[[-- Translated text (es -> en) --]] Dear Harold, I saw that you sent several emails, but you did not answer this one. Please would you be so kind as to answer? Thank you very much and greetings Alberto Sopto From: alberto@soto.net.ar<alberto@soto.net.ar> Sent on: Thursday, November 30, 2023 17:40 To: 'lilian ivette de luque bruges'<lilidebru@hotmail.com> ; 'Alejandro Pisanty'<apisanty@gmail.com> CC: 'LACRALO IS'<lac-discuss-es@icann.org> Subject: RE: [lac-discuss-es] DNS abuse example A question to the president of LACRALO: when was this discussed in the LACRALO list? Thanks and regards Alberto Soto From: lilian ivette de luque bruges <lilidebru@hotmail.com <mailto:lilidebru@hotmail.com>> Sent on: Thursday, November 30, 2023 17:22 To: Alejandro Pisanty <apisanty@gmail.com <mailto:apisanty@gmail.com>>; Alberto Soto <alberto@soto.net.ar <mailto:alberto@soto.net.ar>> CC: LACRALO ES <lac-discuss-es@icann.org <mailto:lac-discuss-es@icann.org>> Subject: Re: [lac-discuss-es] DNS abuse example Hello everyone, in today's OFBWG call the staff informed in the chat that these were the names that so far were nominated to be part of the CIP-CCG The At-Large (ALAC/RALO representatives and alternates) are: A THE C Cheryl Langdon-Orr (representative) Tommi Karttaavi - (alternate) AFRALO TBD APRALO Amrita Choudhury (representative) TBC (alternate) EURALO Sebastien Bachollet Ricardo Holmquist (alternate) LACRALO Carlos Aguirre Christelle Vaval (alternate) NARALO Alan Greenberg TBC (alternate) Greetings, Lilian Ivette De Luque Get Outlook for Android<https://aka.ms/AAb9ysg> _____ From: lac-discuss-es <lac-discuss-es-bounces@atlarge-lists.icann.org <mailto:lac-discuss-es-bounces@atlarge-lists.icann.org>> on behalf of Alejandro Pisanty <apisanty@gmail.com <mailto:apisanty@gmail.com>> Sent: Thursday, November 30, 2023 2:38:27 PM To: Alberto Soto <alberto@soto.net.ar <mailto:alberto@soto.net.ar>> Cc: LACRALO ES <lac-discuss-es@icann.org <mailto:lac-discuss-es@icann.org>> Subject: Re: [lac-discuss-es] DNS abuse example Albert, In the informal meetings that chance allowed to take place in Hamburg - and let's be clear, they have no official meaning, but they are commitments based on given word - there was a strong emphasis on the mantra "policy first." New elected officials must soon come into action, such as the new Vice President, whose absence of more than half a decade so far has been glaring. I believe that we must, on the one hand, continue the policy discussions with the aim that the other representatives have voices from the community to bring to the forums in which they participate, and wait a reasonable - but brief - time for the people in charge of leadership, By voting, they begin to act and submit to the conditions of transparency and accountability that they also accepted when they declared themselves eligible. Alejandro Pisanty On Thu, Nov 30, 2023 at 1:27 PM Alberto Soto <alberto@soto.net.ar <mailto:alberto@soto.net.ar>> wrote: Exactly Alejandro. But this forum does not seem to be about policy discussion. Greetings Albert On Nov 30, 2023 16:23, Alejandro Pisanty <apisanty@gmail.com <mailto:apisanty@gmail.com>> wrote: Albert, The issue you mention in this message, DNS abuse in the specific case of dot-zip, has a very important angle for "At Large" Internet users in our region. As described at https://www.ict-pulse.com/2023/11/ictp-277-capitalising-on-caribbean-country... lance-hinds/ and it has already been mentioned before in this discussion list, some countries and the administrators of their ccTLDs are using top-level domain names of geographical nature (ccTLDs) as dot-ai to attract new registrations. In the case of dot-ai, these records are related to the acronym "AI" for "Artificial Intelligence" and have very high prices, around $900 per year, completely misaligned with what users have demanded from generics like dot. -com, low and uniform prices. An additional problem for users is that these registries, as they are not generic, are not required to sign and enforce the ICANN contractual apparatus with consensual instruments such as the assignment of the registry, the accreditation of "registrars" and the "Registry-Registrar". Agreement". This allows predatory practices, unfair competition practices, abusive pricing policies, arbitrariness in registries, non-transparent exceptions to the principle of "first in time, first in law" or "First in - first served", abuse of information such as "self -serving deals", absence of the protections provided by the UDRP for owners of recognized brands and names, and