<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xml:base="http://www.thestandard.com" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
 <title></title>
 <link>http://www.thestandard.com/node/108339/comments</link>
 <description>comments feed.</description>
 <language>en</language>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
<item>
 <title>Will ICANN take action against &quot;worst&quot; Chinese registrar?</title>
 <link>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar</link>
 <description>&lt;!--paging_filter--&gt;&lt;p&gt;&lt;!--paging_filter--&gt;
&lt;p&gt;&lt;!--paging_filter--&gt; &lt;/p&gt;
&lt;p&gt;Last month, the Internet Corporation for Assigned Names and Numbers (&lt;a href=&quot;http://www.icann.org/&quot;&gt;ICANN&lt;/a&gt;) was the target of a public complaint that it wasn&#039;t doing enough to fight spam and bogus websites. The complaint was made by anti-spam service &lt;a href=&quot;http://www.knujon.com/&quot;&gt;Knujon&lt;/a&gt; (see disclosure at the bottom of this post), which suggested that most spam-related websites were funneled through &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/2008/05/wall_of_shame_1.html&quot;&gt;20 ICANN-approved registrars based in the United States and overseas&lt;/a&gt;. The company said that ICANN, despite being repeatedly notified that the registrars&#039; WHOIS records were filled with false address and contact information for millions of spam sites, &lt;a href=&quot;http://blog.washingtonpost.com/securityfix/2008/05/most_spam_sites_tied_to_a_hand_1.html&quot;&gt;did not follow its own mandate to force WHOIS compliance&lt;/a&gt; among the worst offenders. &lt;/p&gt;
&lt;p&gt;Now, Knujon founder Garth Bruen has formally requested ICANN to shut down the Beijing-based registrar at the top of the list, &lt;a href=&quot;http://www.xinnet.com/&quot;&gt;Xinnet Bei Gong Da Software&lt;/a&gt;. According to a &lt;a href=&quot;http://weblog.infoworld.com/stratdev/archives/XinNet_failuretocomply.pdf&quot;&gt;new document&lt;/a&gt; that Bruen sent to ICANN this week, none of the WHOIS records in a sample of 11,000 alleged spam sites registered through Xinnet and reported by Knujon to ICANN&#039;s Whois Data Problem Report System were corrected in a six-month period ending in May 2008. In many cases, says the document, Xinnet does not have &amp;quot;any Whois record data for review while the sites are still active.&amp;quot; &lt;/p&gt;
&lt;p&gt;&lt;img src=&quot;/sites/thestandard.com/files/u158/062008_orderheres-com.jpg&quot; alt=&quot;spam site registered through xinnet&quot; align=&quot;left&quot; height=&quot;125&quot; width=&quot;300&quot; /&gt;I verified that the samples in the new document that Bruen used to make his point -- fallspot.com, finest-favorite.com, kheenerso.com, mountainfavor.com, rsavefu.com, tioakjiopa.com, exellentquality.com, polaebrue.com, orderheres.com (see inset), keesnerrt.com, killsioe.com, hiaoteyy.com, vijeast.com, and tinescoz.com -- were indeed spam storefronts for replica watches and online pill merchants. Two other sites, sugarfrom.com and blackcame.com, were down when I tried to access them on Friday. All were registered through Xinnet, although in more than half the cases, there was no WHOIS contact information listed. A few others had obvious fake names and contact information, such as Fallspot&#039;s &amp;quot;David Fox,&amp;quot; whose listed Chinese phone number ended in seven zeroes and had an email address of &amp;quot;test@test.com.&amp;quot; &lt;/p&gt;
&lt;p&gt;Among the handful of sites that did include real-looking contact information, most email addresses and phone numbers turned out to be bogus. The exception was the identical hotmail email address for tinescoz.com and hiaoteyy.com -- a Chinese-language email sent to the address has yet to generate a bounce-back or response. For the working phone numbers at polaebrue.com (shared with orderheres.com) and tinescoz.com, there was a dial tone but no answer. However, the calls went through on Friday evening in China, and it&#039;s conceivable no one was available to answer. I was unable to verify any of the legitimate-looking physical Chinese street addresses listed in the WHOIS records for kheenerso.com, mountainfavor.com, polaebrue.com, orderheres.com, hiaoteyy.com, or tinescoz.com.&lt;/p&gt;
&lt;p&gt;Bruen claims that Xinnet is still allowing spam sites to be registered -- &amp;quot;typically about 100 per day,&amp;quot; says the Knujon document. His recommendation to ICANN is severe:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Given the listed issues we are recommending that Xin Net be issued a breach notice and that until these issues are resolved they be prevented from registering new domains. The failure to comply with requirements to have accurate records, the blatant and continued posting of illicit traffic sites, and possible blocking of access to Whois records point to a complete failure at Xin Net to accept its responsibility as a registrar.&lt;/i&gt;&lt;/p&gt;
