New document: 5 minutes to understand Phishing as a Service (PhaaS)

5 minutes to understand Phishing as a Service (PhaaS)

Phishing-as-a-Service (PhaaS) is a fast-growing phenomenon in the cyberthreats world, getting armed with tools that make it more and more prosperous.

It has opened up the online fraud market to the masses, to the point that phishing attempts have become a daily plague.

Find in this new “5 minutes to understand” document, available for download on the Nameshield’s website, how phishing is now sold in ready-to-use kit and how to protect against it.

Afnic Registrar Day is back

Afnic Registrar Day

On January 10, the new edition of Registrar Day was held, organized by AFNIC, the registry of the .FR extension, this event is mainly intended for registrars.

While the event was usually held in December, this new edition, which was both accessible in person and remotely, and which took place after the pandemic period, was held at the beginning of this year, a way to place ourselves “in a new dynamic,” according to Pierre Bonis, AFNIC’s Director General.

The Registrar Day was an opportunity to review the highlights of the year 2022 for the organization, the most notable being the deployment of a new registry system on October 1 and the renewal by the French government of the .FR management concession for a new 5-year period. This renewal is accompanied by the implementation of new commitments such as access to registration data for authorized authorities or a strengthening of the fight against domain abuse.

In terms of figures, it should be noted that in 2022, .FR passed the 4 million mark in volume of domain names, a faster growth than the median rate of 2.0% recorded by the Council of European National Top-Level Domain Registries (CENTR) for the year 2022 at the level of European ccTLDs. It is worth noting that .FR ranks third in terms of volume among the ccTLDs of the European Union, behind .DE (Germany) with some 17 million domains and .NL (Netherlands) with more than 6 million domains, and is tied for 7th place with .AU (Australia) at the global level among the 308 ccTLDs delegated to the root 1  

1 Source Verisign

Image source : Afnic’s website

The .FR counts today 4 million domain names

Managed by AFNIC (acronym for Association Française pour le Nommage Internet en Coopération – French Association for Cooperative Internet Naming, the French Network Information Center), the favorite extension of the French people has reached 4 million registered domain names!

Every week, between 12,000 and 16,000 new .FR domain names are registered. The .FR has become a reference domain, with a market share in France of nearly 40%, which has been growing for several years, particularly thanks to the digital transformation of French VSEs/SMEs. Thus, more than 50% of them have chosen a .FR domain name for their website.

Easy to register and inexpensive, this extension is synonym of trust and recognized for its reliability, with 87% of French people trusting it! For more information and to register your domain name in .FR, do not hesitate to contact a Nameshield consultant.

Image source : site de l’AFNIC

Nameshield will be present at the FIC North America – On November the 1st and 2nd 2022 in Montreal

Nameshield will be present at the FIC North America - On November the 1st and 2nd 2022 in Montreal

The International Cybersecurity Forum, has become in its 15 years of existence, the largest cybersecurity and digital trust event in Europe, with 19,000 participants, 550 private and public sponsors, 520 speakers and 60 countries represented. With the support of the Canadian and French authorities, the event is crossing the Atlantic and will take place in Montreal, Canada, on November the 1st and 2nd, for its first North American edition.

The FIC North America aims to bring together the cybersecurity and digital trust communities on both sides of the Atlantic to discuss the major challenges our digital societies are facing.

Meet us at the event.

Meet our experts and discover our global solutions that answer to the requirements of DNS security and the need to monitor, protect and defend your brands online.

For more information and to register, please visit the event’s website: https://america.forum-fic.com/

ICANN75, a dense summit before the ITU plenipotentiary meeting

Barely three months after the ICANN74 summit in The Hague, the one in Kuala Lumpur, 75th edition, has just been held. A second summit in hybrid mode, a mix of face-to-face and remote that claims almost 2000 participants from 112 countries, 60% of which were present on the spot. As if to better exist, two weeks before the particularly important appointment of a new secretary general at the head of the International Telecommunication Union, the technical counterpart of ICANN, ICANN proposed a dense summit. NAMESHIELD looks back over.