zero consumer protection. The situation in these cases is worse than with "dot-zip" since in the case of "dot-zip" the contractual apparatus allows ICANN to act in defense of the users, even to the point of withdrawing the right to operate the registry to the company that is currently the owner, protection of names in an "escrow", and competition for a new owner who adheres to the established rules. Meanwhile, users are left with the options of blocking dot-zip names, as many ISPs and other actors already do, and the same fate could suffer dot-ai names. It is not an unprecedented situation; for a while the dot-hk delivery was poor and they encountered the same reaction until they started to straighten out the delivery. Let's ensure that the business model of speculation and extortion, which is one of the drivers of the domain name business, does not take over a registry in the region in which some speculators take advantage of institutional weakness and in the end the country that for a For a short time he finds himself in an advantageous situation and ends up marginalized again. These "windfalls", like the oil tankers that countries like Guyana are experiencing today, are not a basis for lasting development. It is a form of extractivism, more abstract than that of raw materials but no less harmful. Alejandro Pisanty On Thu, Nov 30, 2023 at 7:11 AM <alberto@soto.net.ar <mailto:alberto@soto.net.ar>> wrote: Dear, I copy (translation via Google) an example of DNS abuse. A topic to debate, given that it is harming many end users. Kind regards Alberto Soto “It's been six months since Netcraft first reported abuse of the new .zip TLD, describing the fraudulent activity we detected and blocked. Within weeks of its launch, Netcraft had detected many new .zip domain registrations designed to exploit the confusion between the new TLD and the .zip file extension for ZIP archives. So what has changed in the last 6 months? Not much, it seems. .zip records The rate of new .zip domain registrations has decreased since our previous blog post. Despite this, there are now: 16,705 .zip domains registered (a three-fold increase since our previous post) 8,432 .zip domains with A records in total (a four-fold increase) 4,421 .zip domains with MX records in total, of which only 619 have no A records 4,196 different IP addresses for .zip domains in total (a five-fold increase) 417 .zip domain names mentioning 'installer' or 'update' (a two-fold increase) Outside of these domains, we discovered five zip bombs in service. Additionally, the increased number of distinct IP addresses (1 for every 4 domains now, compared to 1 for every 6 domains six months ago) suggests that .zip domains are becoming more diverse. Malicious web pages Netcraft has blocked 50 malicious .zip domains since the previous post on May 17, 2023, bringing the total to 56. These domains mostly impersonate Microsoft, Google, and Steam, as the following figure illustrates: Other notable attacks include: Apecoin[.]zip, first seen on August 9, 2023, is a cryptocurrency drain scam posing as a cryptocurrency platform. It claims to add cryptocurrencies to a user's wallet, but when authorization is granted, it transfers all of their assets (cryptocurrencies, NFTs, etc.) to the criminals who operate the site. “This same technique is being used by criminals who exploit the generosity of people around the Gaza conflict.” ________________________________ lac-discuss-es mailing list lac-discuss-es@atlarge-lists.icann.org <mailto:lac-discuss-es@atlarge-lists.icann.org> https://atlarge-lists.icann.org/mailman/listinfo/lac-discuss-es http://www.lacralo.org _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. -- - - - - - - - - - - - - - - - - - - - - - - - - - - - Dr. Alejandro Pisanty Facultad de Química UNAM Av. Universidad 3000, 04510 Mexico DF Mexico +525541444475 Blog: http://pisanty.blogspot.com LinkedIn: http://www.linkedin.com/in/pisanty Unete al grupo UNAM en LinkedIn, http://www.linkedin.com/e/gis/22285/4A106C0C8614 Twitter: http://twitter.com/apisanty ---->> Unete a ISOC Mexico, http://www.isoc.org . . . . . . . . . . . . . . . . -- - - - - - - - - - - - - - - - - - - - - - - - - - - - Dr. Alejandro Pisanty Facultad de Química UNAM Av. Universidad 3000, 04510 Mexico DF Mexico +525541444475 Blog: http://pisanty.blogspot.com LinkedIn: http://www.linkedin.com/in/pisanty Unete al grupo UNAM en LinkedIn, http://www.linkedin.com/e/gis/22285/4A106C0C8614 Twitter: http://twitter.com/apisanty ---->> Unete a ISOC Mexico, http://www.isoc.org . . . . . . . . . . . . . . . .