The Macrosite for News, Analysis and Opinion about the Future of the Internet
Jart Armin

ICANN Dumps EstDomains for Fraud, Abuse

Written by Jart Armin
10/29/2008 11 comments
DISCUSS   Digg   Del.icio.us   Reddit   Email This   TWEET THIS

ICANN today issued a formal and, we assume, irrevocable notice of termination to EstDomains President Vladimir Tsastsin:

    Be advised that the Internet Corporation for Assigned Names and Numbers (ICANN) Registrar Accreditation Agreement (RAA) for EstDomains, Inc. (Customer No. 919, IANA No. 832) is terminated. Consistent with subsection 5.3.3 of the RAA, this termination is based on your status as President of EstDomains and your credit card fraud, money laundering and document forgery conviction. This termination shall be effective within fifteen calendar days from the date of this letter, on 12 November 2008.

EstDomains has been suspected by many as a source of domain registration malfeasance for use by cyber-criminals and spammers for years. As recently described within a HostExploit.com report, Sunbelt Software and Spamhaus have called out EstDomains. Brian Krebs followed up in The Washington Post.

EstDomains has been trying to fight back, issuing press releases with headlines like "EstDomains, Inc Takes Next Step in Combating Spam and Malware," stating, "Once again EstDomains, Inc would like to address the interactive community and ask for co-operation to make the Internet clear and safe." Unfortunately this coincided with another Krebs post relating to Tsastsin, "A Sordid History and a Storied CEO."

As a result of ICANN's newfound boldness, approximately 281,000 domain names under EstDomains' management will be transferred to an ICANN-Accredited Registrar in accordance with ICANN's "De-accredited Registrar Transition Procedure."

In its statement, ICANN noted "It is ICANN's goal to protect registrants' from unnecessary harm and we look forward to amicably resolving any domain name transition issues that may arise from this termination." ICANN has also released other Notices of Breach and Termination to an ICANN-accredited registrar, Beijing Innovative Linkage Technology Ltd., doing business as DNS.com.cn and Joker.com, on Sept. 30, 2008. These are available here.

These registrars failed to comply with Section 3.7.8 of the RAA, which requires registrars to take "reasonable steps to investigate" Whois.Net inaccuracy claims. Section 3.7.8 requires registrars, "...upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, [to] take reasonable steps to investigate the claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy."

Hopefully, this demonstrates a new aggressiveness from ICANN where enforcement is concerned and a willingness to listen to a community besieged by spammers and worse. Perhaps ICANN could also be persuaded to allow the Internet security community to advise which of these domains is abusive before any transfer is made to a new registrar.

— Jart Armin, Editor of RBNexploit.com, a watch blog on the infamous RBN (Russian Business Network), and HostExploit.com

This blog is part of Internet Evolution's Security Clan, which looks at the present and future threats to Internet security and the methods being used to defend and protect users and organizations. Register here to join the Security Clan, and you might become eligible to win one of our limited edition T-shirts.

DISCUSS   Digg   Del.icio.us   Reddit   Email This
Current display:       newest comments first       display in chronological order
Page 1 of 2   Next >
Terry Sweeney
IQ Crew
Thursday November 13, 2008 12:46:37 PM
no ratings

More good news in the fight against spam and network abuse, Jart... my hope here is that this incident stiffens the resolve of ICANN, NANOG, and individual ISPs to step in here more aggressively, if only to make it more inconvenient for these guys to move down the block and set up shop in a new storefront.

It's still unclear to me how much enforcement authority ICANN really has. It appears the violations have to be really egregious before they investigate or act. A recent poll we conducted on this site about who should oversee this sort of thing was pretty inconclusive, with most respondents voting in favor of creating a new entity to handle enforcement and TOS violations. 

Jart Armin
Thinkernetter
Thursday November 13, 2008 6:23:01 AM
no ratings
Just to update ICANN have today confirmed "Termination of Registrar EstDomains to Go Ahead" (ICANN announcement here), a copy of the notice of termination here (PDF).

