Topic 'Re: Domain registration process needs revamping' in forum '' - dslreports.com

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 14:15:43 EDT

MGD posted :

said by ThrowDemsOut:

... No one should be able to create a new domain without providing a street address and proof of identity - like you do when getting a passport or drivers license. Failure to do that should result in denial of a domain. .........

.
Part of the problem is that ICANN has allowed criminlas to infiltrate up the ladder, and become registrars themselves. ESTDOMAINS was allowed to operate for years as a crime magnet. That led to blatent bogus registrations by known criminals, such as these two credit card fraud laundering operations domains registered to "Richard Nixon", and "Sharon Stone" by a multi-year organized criminal enterprise:


»UNOPIC.NET 
.
ICANN Registrar:  ESTDOMAINS, INC 
.
Results returned from whois.estdomains.com:
.
Registration Service Provided By: RESELLERCLUB
Contact: +1.4152361970
.
Domain Name: UNOPIC.NET 
.
Registrant:
    Concrete Industries Ltd
    Richard Nixon        (pg@hightechmail.biz)
    12 avenue, 22-41
    Washington
    District of Columbia,109882
    US
    Tel. +001.9843323329
.
Creation Date: 30-Jul-2008  
Expiration Date: 30-Jul-2009
.
Domain servers in listed order:
    ns2.unopic.net
    ns1.unopic.net
.
.
.
»24GRAPH.NET 
Registration Service Provided By: ESTDOMAINS INC 
Contact: +1.3027224217 
Website: »www.estdomains.com 
.
Domain Name: 24GRAPH.NET 
.
Registrant: 
Direct Access Inc 
Sharon Stone (steve.parcell@ibm-london.com) 
London, Bukingham Palace, 92-12 
London 
London,37238 
GB 
Tel. +004.4339293384 
.
Creation Date: 30-Jul-2008 
Expiration Date: 30-Jul-2009 
.
Domain servers in listed order: 
ns2.24graph.net 
ns1.24graph.net

.
.
It will take considerable work in order to root out the criminal entities the have embedded themselves in both registration, hosting, and the entire system. It has been laisez faire for far too long.
.
McColo corp was a wolf in sheep's clothing, that was masquerading as a US corp. The only thing within the US was their servers. The people who set McColo up and operate/d it, are thousands of miles away in Russia. You can set up a US corp or LLC from anywhere in the world via online registration. There is no requirement that you be here.

Planting your servers here anonymously, then operating within US IP space, offers criminals a stragetic advantage for nefarious activities.

MGD

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 13:38:32 EDT

Corehhi posted :

said by Dogfather:

They'll get around it while causing many headaches and delays for legit users and ask any doorman at a bar or business owner if fake IDs and gov't docs are rare. As a business owner I can tell you they're certainly not.

Fake ID's everywhere. Around here $200 will get you a SS card and $1200 will get you a passport.

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 12:13:43 EDT

Dogfather posted : Start with China, the Pentagon would probably appreciate the help.

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 11:16:24 EDT

moonpuppy posted :

said by BosstonesOwn:

It would do nothing but help the proliferation of identity theft.

these folks are not stupid. We need to have the isps keep pulling the plugs. And it would be nice if we could get the isps hosting the pcs with bots to join in as well.

Maybe what we need to do is start pulling entire countries off line.

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 10:27:10 EDT

Dogfather posted : They'll get around it while causing many headaches and delays for legit users and ask any doorman at a bar or business owner if fake IDs and gov't docs are rare. As a business owner I can tell you they're certainly not.

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 10:24:13 EDT

ThrowDemsOut posted :

said by Dogfather:

That would be like gun control. It would only hamper legit users while malware goons will find an easy way around it.

I don't think there would be an easy way around it. They could find some ways, but it would raise the bar significantly. There are bogus drivers licenses and passports, but they are relatively very few now with the toughened identity provisions. And even if they got a bogus domain thru, it would become easier to track down those obtaining bogus credentials.
--
My BLOG .. .. Internet News .. .. My Web Page
Ask yourself one question: 'Do I feel lucky?' Well, do ya punk?

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 10:06:20 EDT

Dogfather posted : That would be like gun control. It would only hamper legit users while malware goons will find an easy way around it.

First and foremost is hold advertisers financially liable for how their products are advertised. At least for minimally legit business they'll think twice before hiring spammers. Second, make antivirus/antimalware software standard with operating systems. Hopefully much of this will be curtailed when Microsoft makes One-Care free, hopefully including it in Windows 7 as part of a default installation (while having the option to kill it for those who want something else). While products like AVG Free are certainly available, unless included as part of a default install, they're not as effective due to ignorant users.

Re: Domain registration process needs revamping

Fri, 28 Nov 2008 09:52:21 EDT

BosstonesOwn posted : It would do nothing but help the proliferation of identity theft.

these folks are not stupid. We need to have the isps keep pulling the plugs. And it would be nice if we could get the isps hosting the pcs with bots to join in as well.
--
"It's always funny until someone gets hurt......and then it's absolutely friggin' hysterical!"

Domain registration process needs revamping

Fri, 28 Nov 2008 09:36:42 EDT

ThrowDemsOut posted :

rootkit that makes Srizbi hum uses an algorithm that periodically generates new domain names -- allowing the malware to receive new instructions.

This just highlights the need to make the domain registration process more transparent and non-anonymous. No one should be able to create a new domain without providing a street address and proof of identity - like you do when getting a passport or drivers license. Failure to do that should result in denial of a domain.

Will that mean registering domains takes longer to accomplish? Yes it will, but so what. It would finally put a huge roadblock in the way of all criminal organizations; spammers; etc. And no - it wouldn't end it completely, but it would cut it down a tremendous amount.
--
My BLOG .. .. Internet News .. .. My Web Page
Ask yourself one question: 'Do I feel lucky?' Well, do ya punk?