Tiny Russian registrar gets canned

ICANN is to terminate a Russian registrar’s accreditation.
Name For Name Inc, which was given a breach notice last month, is being shut down for basically failing to act as a registrar.
Verisign had already cut off its .com/.net registrar contract and the company was not managing names, providing Whois, or doing any of the other things registrars are supposed to.
Under normal circumstances, a termination sees a mass transfer of all the domains under management to a nominated registrar, but in Name For Name’s case I can’t see that happening.
The company only had five gTLD domain names under management, according to the latest count.
Its accreditation will be terminated September 6.
ICANN also this week issued a breach notice to Visesh Infotecnics (Signdomains.com), apparently as the result of a badly handled domain name hijacking.

Five registrars on the ICANN naughty step

ICANN has sent breach notices to five domain name registrars, including two owned by Epik and DomainTools, for failing to cooperate with a Whois accuracy audit.
InTrust Domains, Planet Online, Server Plan, Infocom Network and DomainAllies.com did not respond to ICANN’s 2011 Whois Data Reminder Policy audit, according to ICANN.
The WDRP is the longstanding policy that requires all ICANN-accredited registrars to remind their customers to keep their Whois records up to date once a year.
The annual WDRP audit asks registrars to state how many reminders they sent out and how many Whois records were updated as a result, among other things.
The non-compliant registrars, with the exception of Server Plan, are also evidently past due paying their ICANN accreditation fees, according to the breach notices.
All five registrars have been given 15 days to rectify the problems or risk losing their accreditations.
Given that the audit is, I believe, a simple web-based form, I don’t think anyone is going to go out of business as a result of these breaches.
It’s interesting to dig a little bit into who owns these registrars.
DomainAllies.com belongs to DomainTools parent Thought Convergence.
InTrust, which has come in for criticism for shady marketing practices under its previous management, was acquired by Epik last July.
Planet Online, meanwhile, is one of those odd registrars that hides its own contact information behind a Whois privacy service (though its web site does carry a physical address).

Domain hijack leads to registrar shutdown threat

ICANN has threatened to terminate Chinese domain name registrar eName Technology after the domain 1111.com was allegedly hijacked.
According to ICANN’s notice of breach (pdf), eName has refused to hand over data documenting the transfer of 1111.com as required by the Registrar Accreditation Agreement.
ICANN claims that when it tried to get eName’s help investigating a hijacking complaint, the company did not return its calls or emails.
The registrar now has 15 days to provide the transfer records as called for by the Inter-Registrar Transfer Policy.
According to historical Whois records, 1111.com was transferred to eName between February 12 and 16 this year. After a complaint, ICANN started chasing eName for the data on February 28.
The domain appears to have been owned by at least four different parties and three different registrars – Network Solutions, then Joker, then eName – since the start of 2012.
It’s the second time that ICANN has sent a breach notice to a registrar over an alleged mishandling of a domain name hijacking, and the first time it’s actually named the domain in question.
In February, the organization threatened Turkish registrar Alantron with the suspension of its contract over the botched handling of pricewire.com.