&lt;p&gt;&lt;i&gt;We believe that this situation poses an immediate health risk to Internet consumers and since Xin Net will not take proactive steps to prevent repeat offenders from registering fake pharmacy sites, stopping all new registrations is the only way to break this cycle of illicit site registration and faux compliance.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;When asked for comment, the ICANN spokesperson issued the following statement:&lt;/p&gt;
&lt;p&gt;&lt;!--pagebreak--&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;ICANN has received the document from Knujon, and Xin Net, along with other registrars that have a high percentage of unchanged Whois inaccuracy reports filed through the WDPRS, are being investigated by ICANN. Until the investigation is concluded and determinations are made, it would be inappropriate for ICANN to comment on the details of the matter.&amp;quot;&lt;/i&gt;&lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;However, Bruen says that ICANN responded to the latest Knujon document by referencing Section 3.7.8 of the &lt;a href=&quot;http://www.icann.org/registrars/ra-agreement-17may01.htm&quot;&gt;Registrar Accreditation Agreement (RAA)&lt;/a&gt;:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;Registrar shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Bruen now interprets this as meaning bogus registrars &amp;quot;don&#039;t have to actually -correct- phony information, they just have to show that they looked into it.&amp;quot; If this is true, it would potentially make it difficult for ICANN to sever its relationship with Xinnet under section 5.3 of the RAA:&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;&lt;i&gt;&amp;quot;5.3.4 Registrar fails to cure any breach of this Agreement (other than a failure to comply with a policy adopted by ICANN during the term of this Agreement as to which Registrar is seeking, or still has time to seek, review under Subsection 4.3.2 of whether a consensus is present) within fifteen working days after ICANN gives Registrar notice of the breach.&amp;quot;&lt;/i&gt; &lt;/p&gt;
&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;In other words, as long as the regulatory requirements concerning inaccurate contact information is  uncertain, and Xinnet continues to rake in domain registration fees from spammers, the bogus sites will probably continue to spawn under the Chinese registrar -- and contribute to email clutter -- for the foreseeable future.&lt;/p&gt;
&lt;p&gt;&lt;i&gt;(Disclosure: &lt;a href=&quot;http://ilamont.blogspot.com/2007/11/knujons-narrow-ai-approach-to-taking.html&quot;&gt;I am friends with Bruen&lt;/a&gt;)&lt;/i&gt; &lt;/p&gt;
&lt;p&gt;&lt;b&gt;More news, commentary, and predictions from &lt;i&gt;The Industry Standard&lt;/i&gt;:&lt;/b&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Analysis: &lt;b&gt;&lt;a href=&quot;/news/2008/02/25/chavez-china-and-coming-startup-squeeze&quot;&gt;Chavez, China, and the coming startup squeeze&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/29/where-are-they-now&quot;&gt;Where are they now? &lt;i&gt;The Industry Standard&lt;/i&gt; tracks down 10 dot-coms from the Web bubble of the late 1990s&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/05/14/industry-standards-top-25-b-z-list-blogs&quot;&gt;The Industry Standard&#039;s Top 25 B-to-Z List Blogs&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;li&gt;Special Feature: &lt;b&gt;&lt;a href=&quot;/news/2008/03/27/opinion-10-net-services-will-succeed-and-10-will-probably-fail&quot;&gt;10 &#039;Net services that will succeed (and 10 that will probably fail)&lt;/a&gt;&lt;/b&gt;&lt;/li&gt;
&lt;/ul&gt;
</description>
 <comments>http://www.thestandard.com/Will-ICANN-take-action-against-worst-Chinese-registrar#comments</comments>
 <category domain="http://www.thestandard.com/taxonomy/term/1812">china</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5823">co:knujon</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2789">email</category>
 <category domain="http://www.thestandard.com/taxonomy/term/3171">ICANN</category>
 <category domain="http://www.thestandard.com/taxonomy/term/1967">Spam</category>
 <category domain="http://www.thestandard.com/taxonomy/term/5668">Standards &amp;amp; Legal</category>
 <category domain="http://www.thestandard.com/taxonomy/term/2514">The Industry Standard</category>
 <pubDate>Fri, 20 Jun 2008 11:32:23 -0700</pubDate>
 <dc:creator>Ian Lamont</dc:creator>
 <guid isPermaLink="false">108339 at http://www.thestandard.com</guid>
</item>
</channel>
</rss>
