[dns-operations] Uptick in number of domains losing delegation recently

Jothan Frakes jothan at gmail.com
Tue Apr 22 23:38:20 UTC 2014


Not sure this is related, but ICANN recently enacted (IMHO this was very
ham-fisted and poorly thought out) contact validation rule for registrars
that required contacts be validated - with the consequence of failing to
validate being that the DNS stop working on a given name.

It was mostly so that TM/LEA could find bad actors or at least as a means
to ensure the bad actors would receive and validate their response of
emails.    Logic was that domains for a given contact would go out of
delegation which should somehow make the internet safer.

Many notices for validation are getting lost in spam filters or not even
delivered, and the consequences of having a site go dark are starting to
increase.

In any event, this may be entirely or slightly related to the issue.

Jothan Frakes
+1.206-355-0230 tel
+1.206-201-6881 fax


On Tue, Apr 22, 2014 at 1:20 PM, Todd Lyons <tlyons at ivenue.com> wrote:

> On Tue, Apr 22, 2014 at 12:24 PM, Stephane Bortzmeyer <bortzmeyer at nic.fr>
> wrote:
> > On Tue, Apr 22, 2014 at 12:01:39PM -0700,
> >  Todd Lyons <tlyons at ivenue.com> wrote
> >  a message of 31 lines which said:
> >
> >> the expiration date is still a ways off, and whois is delegated to
> >> the correct DNS.  But when we do a dig +trace for that domain, the
> >> GTLD servers don't return any NS glue.
> >
> > Do they return NXDOMAIN or something else? Frankly, you do not provide
> > enough hard details. The actual output of whois and dig +trace or one
> > of these domains would help. There can be many reasons for this sort
> > of behaviour (Andrew Sullivan's hypothesis seems very probable).
> >
>
> I think Andrew made a good educated guess.  The domain that is
> currently exhibiting this behavior does have clientHold set.  So now
> it's up to the client to figure out why their domain got set with
> clientHold.  Here's the domain info:
>
> [todd at tlyons ~]$ whois aerosolscience.com
>
> Whois Server Version 2.0
>
> Domain names in the .com and .net domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
>
>    Domain Name: AEROSOLSCIENCE.COM
>    Registrar: TUCOWS DOMAINS INC.
>    Whois Server: whois.tucows.com
>    Referral URL: http://domainhelp.opensrs.net
>    Name Server: NS1.IVENUE.COM
>    Name Server: NS2.IVENUE.COM
>    Status: clientDeleteProhibited
>    Status: clientHold
>    Status: clientTransferProhibited
>    Status: clientUpdateProhibited
>    Updated Date: 19-apr-2014
>    Creation Date: 03-aug-2004
>    Expiration Date: 03-aug-2014
>
> >>> Last update of whois database: Tue, 22 Apr 2014 20:16:22 UTC <<<
>
> NOTICE: The expiration date displayed in this record is the date the
> registrar's sponsorship of the domain name registration in the registry is
> currently set to expire. This date does not necessarily reflect the
> expiration
> date of the domain name registrant's agreement with the sponsoring
> registrar.  Users may consult the sponsoring registrar's Whois database to
> view the registrar's reported date of expiration for this registration.
>
> TERMS OF USE: You are not authorized to access or query our Whois
> database through the use of electronic processes that are high-volume and
> automated except as reasonably necessary to register domain names or
> modify existing registrations; the Data in VeriSign Global Registry
> Services' ("VeriSign") Whois database is provided by VeriSign for
> information purposes only, and to assist persons in obtaining information
> about or related to a domain name registration record. VeriSign does not
> guarantee its accuracy. By submitting a Whois query, you agree to abide
> by the following terms of use: You agree that you may use this Data only
> for lawful purposes and that under no circumstances will you use this Data
> to: (1) allow, enable, or otherwise support the transmission of mass
> unsolicited, commercial advertising or solicitations via e-mail, telephone,
> or facsimile; or (2) enable high volume, automated, electronic processes
> that apply to VeriSign (or its computer systems). The compilation,
> repackaging, dissemination or other use of this Data is expressly
> prohibited without the prior written consent of VeriSign. You agree not to
> use electronic processes that are automated and high-volume to access or
> query the Whois database except as reasonably necessary to register
> domain names or modify existing registrations. VeriSign reserves the right
> to restrict your access to the Whois database in its sole discretion to
> ensure
> operational stability.  VeriSign may restrict or terminate your access to
> the
> Whois database for failure to abide by these terms of use. VeriSign
> reserves the right to modify these terms at any time.
>
> The Registry database contains ONLY .COM, .NET, .EDU domains and
> Registrars.
> Domain Name: AEROSOLSCIENCE.COM
> Registry Domain ID: 126329129_DOMAIN_COM-VRSN
> Registrar WHOIS Server: whois.tucows.com
> Registrar URL: http://tucowsdomains.com
> Updated Date: 2014-04-03 03:38:31
> Creation Date: 2004-08-03 15:15:53
> Registrar Registration Expiration Date: 2014-08-03 15:15:53
> Registrar: TUCOWS, INC.
> Registrar IANA ID: 69
> Registrar Abuse Contact Email: domainabuse at tucows.com
> Registrar Abuse Contact Phone: +1.4165350123
> Reseller: Netfirms
> Reseller: support at netfirms.com
> Reseller: +1.866-317-4678
> Reseller: http://netfirms.com
> Domain Status: clientDeleteProhibited
> Domain Status: clientHold
> Domain Status: clientTransferProhibited
