<div dir="ltr">As Susan mentions, all they need is a few days. At least the registrar actually conducted validation checks, many don't. </div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Aug 1, 2016 at 10:04 AM, Susan Kawaguchi <span dir="ltr"><<a href="mailto:susank@fb.com" target="_blank">susank@fb.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>
<div>The registrar sent an email to <a href="mailto:Domain@fb.com" target="_blank">Domain@fb.com</a> which I received but I immediately responded it was not a valid registration and asked for transfer. No word yet. </div>
<div><br>
</div>
<div>All phishers need is a few days to use the domain name. </div><span class="">
<div>
<div>
<div>Susan Kawaguchi</div>
<div>Domain Name Manager </div>
<div>Facebook Legal Dept. </div>
</div>
<div><br>
</div>
</div>
</span></div>
<div><br>
</div>
<span>
<div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;BORDER-BOTTOM:medium none;BORDER-LEFT:medium none;PADDING-BOTTOM:0in;PADDING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df 1pt solid;BORDER-RIGHT:medium none;PADDING-TOP:3pt">
<span style="font-weight:bold">From: </span>"<a href="mailto:benny@nordreg.se" target="_blank">benny@nordreg.se</a>" <<a href="mailto:benny@nordreg.se" target="_blank">benny@nordreg.se</a>><br>
<span style="font-weight:bold">Date: </span>Monday, August 1, 2016 at 10:01 AM<br>
<span style="font-weight:bold">To: </span>Susan kawaguchi <<a href="mailto:susank@fb.com" target="_blank">susank@fb.com</a>>, "<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a>" <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [gnso-rds-pdp-wg] Use Case - False registration data to appear as Facebook owned domain name<br>
</div><div><div class="h5">
<div><br>
</div>
<div>
<div bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div>
<p class="MsoNormal"><span lang="NO-BOK" style="font-size:11.0pt;font-family:Calibri">Curious, how did it get validated?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="NO-BOK" style="font-size:11.0pt;font-family:Calibri"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="NO-BOK" style="font-size:11.0pt;font-family:Calibri"><u></u> <u></u></span></p>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black">--<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black">Med vänliga hälsningar / Kind Regards / Med vennlig hilsen<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"><br>
Benny Samuelsen<br>
Registry Manager - Domainexpert<br>
<br>
Nordreg AB - ICANN accredited registrar<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black">IANA-ID: 638<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black">Phone: <a href="tel:%2B46.42197080" value="+4642197080" target="_blank">+46.42197080</a><br>
Direct: <a href="tel:%2B47.32260201" value="+4732260201" target="_blank">+47.32260201</a><br>
Mobile: <a href="tel:%2B47.40410200" value="+4740410200" target="_blank">+47.40410200</a></span><span lang="NO-BOK" style="font-size:11.0pt;font-family:Calibri"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="NO-BOK" style="font-size:11.0pt;font-family:Calibri"><u></u> <u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black"><<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank">gnso-rds-pdp-wg-bounces@icann.org</a>> on behalf of Susan Kawaguchi <<a href="mailto:susank@fb.com" target="_blank">susank@fb.com</a>><br>
<b>Date: </b>Monday 1 August 2016 at 17:17<br>
<b>To: </b>"<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a>" <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a>><br>
<b>Subject: </b>[gnso-rds-pdp-wg] Use Case - False registration data to appear as Facebook owned domain name<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">Hello All, <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">Attached is a use case we run into frequently, bad actors will use valid Facebook information in the registration data to make the registration to appear authentic. <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">Best regards, <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">Susan Kawaguchi<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">Domain Name Manager <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">Facebook Legal Dept. <u></u><u></u></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black"><u></u> <u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></span>
</div>
<br>_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
<a href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">Adrian Cheek<br>Director of Global Partnerships<br><img src="https://docs.google.com/uc?export=download&id=0B1czF3rFjMNlUlBBQ2RCbmI5bVE&revid=0B1czF3rFjMNlb2gzSFZiOHNiQmRuOC8yMHlMQU94WGxVcWM4PQ" width="96" height="36"><br></div></div></div></div></div></div>
</div>