internet users to look up a number of matters associated with domain names, including the full name of the owner of a domain name, the name of the domain name hosting service, the Internet Protocol or I.P. number(s) corresponding to the domain name, as well as personally identifying information on those who have registered domain names. I was astonished to find... more

What’s My Name Got to Do With It?

For about 3 years I had been studying graphic design and finally after much searching decided to use bmw-design.com for my domain name. I chose bmw for my initials Bernadette Maria Walker. I searched for availability on Network Solutions and was happy to see that it had not been taken, so I registered my new domain name. This all seemed very innocent to me and I even designed my logo around this name. Then 5 days later I got this letter via FedEx from BMW Motor Company in Germany... more

The Case for Longitudinal DNSSEC Data

Repeated DNSSEC failures show the limits of snapshot diagnostics. A longitudinal record of signed delegations could reveal persistent misconfigurations, rollover problems and correlated failures, helping operators identify recurring patterns and their likely sources. more

ICANN Commenters Urge Limits on Proposed Domain Abuse Checks

ICANN commenters broadly support proposed registrar checks of domains associated with known DNS abuse but urge evidentiary safeguards to prevent weak associations from triggering action against legitimate domains. more

ICANN Comment Period Closes on Linking gTLDs With Alternative Naming Systems

ICANN is closing consultation on technical rules for linking gTLDs with matching alternative naming systems, as commenters debate controller requirements, security safeguards, policy boundaries and protections for existing registrations. more

A Domain Is Registered. But Is It Really Unavailable?

RFC 10023 standardizes a DNS TXT record that lets domain holders signal a registered name is for sale, giving registrars, marketplaces, brokers and search tools a machine-readable way to distinguish registration from purchase availability. more

How CZDS Zone Data Helps Detect Domain Abuse

Daily CZDS zone data can help brand owners and investigators detect suspicious domain registrations earlier, trace related infrastructure, monitor expired names, and shift enforcement from reactive disputes toward faster, evidence-based intervention. more

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks. more

How Domain Abuse, Social Media, and AI Fuel Brand Attacks

CISOs expect social media impersonation to become their leading cybersecurity threat as attackers increasingly combine AI-enabled deception, executive impersonation, and domain abuse across multiple channels to conduct fraud and steal sensitive information. more

The Reporting Gap: What Happens Between a DNS Abuse Complaint and a Takedown

DNS abuse enforcement can stop abusive domains and drive systemic registrar reforms, but reporting barriers, inconsistent response times, and poorly documented complaints leave many phishing sites active before actionable cases ever reach enforcement. more