Rogue registrar suspended over “stolen” domain

ICANN has told Turkish domain name registrar Alantron that its accreditation will be suspended for a month due to its shoddy record-keeping.
The suspension, which will become effective March 8, follows an investigation into allegations of double-selling.
ICANN issued the suspension last Thursday after trying unsuccessfully for almost three months to get its hands on Alantron’s registration records.
The company now has until March 28 to sort out its compliance problems or face losing its accreditation entirely.
I understand the investigation was prompted by complaints filed by an American named Roger Rainwater over the potentially valuable domain name pricewire.com.
Pricewire.com spent a couple of years under Whois privacy but was grabbed last August by Turkish registrant Altan Tanriverdi, according to historical Whois records.
Rainwater, who says he had been monitoring it for three or four years, subsequently paid Tanriverdi an undisclosed sum for the domain, signing up for an Alantron account so it could be pushed.
Rainwater showed up in the Whois for pricewire.com on September 7 last year. But he says he was unable to change his name servers and 48 hours later the name disappeared from his account.
He says he was told by Alantron that it had put the domain in Tanriverdi’s account “by mistake” and that it was sold to SnapNames as part of a batch of dropping domains.
According to emails sent to Rainwater, seen by DI, Alantron said that pricewire.com was “registered via a partner company called Directi for a company called Snapnames”.
SnapNames had already auctioned the name – apparently there were more than 40 bidders – and the name has since been transferred to one Sammy Katz of Philadelphia.
However, given that Whois reliability is at question here, it’s not entirely clear who owns it. It’s currently parked at InternetTraffic.com.
Tanriverdi, who appears to be equally aggrieved, has published an extensive history of the dispute, along with screenshots, here (in Turkish).
In short: Alantron stands accused of double-selling pricewire.com.
ICANN’s compliance team has been unable to get its hands on the underlying transaction data despite repeated attempts because Alantron apparently doesn’t have it.
Its suspension notice alleges that Alantron was running two registration systems in parallel and that they weren’t talking to each other, resulting in the same name being sold to two parties.
Read ICANN’s suspension notice in PDF format here.

Registrar threatened with shutdown for failing to reveal registrant

ICANN has told a Turkish domain name registrar that its accreditation will be terminated unless it fixes its apparently shoddy Whois services.
While Alantron has a track record of Whois failures and connections to abusive domains, ICANN’s threat appears to have been made in connection with a single domain name.
ICANN compliance director Stacey Burnette wrote to Alantron (pdf):

On 12 October 2011, ICANN requested that Alantron make registration records available to ICANN concerning a specific domain name, as ICANN received a complaint that there was no Whois output available for the domain name. Although numerous requests were made by ICANN to make the registration records available for inspection and copying, as of the date of this letter, Alantron has not made any arrangements to comply with ICANN’s request.

The letter also details Alantron’s alleged failures to make Whois available through Port 43 and its web interface going back to September 1.
ICANN has also threatened to suspend Alantron’s ability to create new registrations. Alantron received a similar de-accreditation warning for Whois failures in April 2010.
It does not say who made the complaint or which domain is in question, but the company has come under fire from security pros in the past for allowing its services to be abused to push fake pharmaceuticals.
Alantron, which has about 26,000 domains under management according to Webhosting.info, has until November 25 to rectify the problem.

Go Daddy’s 60-day domain lockdown loophole

Perhaps the most common complaint of the many leveled at Go Daddy over the years is that it refuses to allow customers to transfer domains to another registrar for 60 days after an ownership change.
The latest person to fire this criticism at the company is tech blogger Scott Raymond, who published a lengthy tirade against Go Daddy and its policy on ZDNet today.
Raymond points out that Go Daddy seems to be in violation of ICANN’s Inter-Registrar Transfer Policy, which explicitly prohibits the rejection of a transfer request due to a recent Whois change.
He’s not alone. Even Andrew Allemann of Domain Name Wire, hardly Go Daddy’s fiercest critic, said as recently as May that he thinks the company is in violation of the IRTP.
With good reason – this April 2008 ICANN advisory seemed to be specifically written with a ban on Go Daddy’s 60-day policy in mind.
But is the company non-compliant? ICANN doesn’t seem to think so.
I’ve tracked down this November 2009 email from David Giza, then ICANN’s head of compliance, in which he describes what seems to amount to a loophole Go Daddy and other registrars exploit.
Giza explains that the 2008 advisory “only addresses mandatory updates to Whois contact information, not a transfer or assignment to a new registrant”.
Registrants are obliged to keep their Whois data up-to-date; that’s what he means by “mandatory”.
Giza’s email adds:

the transfer policy does not prohibit registrars from requiring registrants to agree to the blocking of transfer requests as a condition for registrar facilitation of optional services such as the transfer of a registration to a new registrant.
We understand GoDaddy.com’s 60-day lock is a voluntary opt-in process where registrants are made aware of and agree to the restriction that the domain name is not to be transferred for 60-days following the completion of transfer. As such, this practice is not prohibited by the transfer policy.