For ICANN watchers there were a few days of trepidation as they had announced a stay of execution, while an appeal was considered. So another positive and secure move for the Internet, a sign of the times perhaps. A small step for ICANN, a big step for the community?
Lance Alberto
IQ Crew
Thursday October 30, 2008 8:39:06 PM
no ratings
Yes. Just as every person is supposed to have the right to use the Internet, government also have their own bases for making restrictions in accordance with their internal policies. What we just hope for any Cyber superbody is to ensure security in the Internet especially for those who do not have the technical knowhow of defending themselves against cybercriminals and to ensure users the "freest" and safest use and enjoyment of the cyberspace.
Mary Jander
Thinkernetter
Thursday October 30, 2008 10:06:04 AM

Any global Web oversight body could hardly be expected to direct the actions of individual member states who choose to retrict access to the Internet. That's a matter for the individual countries to decide.

What could and should be under jurisdiction of such a body is a safe starting point, free of criminal activity and spam that robs networks not only of security but also of bandwidth and reliability.

 

Lance Alberto
IQ Crew
Wednesday October 29, 2008 11:37:19 PM
Well, what I only wish for a UN-like superbody is to help ensure that the Internet be secured from cybercriminals and to make it safest for ordinary users like us. Just like I said one of the important things that the superbody should do is to ensure that the simplest Internet user should enjoy the cyberspace without worry.
Paul Whyte
Researcher
Wednesday October 29, 2008 11:00:05 PM

I hope your wish of ICANN becoming the UN is not realised! If that should be the case, then we are in for very troubling times in cyberland. I just can't live to see another UN like organization strangling the internet and making the likes of China to dictates what should be done.

This reminds me about the Internet Governace Forum(IGF) which is certainly becoming an embarssment. In their annual meeting last year in Japan to discuss pertinent issues affecting the internet, china and other who extend their evil on the internet had to set the agenda to ensure that some sensitive issues are not discuss during the proceedings. These organizations are all dancing to the tune of major corporations and governments and hadly do things to help ordinary users like us. 

Lance Alberto
IQ Crew
Wednesday October 29, 2008 8:57:25 PM

Yes, ICANN could be the UN of the cyberspace.

It is really important that a superbody should also be recognized and agreed upon to become the UN of the cuberspace. In this era of electronic crime, there is also a need for an electronic security force. Just as we have a UN Security Council, perhaps we should also have an Cyberspace Security Council.

One important thing that this superbody should do aside from safeguarding the Internet from cybercriminals is to ensure that the most ordinary user is given the best security so that the Internet really becomes a tool for progress and development, peace and harmony.

mtechie
IQ Crew
Wednesday October 29, 2008 4:01:17 PM
no ratings
I was going say it in my first reply but didn't...  ICANN reminds me of the UN too.
Mary Jander
Thinkernetter
Wednesday October 29, 2008 3:53:23 PM

I totally agree that ICANN made the right move. It could be doing more, though. Perhaps another body or agency should be taking even more aggressive action. This comes very late in the game, hardly making it a deterrent to similar sources of fraud and abuse.

Maybe that's why ICANN reminds me of the UN.

Terry Sweeney
IQ Crew
Wednesday October 29, 2008 3:27:24 PM

In complete agreement with you, mtechie. And it seems like what ICANN did was find a loophole -- Tsastsin's convictions in Estonia on charges of credit card fraud, forgery, and money laundering were the cited as the reason for termination -- as opposed to providing cover for spammers, or gaming the domain registration system.

It's kind of like IRS going after Al Capone for tax evasion -- the least of his sins, but a technicality that brought down the whole operation.

So apparently ICANN can dump those who don't disclose a criminal past. If they don't have sharper enforcement teeth than this, shouldn't they?

