[gnso-rds-pdp-wg] Proposed Agreement for Original Registration Date

[theo geurts]

I think it depends on the type of abuse.

We've seen cases where domain names registered years ago, zero activity 
for years and suddenly being used in some CnC, scattered over dozens of 
different resellers who were not affiliated.

 From time to time we run scripts to detect such registrations and 
compare them with the results of 
https://www.sidn.nl/a/internet-security/identifying-abusive-domain-registrations-in-real-time?language_id=2&langcheck=true 


Best,

Theo Geurts

On 11-10-2017 18:59, Sam Lanfranco wrote:
> Someone correct me if I am wrong here. It is my experience that much 
> of the abuse from domain names comes from relatively new 
> registrations. Public access to only the initial date of the current 
> registration is pretty adequate as part of investigative due diligence 
> in those cases.
>
> There are, of course, the flocks of service offers (search engine 
> offers, web design, etc.) that are prompted by new registrations, but 
> those are pesky at worse, and privacy/proxy services can ward those off.
>
> Retaining a history of the registration of a domain name, when there 
> is an issue of abuse, fraud, etc.,  seems to me both a bit more 
> complicated and messy, and of limited added value for due diligence.
> When it is useful, it likely exists with lots of collateral domain 
> name data that makes it of marginal additional value for whatever 
> purpose one might have.
>
> I lean toward creation date for current registration. Full stop!
>
> Sam Lanfranco
>
>
> On 10/11/2017 9:40 AM, Michele Neylon - Blacknight wrote:
>>
>> From conversations I’ve had with some of the registries it’s clear 
>> that they do keep **some** data
>>
>> So $registry can say “X domains were registered last month and those 
>> strings had never been used previously”
>>
>> But that’s minimal data
>>
>> --
>>
>> Mr Michele Neylon
>>
>> Blacknight Solutions
>>
>> Hosting, Colocation & Domains
>>
>> https://www.blacknight.com/
>>
>> http://blacknight.blog/
>>
>> Intl. +353 (0) 59  9183072
>>
>> Direct Dial: +353 (0)59 9183090
>>
>> Personal blog: https://michele.blog/
>>
>> Some thoughts: https://ceo.hosting/
>>
>> -------------------------------
>>
>> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business 
>> Park,Sleaty
>>
>> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>>
>>
>
> -- ------------------------------------------------ "It is a disgrace 
> to be rich and honoured in an unjust state" -Confucius 
> 邦有道，贫且贱焉，耻也。邦无道，富且贵焉，耻也 
> ------------------------------------------------ Dr Sam Lanfranco 
> (Prof Emeritus & Senior Scholar) Econ, York U., Toronto, Ontario, 
> CANADA - M3J 1P3 email: Lanfran at Yorku.ca Skype: slanfranco blog: 
> https://samlanfranco.blogspot.com Phone: +1 613-476-0429 cell: +1 
> 416-816-2852
>
>
> _______________________________________________
> gnso-rds-pdp-wg mailing list
> gnso-rds-pdp-wg at icann.org
> https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-rds-pdp-wg/attachments/20171011/bacddf21/attachment-0001.html>