In other words, there are “Whois Changes” and there are “Registrant Changes”, and registrars are only allowed to trigger a lock-down in the latter case, according to Giza.
And according to DNW’s reporting on the subject, that’s exactly what Go Daddy continues to do — locking the domain if certain fields in the registrant record are changed.
So the 60-day lock appears to be kosher, at least in the opinion of ICANN’s erstwhile compliance chief. Whether that could change under the department’s new management is unknown.
As it happens, the subject was raised by a recent working group that was looking into revising the IRTP, but it was so contentious that consensus could not be found.
The problem has been bounced down the road. The most recent mention came in this ICANN issue report (pdf, page 14-15).
Anyway, if I lost you several paragraphs ago, the net result of all this seems to be that Go Daddy probably isn’t breaking the rules, but that nobody can agree whether that’s a good thing or not.
The fact that one has to do this much digging into ICANN esoterica just to figure out whether Go Daddy is screwing its customers over isn’t very reassuring, is it?

Another registrar on the ICANN naughty step

ICANN has threatened to terminate the accreditation of Samjung Data Service, a South Korean domain name registrar.
The threat, the 13th ICANN’s compliance department has issued to a registrar this year, is notable because it’s a rare example where money does not appear to be an issue.
Samjung’s failing, according to ICANN’s termination letter, is its inability to escrow registrant data with Iron Mountain on the agreed schedule and in the required format.
The tiny registrar has also failed to make the technical contacts in its customers’ Whois records available online, and has been apparently ignoring ICANN’s calls and emails.
What ICANN does not do is accuse Samjung of not paying its accreditation fees, which in the past has been a notable feature of compliance actions.
Delinquent payments tend to alert ICANN that there may be other problems at a registrar, but this has led to criticisms that the organization is only concerned about its revenue.
Could the Samjung case be another example of the newly staffed-up ICANN compliance department taking the more proactive stance that was promised?

War of words over .jobs “breach” claims

Employ Media and ICANN have come to blows again over ICANN’s threat to shut down the .jobs registry for allegedly selling domain names in breach of its Charter.
Both parties are currently talking through their outside counsel, and the possibility of litigation has raised its head in public for the first time.
In the latest set of correspondence published by ICANN, Employ Media sharply (and ironically) criticized ICANN’s decision to publish an earlier set of correspondence on its web site.
The earlier email exchange, which I blogged about here, revealed that ICANN had asked the company to amend its Charter.
Two days later, Employ Media’s lawyers wrote to ICANN’s lawyers to express disappointment with the decision to post these emails, questioning ICANN’s commitment to good faith negotiations.

In light of this apparent bad faith action on ICANN’s part, Employ Media is questioning whether any hope remains for a full and fair exchange of ideas regarding a resolution of its dispute with ICANN.
…
[ICANN has] substantially hindered Employ Media’s ability to engage in productive and honest negotiations: all future communications will necessarily be more guarded and less open, given the expectation that they will be published to a larger audience

ICANN and Employ Media are currently in a “cooperative engagement” process – a less formal way to resolve their dispute than heading to an arbitration forum or court.
ICANN claims the registry is breaking its Charter commitments to the human resources industry by allocating tens of thousands of .jobs domain names to the Universe.jobs project, which is run by a partner, the DirectEmployers Association.
Independent jobs boards, represented by the the .JOBS Charter Compliance Coalition, believe that Universe.jobs is unfair and not compliant with Employ Media’s own policies.
Employ Media’s latest letter (pdf), which it demanded ICANN publish, drops hints about some of the behind-the-scenes talks (with my emphasis):

Had we known that any part of our communication was to be published, we would have certainly memorialized, in writing, your statements to us that ICANN very much wants to avoid an arbitration over this dispute, and that ICANN was therefore willing to agree to a process for approving a Charter amendment in order to do so. We would also have memorialized our positions, including our position that a Charter amendment is neither necessary nor desirable, but that we were considering acceding to ICANN’s request solely in the hopes of avoiding arbitration

ICANN’s lawyers’ response (pdf), sent April 26, says ICANN was merely fulfilling its transparency obligations by informing the community about the extension of the talks deadline.
They also said that the Employ Media should stop pretending to be surprised that ICANN issued the breach notice and is now asking for a Charter amendment.
ICANN further accused the registry’s lawyers of legal “posturing” which was “seemingly geared solely towards use in future litigation”.
Employ Media was due to deliver a proposed amendment to its Charter by yesterday. ICANN has said it will not take any further actions based on its breach notice until May 6.