The sensitive appointment of a new general secretary at the head of the ITU

During the traditional opening ceremony of the ICANN75 summit, Goran Marby, the current head of the organization said “ICANN must be able to continue its mission for a single Internet“. This remark was referring to concerns about the upcoming appointment of a new general secretary to head the ITU, the UN agency in charge of regulating and planning telecommunications worldwide. After two mandates, the current secretary, the Chinese Houlin Zhao, will indeed give up his place to one of the two candidates in the running to succeed him: Doreen BOGDAN-MARTIN, an American or Rashid ISMAILOV, a Russian. Two candidates and two different visions of governance models as Goran Marby indicates: “One of the candidates wants the transfer of competences from the IETF (the Internet Engineering Task Force develops and promotes Internet standards) and ICANN to the UN“. During another question and answer session with the ICANN Board, the election was again invited in the exchanges since it was question of the increased risks of fragmentation of the DNS and the unique identifiers system if the ICANN missions are entrusted to the States. Later in the week, during a cross session between the ICANN Board and the GAC, the governmental body, the Russian representative of the GAC took advantage of a speech to answer in Russian to Goran Marby’s remarks, explaining that the Russian candidate at the head of the ITU does not want to dismantle the Internet. To better support his remarks he communicated the program of the candidate. Things calmed down at the end of ICANN75 during the traditional public forum, which we can regret that it lasted only one hour, a forum where once again the Russian representative of the GAC took the floor in English indicating that Russia is not against the Internet governance model and that it was necessary to take care to reflect the Russian position with accuracy.

The fragmentation of the ICANN model, a major concern

A sign that Internet fragmentation has become a major concern is that this topic was subject to a dedicated session. An interactive survey among the participants revealed that 53% of them consider that the Internet is already fragmented. The reasons mentioned are, on the one hand, the imbalance observed for access to the Internet from one continent to another, Africa being the least well endowed in this area. Other sources of fragmentation mentioned are the cost of subscriptions, which makes access impossible for the poorest, and the multiplication of laws at the state levels, which in some cases prevent full access to this resource, and in others prevent controlled access.

On the problems of connectivity in the world, Goran Marby emphasized the project “ICANN Ground”, a program under construction that will allow to solicit funds on specific needs. The endowment will come from the auctions of the new generic extensions round of 2012, some 233 million US dollars. Ukraine was the first state helped by ICANN with an emergency aid of 1 million US dollars made available in spring.

Is this good will enough to keep the unique Internet, totem of the organization? Indeed, apart from the political and societal fields, the technical alternatives, the so-called “alternative” roots, notably based on blockchain, have also been mentioned. These add new problems due to the lack of community and inter-community coordination with the DNS players. Name collisions indeed become inevitable.

So, to those who indicate that some actors are tempted to turn away from ICANN because of the length of the processes on the issues to be addressed, the organization answers that it is the price to pay for a community functioning by consensus. And on the subjects in debate, it is necessary to notice that there is no lack of them.

The period of amendments, the failure of the accuracy scoping team

As a sign that things are moving forward, the Registration Data Policy resulting from a revision of the Temporary Specification applied in response to the General Data Protection Regulation (GDPR) is entering its final stretch with implementation scheduled for early 2023. This policy will embed measures applied to registries and registrars on the collection, processing and storage of personal data related to domain names.

The Registration Data Access Protocol (RDAP), which is used to publish domain name registration data in the same way as Whois, will be gradually replaced by Whois from next year, with a transitional phase of 18 months, provided that the majority of stakeholders approve the project during a forthcoming consultation. The idea of introducing additional measures in the contracts of the stakeholders to fight against DNS abuse is also gaining ground.

Other topics are still in development, such as the next round of new generic extensions, which we discuss below, and the Standardized System to Access Data (SSAD), which is intended to standardize access to registration data in the case of legitimate requests. A prototype will be developed over a period of 9 months.

But we could also note what has been described as the “failure” of the Accuracy Scoping Team, a working group that was supposed to evaluate the measures on the accuracy of domain name registration data and to identify the possible policy gaps. Indeed, due to the lack of a legal basis to access the data and thus assess the accuracy of the data, their mission could not be carried out. Their work is therefore stopped.  