> Domain Status: clientUpdateProhibited
> Registry Registrant ID:
> Registrant Name: Werner Bergman
> Registrant Organization: Aerosol Science
> Registrant Street: 6260 Stoneridge Mall Rd. A213
> Registrant City: Pleasanton
> Registrant State/Province: CA
> Registrant Postal Code: 94588
> Registrant Country: US
> Registrant Phone: 9254696922
> Registrant Phone Ext:
> Registrant Fax:
> Registrant Fax Ext:
> Registrant Email: wernerbergman at comcast.net
> Registry Admin ID:
> Admin Name: Werner Bergman
> Admin Organization: Aerosol Science
> Admin Street: 6260 Stoneridge Mall Rd. A213
> Admin City: Pleasanton
> Admin State/Province: CA
> Admin Postal Code: 94588
> Admin Country: US
> Admin Phone: 9254696922
> Admin Phone Ext:
> Admin Fax:
> Admin Fax Ext:
> Admin Email: wernerbergman at comcast.net
> Registry Tech ID:
> Tech Name: Domains Manager
> Tech Organization: Netfirms, Inc.
> Tech Street: 5160 Yonge St
> Tech City: Toronto
> Tech State/Province: ON
> Tech Postal Code: M2N6L9
> Tech Country: CA
> Tech Phone: +1.4166612100
> Tech Phone Ext:
> Tech Fax: +1.4166610700
> Tech Fax Ext:
> Tech Email: support at netfirms.com
> Name Server: NS1.IVENUE.COM
> Name Server: NS2.IVENUE.COM
> DNSSEC: Unsigned
> URL of the ICANN WHOIS Data Problem Reporting System:
> http://wdprs.internic.net/
> >>> Last update of WHOIS database: 2014-04-03 03:38:31 <<<
>
> Registration Service Provider:
>     Netfirms, support at netfirms.com
>     +1.866-317-4678
>     +1.781-998-8586 (fax)
>     http://netfirms.com
>     This company may be contacted for domain login/passwords,
>     DNS/Nameserver changes, and general domain support questions.
>
> The Data in the Tucows Registrar WHOIS database is provided to you by
> Tucows
> for information purposes only, and may be used to assist you in obtaining
> information about or related to a domain name's registration record.
>
> Tucows makes this information available "as is," and does not guarantee its
> accuracy.
>
> By submitting a WHOIS query, you agree that you will use this data only for
> lawful purposes and that, under no circumstances will you use this data to:
> a) allow, enable, or otherwise support the transmission by e-mail,
> telephone, or facsimile of mass, unsolicited, commercial advertising or
> solicitations to entities other than the data recipient's own existing
> customers; or (b) enable high volume, automated, electronic processes that
> send queries or data to the systems of any Registry Operator or
> ICANN-Accredited registrar, except as reasonably necessary to register
> domain names or modify existing registrations.
>
> The compilation, repackaging, dissemination or other use of this Data is
> expressly prohibited without the prior written consent of Tucows.
>
> Tucows reserves the right to terminate your access to the Tucows WHOIS
> database in its sole discretion, including without limitation, for
> excessive
> querying of the WHOIS database or for failure to otherwise abide by this
> policy.
>
> Tucows reserves the right to modify these terms at any time.
>
> By submitting this query, you agree to abide by these terms.
>
> NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.  LACK OF A DOMAIN
> RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.
>
> [todd at tlyons ~]$ dig +trace aerosolscience.com
>
> ; <<>> DiG 9.8.1-P1 <<>> +trace aerosolscience.com
> ;; global options: +cmd
> .            157142    IN    NS    e.root-servers.net.
> .            157142    IN    NS    f.root-servers.net.
> .            157142    IN    NS    g.root-servers.net.
> .            157142    IN    NS    h.root-servers.net.
> .            157142    IN    NS    i.root-servers.net.
> .            157142    IN    NS    j.root-servers.net.
> .            157142    IN    NS    k.root-servers.net.
> .            157142    IN    NS    l.root-servers.net.
> .            157142    IN    NS    m.root-servers.net.
> .            157142    IN    NS    a.root-servers.net.
> .            157142    IN    NS    b.root-servers.net.
> .            157142    IN    NS    c.root-servers.net.
> .            157142    IN    NS    d.root-servers.net.
> ;; Received 512 bytes from 192.168.100.10#53(192.168.100.10) in 19 ms
>
> com.            172800    IN    NS    k.gtld-servers.net.
> com.            172800    IN    NS    f.gtld-servers.net.
> com.            172800    IN    NS    j.gtld-servers.net.
> com.            172800    IN    NS    b.gtld-servers.net.
> com.            172800    IN    NS    a.gtld-servers.net.
> com.            172800    IN    NS    m.gtld-servers.net.
> com.            172800    IN    NS    g.gtld-servers.net.
> com.            172800    IN    NS    i.gtld-servers.net.
> com.            172800    IN    NS    c.gtld-servers.net.
> com.            172800    IN    NS    e.gtld-servers.net.
> com.            172800    IN    NS    h.gtld-servers.net.
> com.            172800    IN    NS    l.gtld-servers.net.
> com.            172800    IN    NS    d.gtld-servers.net.
> ;; Received 496 bytes from 2001:dc3::35#53(2001:dc3::35) in 555 ms
>
> com.            900    IN    SOA    a.gtld-servers.net.
> nstld.verisign-grs.com. 1398197799 1800 900 604800 86400
> ;; Received 112 bytes from 192.43.172.30#53(192.43.172.30) in 150 ms
>
> --
> The total budget at all receivers for solving senders' problems is $0.
>  If you want them to accept your mail and manage it the way you want,
> send it the way the spec says to. --John Levine
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20140422/a320c0a8/attachment.html>


More information about the dns-operations mailing list