Page 1 of 2   Next >
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
previous posts from Jart Armin
Jart Armin
Jart Armin   2/8/2010   14 comments
Fatal System Error, the book just released by West-coast-based journalist Joseph Menn, is really a public policy statement written as a thriller for a wider reading public. UPDATED 2:45 PM
Jart Armin
Jart Armin   2/1/2010   17 comments
If you were a criminal looking to hide money-laundering operations, anonymously rent swaths of Web infrastructure for Internet badness, or create a financial base to threaten national security, where would you look? Panama? Liechtenstein? Offshore islands?
Jart Armin
Jart Armin   1/22/2010   12 comments
As it prepares to host the latest in series of roundtables on cloud security next week, the Federal Trade Commission has a real chance to proactively protect large numbers of business users and consumers.
Jart Armin
Jart Armin   1/18/2010   18 comments
Most users have become accustomed to providing social-networking Websites with extensive personal details, information about friends, pictures, and connections. But new hacks out in the wild -- and already in the hands of the bad guys -- demonstrate that any thought of privacy or anonymity is a myth. Sites like Facebook, Bebo, LinkedIn, and Orkut are leaking personal information like an open faucet.
Jart Armin
Jart Armin   1/8/2010   21 comments
The open-source whistleblower site, Wikileaks, which according to The National has “produced more scoops in its short life than the Washington Post has in the past 30 years,” has temporarily and voluntarily suspended its own service.
5
of
IETV: the thinkerNet on film
5
of
2pm EST
Tue
Feb 23rd
2pm EST
Thu
Mar 4th
3pm EST
Tue
Mar 9th
an IBM information resource
sponsored content
big blue blog
Todd Watson
IBM is announcing today the first of its Power7 processor-based systems and the Power7 processor itself at an event in NYC.
white papers & case studies
an IBM information resource
sponsored content
Smarter Collaboration: How to Thrive in a Challenging Business Environment
Market conditions are changing faster than ever, and organizations need to improve their agility and adaptability in order to provide better service and improve processes. The ability to work with customers, business partners, and employees as effectively as possible - while at the same time holding down costs - is a key to success.

READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE!

REGISTER HERE
Wanted! Site Moderators
Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?

Please email: moderators@internetevolution.com
CMP Media LLC
Internet Evolution – not for thickies
Congress Hits the Snooze Button With China
Ira Winkler
In his
recent Congressional testimony, Dennis Blair, the U.S. director of national intelligence, stated that the U.S. is "severely threatened" by cyber attacks and that the recent Google (Nasdaq: GOOG) attacks should serve as a wake-up call.

CLICK FOR MORE
Sweeney Blog
Microsoft's Relevance in the Windows 7 Era

11|13|09   |   2:17   |   3 comments


The release of Microsoft's newest OS raises the question of the company's relevance in an era when Google dominates applications and search, and Apple runs circles around Redmond with its gadgets and user interfaces.
Steve Saunders' Outernet
The Death of Anonymity: Part 4

Part 4 of 4   |  
See complete series
10|29|09   |   1:40   |   7 comments


In the final episode of this series about the death of Internet anonymity, Saunders describes how the Internet of the future will start to attain a level of intelligence that requires no human intervention. Scary.
Steve Saunders' Outernet
The Death of Anonymity: Part 3

Part 3 of 4   |  
See complete series
10|28|09   |   1:35   |   4 comments


What can users today do to protect their online privacy? The simplest and most obvious option is to not use the Internet – at all. However, once all digital information is consolidated over the Internet, trying to protect digital identity by simply unplugging from the Internet becomes impossible – a fact that has manifest implications for civil liberties, Saunders says.
Steve Saunders' Outernet
The Death of Anonymity: Part 2

Part 2 of 4   |  
See complete series
10|27|09   |   2:08   |   8 comments


By 2011 the number of Internet-connected sensors will exceed 1 trillion, making your chances of doing anything or going anywhere unnoticed pretty much zero. Saunders talks about how the 'sensortization' of the Internet is eliminating the traditional divide between online and offline populations.
Steve Saunders' Outernet
The Death of Anonymity: Part 1

