00:18:55 John McCormac - HosterStats.com: Evening all. Had a few hours to spare while the latest full gTLD website/IP survey crunched. Collected the registration terms for the ccTLD (less a few dead registries) as per that thread on the mailing list.
00:20:04 Michelle DeSmyter - ICANN Org: To follow along with the RTT: https://www.streamtext.net/player?event=ICANN [streamtext.net]\
00:20:19 Gopal Tadepalli: Greetings. - Dr. T V Gopal, Professor, Department of Computer Science and Engineering, College of Engineering, Guindy Campus, Anna University , Chennai, INDIA.
00:20:40 Jonathan Zuck: DNS Ticker
00:20:57 Hadia El Miniawi: Greetings Dr. Gopal and all
00:24:56 Hadia El Miniawi: welcome Sion
00:25:10 Michelle DeSmyter - ICANN Org: To follow along with the RTT: https://www.streamtext.net/player?event=ICANN [streamtext.net]\
00:48:25 Steinar Grøtterød: .CO is still a ccTLD not in the data collected by OCTA
00:49:04 Jonathan Zuck: right, Steinar. It was just an example.
00:49:37 Jonathan Zuck: Could the checks be less frequent but not stop altogether?
00:49:51 Gopal Tadepalli: USEFUL READING: Ryo Kawaoka, Daiki Chiba, Takuya Watanabe, Mitsuaki Akiyama, and Tatsuya Mori “A First Look at COVID-19 Domain Names: Origin and Implications,” In Proceedings of the Passive and Active Measurement Conference 2021 (PAM 2021), March 29-31 2021, VIRTUAL @ Brandenburg University of Technology [BTU], Germany. - Dr. T V Gopal, Anna University
00:50:21 John McCormac - HosterStats.com: It would be possible to red flag brand name domain names if they are not on the main brand's nameservers.
00:50:45 Jonathan Zuck: Indeed, @JM
00:51:37 Jonathan Zuck: Or @JM any site forwarded to a site not owned by the registrant. Dunno
00:52:30 John McCormac - HosterStats.com: @JZ Yep. But sometimes they can redirect to the main brand site until they go live for abuse.
00:52:46 John McCormac - HosterStats.com: @JZ the DNS does not change but the location does.
00:53:31 Jonathan Zuck: Yes @JM. That's my point. If a domain is redirected to another domain, not owned by the registrant of the initial domain, that could be a red flag.
00:54:20 John McCormac - HosterStats.com: @JZ It is trivial to do on a daily basis but it would need a whitelist on historical doms.
00:54:29 Jonathan Zuck: for sure.
00:54:44 Jonathan Zuck: ping for a mail server?
00:55:24 John McCormac - HosterStats.com: That would be an interesting metric as it would not be using the main brand mx either.
00:57:32 Gopal Tadepalli: I gather that 478,000 COVID-related domains that were registered containing top keywords such as ‘covid’, ‘covid19’, ‘coronavirus’, and ‘vaccine’. What is the data from ICANN in terms of numbers ? - Dr. T V Gopal, Anna University
00:57:56 Jonathan Zuck: like fake medicines, etc.?
00:59:39 Jonathan Zuck: super difficult. Is there a way to make these "false" positives public so that others might research the content related issues?
01:01:44 Jonathan Zuck: the registrars needed to do further confirmation, I imagine
01:05:19 Jonathan Zuck: Me tiher
01:05:51 Steinar Grøtterød: @Jonathan: The only “requirement” for the registrar (according to the RAA) is to track receiving abuse notices. For Registries, RA Spec 11.3b gives a more active handling
01:06:15 John McCormac - HosterStats.com: @Sion Have you looked at bad IP ranges as an indicator for possible problematic activity?
01:06:53 Jonathan Zuck: @JM, I guess the first filter is these 3rd party APIs
01:07:28 Jonathan Zuck: those numbers are HUGE, when you think about it. Curious about parking versus put in use.
01:07:50 John McCormac - HosterStats.com: @JZ A perp is a perp is a perp. They may reuse or cluster on specific server IPs if they are not using services like Cloudflare to obscure the location,
01:08:00 Gopal Tadepalli: Thank you: It is nice that OCTO has taken the lead to point out that COVID-19 infects not only people but also internet. Thank you Sion. - Dr. T V Gopal, Anna University
01:09:06 Hadia El Miniawi: Ok thank you
01:09:07 Jonathan Zuck: Thanks for your efforts on this Sion!
01:09:18 Hadia El Miniawi: DAAR is just trend
01:09:18 Jonathan Zuck: and it's focused on the spikes
01:09:41 Hadia El Miniawi: understood
01:09:59 Chokri Ben Romdhane: Thank you Sion
01:10:08 Hadia El Miniawi: Thank you Sion
01:10:32 John McCormac - HosterStats.com: Thanks Sion. Very interesting project.
01:10:39 Siôn Lloyd - ICANN Org: No problem. You can read more here:
01:10:41 Siôn Lloyd - ICANN Org: https://www.icann.org/dnsticr
01:12:57 John McCormac - HosterStats.com: Some of the Z tools might be useful to rapidly build some background data on IPs/MXes/Website stuff but it needs historical depth to make it effective.
01:18:23 John McCormac - HosterStats.com: For those unfamiliar with the Zmap project, https://zmap.io/ , it is a set of tools that allow the collection of data in a very quick manner.
01:18:47 Cheryl Langdon-Orr: thanks for this session it was indeed useful...
01:18:55 Steinar Grøtterød: The GNSO TPR WG refers to RFC 9154 re the Transfer Authorisation Code (TAC)
01:20:21 Olivier MJ Crepin-Leblond: I think Alan was SSAD ODP too
01:20:37 Olivier MJ Crepin-Leblond: and of course WS2
01:23:33 Steinar Grøtterød: https://docs.google.com/document/d/1_wY631ybdRAwieTUsSR8uEcfTimwoP592oP93Sv1W5I/edit?usp=sharing
01:31:52 Lutz Donnerhacke: Yep
01:34:51 Jonathan Zuck: EPDP Phase 2...
01:36:45 Jonathan Zuck: Thanks
01:37:14 Michelle DeSmyter - ICANN Org: We will add the link to the wiki agenda
01:37:18 Claudia Ruiz - ICANN Org: Will add link to the agenda
01:42:16 Claudia Ruiz - ICANN Org: https://community.icann.org/display/alacpolicydev/At-Large+Policy+Advice+Development+Page
01:43:56 Hadia El Miniawi: thank you - bye all
01:44:13 Dave Kissoondoyal (ICANN ALAC): Thanks and bye to all
01:44:15 Michelle DeSmyter - ICANN Org: Next meeting: Wednesday, 18 May at 13:00 UTC
01:44:22 Isaac Maposa: Thanks all, bye.
01:44:28 Cheryl Langdon-Orr: bye for now then...
01:44:50 John McCormac - HosterStats.com: Thanks and later all.
01:45:08 iPad (27)Vanda Scartezini: Thanks to all good meeting
01:45:12 Michel TCHONANG LINZE: Thank bye bye
01:45:20 Herb Waye Ombuds: Bye all stay safe and be kind
01:45:21 Cheryl Langdon-Orr: transcript is a boon agreed
01:45:25 Claudia Ruiz - ICANN Org: Thank you all!
AT-LARGE GATEWAY
At-Large Regional Policy Engagement Program (ARPEP)
At-Large Review Implementation Plan Development