Registrar threatened over “stolen” Facebook domain

ICANN has threatened to terminate the domain name registrar EuroDNS for failing to transfer a typo domain lost in a UDRP case to Facebook.
But EuroDNS says it is subject to a court case in its home country, Luxembourg, which has prevented it handing over the name.
The original registrant of facebok.com lost a slam-dunk UDRP case back in September 2010. He didn’t even bother defending the case.
But over half a year later, he’s still in control of the domain, and he’s using it to recruit folk into a shady-looking (but probably legal) subscription text messaging service.
EuroDNS is the registrar of record for the domain, and like all registrars is responsible for transferring domains lost under the UDRP to the winning party, in this case Facebook.
ICANN’s compliance department – my guess is under pressure from Facebook – has therefore threatened EuroDNS with termination unless it hands over the domain in the next three weeks.
This is noteworthy because EuroDNS isn’t the kind of tiny, fringe outfit ICANN usually files compliance notices against. It’s a generally respectable business. It even shows up to ICANN meetings.
EuroDNS deputy general counsel Luc Seufer tells me that the company was fully prepared to transfer the domain – it had even sent the authorization codes to Facebook – but it found itself on the receiving end of a lawsuit claiming that the domain had been “stolen”.
Somebody in Luxembourg, it seems, has sued to reclaim an obvious typo domain that’s probably going to be transferred to Facebook anyway.
“We are therefore in an incredible position where if we transfer the name before the judge’s ruling we will be accountable in our own country and if we don’t transfer the name we are in breach of the [Registrar Accreditation Agreement],” said Seufer.
The Luxembourg case has not yet made it to court, hence EuroDNS’s delay, he said. ICANN is aware of the action, and has seen the court papers, he said.
According to ICANN’s breach notice (pdf), the only way for EuroDNS to avoid its obligation under the UDRP is to show proof that the original registrant has sued Facebook to keep the domain.
But the case in question was filed by a third party claiming to be the rightful owner of the domain, not the original registrant. EuroDNS seems to be trapped between a rock and a hard place.
Seufer said the company is prepared to hand over the domain, adding:

Should we simply ignore a judiciary court case against us in our own country – that could prevent us from operating the transfer since it is was asked of the judge – because of our RAA’s obligations?

The domain in question, facebok.com, currently redirects to a series of sites asking visitors to fill in a survey to win a Mac.
Those who are duped by it are actually signing up to a text service that costs, in the UK, £4.50 ($7.40) per week.

ICANN names compliance chief

ICANN has found itself a new senior director of contractual compliance, nine months after the post was vacated.
Maguy Serad, most recently with Nissan North America, starts April 4 at ICANN’s headquarters in Marina Del Rey, California.
She’s apparently a Black Belt Six-Sigma (don’t worry, that’s a real thing), Liberian by birth and currently a Lebanese citizen. She speaks English, French and Arabic.
ICANN has also hired Colombian intellectual property lawyer Carlos Alvarez as a new contractual compliance manager/auditor. He has a history in initiatives fighting software piracy and child pornography.
The timing of the hires means ICANN has probably dodged a bullet.
There have been grumblings in some parts of the ICANN community about the vacant compliance posts for some months, and some stakeholders here at the San Francisco meeting planned to make their feelings known to ICANN’s senior staff and board.
ICANN’s compliance team is responsible for monitoring and enforcing ICANN’s contracts with registries and registrars, which will become a lot more important when the new top-level domains program kicks off.