<div dir="ltr">Relevant follow-up coverage (which doesn&#39;t exactly make sense):<div><br></div><div><a href="http://www.reuters.com/article/2015/09/04/us-internet-security-domains-idUSKCN0R41U320150904">http://www.reuters.com/article/2015/09/04/us-internet-security-domains-idUSKCN0R41U320150904</a><br></div><div><br></div><div>Jordyn</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 16, 2015 at 1:37 PM, Ram Mohan <span dir="ltr">&lt;<a href="mailto:rmohan@afilias.info" target="_blank">rmohan@afilias.info</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="#0563C1" vlink="#954F72"><div><p class="MsoNormal"><span style="color:#1f497d">BlueCoat’s methodology is discussed in some security group mailing lists.</span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d">My understanding is that in the case of .zip, there were instances of &lt;file&gt;.pdf.zip which allowed for drive-bys, malware etc. regardless of the state of name registration.</span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d">-ram</span></p><div><p class="MsoNormal"><span style="color:#1f497d"> </span><span style="color:#1f497d"></span></p></div><p class="MsoNormal"><span style="color:#1f497d"> </span></p><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b>From:</b> Jennifer Gore Standiford [mailto:<a href="mailto:JStandiford@web.com" target="_blank">JStandiford@web.com</a>] <br><b>Sent:</b> Wednesday, September 16, 2015 4:32 PM<br><b>To:</b> Ram Mohan &lt;<a href="mailto:rmohan@afilias.info" target="_blank">rmohan@afilias.info</a>&gt;<br><b>Cc:</b> <a href="mailto:UA-discuss@icann.org" target="_blank">UA-discuss@icann.org</a><br><b>Subject:</b> RE: [UA-discuss] Blue Coat&#39;s Web&#39;s Shadiest Neighborhoods and implications on TLD acceptance</p></div></div><div><div class="h5"><p class="MsoNormal"> </p><p class="MsoNormal"><span style="color:#1f497d">Ram and UA Members, </span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d">Have we requested or received any of the underlying data that supports the stats outlined in the BlueCoat report? I wonder why the .zip extension was referenced as a ‘shady’  considering it hasn’t launched yet.  </span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d">Thanks,<br>Jennifer </span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><b><span style="color:#1f497d">Jennifer Gore Standiford</span></b></p><p class="MsoNormal"><span style="color:#404040">Policy Director</span></p><p class="MsoNormal"><span style="color:#404040">Web.com </span></p><p class="MsoNormal"><span style="color:#404040">12808 Gran Bay Parkway, West  |  Jacksonville, FL 32258</span></p><p class="MsoNormal"><span style="color:#404040">Office: <a href="tel:904.%20680-6919" value="+19046806919" target="_blank">904. 680-6919</a>| Cell: <a href="tel:904.%20401-4347" value="+19044014347" target="_blank">904. 401-4347</a></span></p><p class="MsoNormal"><span style="font-size:10.0pt;font-family:&quot;Arial&quot;,sans-serif;color:#1f497d"><img width="119" height="31" src="cid:image001.png@01D0F09D.EE4315D0" alt="cid:image003.png@01CFD6B5.902BADC0"></span><span style="color:#1f497d"></span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><p class="MsoNormal"><span style="color:#1f497d"> </span></p><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,sans-serif">From:</span></b><span style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,sans-serif"> <a href="mailto:ua-discuss-bounces@icann.org" target="_blank">ua-discuss-bounces@icann.org</a> [<a href="mailto:ua-discuss-bounces@icann.org" target="_blank">mailto:ua-discuss-bounces@icann.org</a>] <b>On Behalf Of </b>Ram Mohan<br><b>Sent:</b> Wednesday, September 16, 2015 1:43 PM<br><b>To:</b> <a href="mailto:UA-discuss@icann.org" target="_blank">UA-discuss@icann.org</a><br><b>Subject:</b> [UA-discuss] Blue Coat&#39;s Web&#39;s Shadiest Neighborhoods and implications on TLD acceptance</span></p></div></div><p class="MsoNormal"> </p><p class="MsoNormal">Folks,</p><p class="MsoNormal"><a href="https://www.bluecoat.com/company-overview" target="_blank">BlueCoat</a>, a security vendor used by most of the Fortune 500, released a report on the <a href="https://www.bluecoat.com/company/press-releases/blue-coat-reveals-webs-shadiest-neighborhoods" target="_blank">Web’s shadiest TLDs</a> on Sep 1, 2015. They recommend to their 15,000+ customers to block all listed TLDs (report attached). Most of these are new gTLDs.</p><p class="MsoNormal"> </p><p class="MsoNormal">There are implications for universal acceptance. This will result in some discussion at the upcoming UA Coordination Summit in Horsham tomorrow and Friday. The summit will have a conference bridge for anyone interesting in participating. Don Hollander will provide details.</p><p class="MsoNormal"> </p><p class="MsoNormal">-Ram</p><p class="MsoNormal">Chair, UASG</p><p class="MsoNormal"> </p><p class="MsoNormal">o: <a href="tel:%2B1.215.706.5700%20x103" value="+12157065700" target="_blank">+1.215.706.5700 x103</a>; m: <a href="tel:%2B1.215.431.0958" value="+12154310958" target="_blank">+1.215.431.0958</a>; f: <a href="tel:%2B1.215.706.5701" value="+12157065701" target="_blank">+1.215.706.5701</a></p><p class="MsoNormal">Skype: gliderpilot30</p><p class="MsoNormal"> </p><p class="MsoNormal">-----------------------------------------------------------------------------------------------</p><p class="MsoNormal"> </p><p style="margin-bottom:15.0pt;background:white"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">The Web’s Top 10 &quot;TLDs with Shady Sites*&quot;</span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">Rank  </span></strong><span><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232"> </span></span><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">Top-Level Domain Name    </span></strong><span><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232"> </span></span><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">Percentage of Shady Sites</span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232"> <strong><span style="font-family:&quot;Arial&quot;,sans-serif;font-weight:normal">#1        .zip                                          100.00%</span></strong></span></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#2        .review                                    100.00%         </span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#3        .country                                  99.97%</span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#4        .kim                                         99.74%           </span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#5        .cricket                                   99.57%           </span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#6        .science                                  99.35%           </span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#7        .work                                      98.20%</span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#8        .party                                      98.07%           </span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#9        .gq (Equatorial Guinea)        97.68%</span></strong></p><p style="margin-bottom:15.0pt;background:white;text-align:start;word-spacing:0px"><strong><span style="font-family:&quot;Arial&quot;,sans-serif;color:#323232;font-weight:normal">#10      .link                                         96.98%</span></strong></p><p class="MsoNormal"> </p><p class="MsoNormal"> </p></div></div></div></div>
</blockquote></div><br></div>