Part 1 of 4   |  
See complete series
10|26|09   |   1:29   |   13 comments


The 20th Century Internet was characterized by the ability to interact with other people and information on the Internet largely without anyone knowing who you were. The Internet of this century, conversely, will be defined by identity. Saunders explains how Internet users are unwittingly contributing to the demise of the anonymous Internet.
The Incredible Hultquist
Social Networks & Hiring Pitfalls

10|16|09   |   2:16   |   5 comments


More companies are trolling social networks to find and vet potential job candidates. Beware the pitfalls of blurring the line between personal and professional lives.
Steve Saunders' Outernet
Welcome to 2029

10|6|09   |   2:01   |   4 comments


It is 20 years since the invention of the World Wide Web, and the Internet has changed beyond recognition since then. Steve Saunders peers into the future to predict what the Web will look like in another 20 years time – and he doesn’t like what he sees.
Rob Salkowitz
The Use & Abuse of BI

2|1|10   |   2:19   |   4 comments


Data mining of social networks means people might face unforeseen consequences as a result of their seemingly innocuous personal choices and associations.
Tom Nolle
How 2010 Will Be Like 1984

1|4|10   |   2:13   |   19 comments


Microsoft reportedly has plans to integrate Windows Live and even Xbox with Windows Mobile. That may provide them a strategic advantage, but what will the cost be to your privacy? Tom explains all.
John Soat
Technology Santa Claus

12|23|09   |   2:06   |   2 comments


In the holiday spirit of giving, Technology Santa Clause offers a few words of advice to struggling IT professionals: ‘Be careful what you wish for.’
Tom Nolle
Everything New Is Old Again

2|9|10   |   2:13   |   2 comments


Research shows that the youth of today like Facebook – but not blogging or Twitter. Does that mean Facebook has won, or just that it's not yet out of favor? Will all the services we see today fade into Ovaltine-or-Wheaties status in just a few years?
what.the.ferraro
Email Marketing Gets Desperate

2|8|10   |   2:31   |   3 comments


Promotional emails will use just about anything timely to get people to buy things. Seriously, anything.
Steve Saunders' Outernet
America, Truck Yeah!

2|8|10   |   1:42   |   5 comments


Steve likes his new Dodge Ram 1500, but hates Chrysler's Web non-sales strategy. Rant on, li'l buddy.
what.the.ferraro
Twits Go Wild for Resignation Tweet

2|5|10   |   1:48   |   4 comments


Jonathan Schwartz is the first Fortune 200 CEO to resign via Tweet. Can he walk on water, too?
Full Nelson
Go With the FLO, Part 2

Part 2 of 2   |  
See complete series
2|5|10   |   2:17   |   3 comments


Fritz and his sweater continue their review of Qualcomm's FLO TV.
Singer at C-Level
Goldilocks & the Data Center

2|4|10   |   3:39   |   2 comments


What kinds of companies are doing the most innovation in the data center? Turns out it's midtier enterprises that are taking the "Just Right" approach.
Full Nelson
Go With the FLO, Part 1

Part of 2   |  
See complete series
2|4|10   |   2:39   |   1 comment


Qualcomm's FLO TV gizmo streams live TV shows. Tragically, they include the O'Reilly Factor
Eurotrash
High & Dry in Barcelona

2|3|10   |   1:08   |   No comments


Ray’s heading to Barcelona for the Mobile World Congress, and he’s not happy about it, the miserable git.
Sweeney Blog
No Sex, Please... It's the Super Bowl

2|3|10   |   2:24   |   2 comments


The Super Bowl ads that CBS rejected are turning up online, generating lots of attention but zero revenue for the broadcaster.
Cirque Du Solez
Books Come Alive

2|2|10   |   2:02   |   3 comments


Ray Kurzweil's Blio and Apple's iPad tablet will make it easier than ever to have books "read" to us, says Dr. Kim, who believes that talking tablets will become interwoven into our consciousness as we "merge" with the increasingly elegant machines we hold in our hands.