A next series of new generic extensions under the impulse of internationalized extensions

The next series of new generic extensions, still in the framing phase, has been mentioned as a response to fragmentation thanks to internationalized extensions, extensions in native language, which allow, according to the words of Goran Marby, “to bring the Internet closer to its users“.  He hopes that the next series of new generic extensions will be “a real success from the point of view of internationalized extensions because the Internet is too often perceived as a Western instrument“. The ICANN Board also mentioned these internationalized extensions as a response to the accelerated concentration of the market because they can help “raise awareness of the need for a diversified ecosystem“. Internationalized extensions should benefit from a new spotlight with the launch next year of the first Universal Acceptance Day, on February 16. This event is intended to mobilize the technical community to take into account this type of extensions and domain names.

Comments from NAMESHIELD

We could fear that with the proximity of this summit with the previous one, hardly three months have passed since the ICANN74, this summit lacks substance because of the lack of time to progress on the debated subjects. In fact, the third and last annual ICANN meeting is usually held at the end of October. It is necessary to notice that ICANN75 has not lacked substance, either on the subjects that were discussed or on the particularly high number of sessions: 167 and things move forward. As some participants have indicated, we can regret a certain lack of interactivity with, for example, a Public forum shortened to one hour and sometimes a bit simplistic answers like Internationalized gTLDs to mitigate the concentration of our sector. On this subject, we can remind that NAMESHIELD is an independent French provider.

If the year 2022 has seen fragmentation become a central topic of ICANN summits, one may wonder if this extremely dense summit, anticipated compared to previous years, did not seek to be perceived as a marker of the usefulness of the ICANN organization in the face of current challenges, a summit placed just before the decisive election of the new General Secretary of the IUT. To the numerous animated sessions in the arcane of the ICANN now makes place the silence to follow this determining designation for the perpetuity of the organization or as to better hold its breath.

Nameshield will be present at the Brand Protection Congress – On October the 19th and 20th, 2022 in Nice

Nameshield will be present at the Brand Protection Congress

The global outbreak of COVID-19 has given cybercriminals the opportunity to take advantage of the situation to sell counterfeit products. Protecting the organization’s intellectual property and consumers’ trust is now more important than ever.

The Brand Protection Congress is a high-class brand protection event which aims to allow brand owners to discuss the industry challenges they are facing and their potential solutions.

This 7th edition will take place in Nice, at the Hotel Le Negresco, on October the 19th and 20th. The topics range from the various online anti-counterfeiting tools, the latest technological developments, the liability of intermediaries, and the various methods that brands have adopted to protect their rights.

Meet us at the event, booth n°8.

With nearly 30 years of experience in online brands protection, Nameshield assists brands in order to protect, monitor and defend their digital territories.

Nameshield has developed effective and relevant tools, associated with an expert consulting offer allowing brands to preserve their integrity and assert their rights.

Meet our experts and discover our full range of monitoring and services:

  • Domain names monitoring (new registrations / content / whois etc.)
  • Web and social networks monitoring
  • Trademark and domain names portfolio audit
  • Remediation solutions, recovery procedures and acquisition by our in-house legal department.

For more information and to register, please visit the event’s website: https://worldbigroup.com/7th-Brand-Protection/

Opening date of Turkish extensions moved forward to September 14, 2022

Opening date of Turkish extensions moved forward to September 14, 2022

In an article of August 16, we announced the activation of TRABIS on September, the 29th. This opening date has been updated to September, the 14th.

The system of paperless allocation on the following extensions: .COM.TR, .NET.TR, .ORG.TR is now activated!

In anticipation, do not hesitate to protect your domain names before this future opening by contacting your consultants and account managers.

Image source : smuldur via Pixabay

You still have until September, the 20th to register your .AU domain name identical to your .COM.AU!

.AU domain names

The priority allocation period for .AU direct closes on 20 September 2022. If you hold a domain name in any other .au namespace (eg. com.au, org.au, id.au etc.), created prior to 24 March 2022, you are able to apply for Priority Status to register its exact match in .au direct until this date.

Domains on priority hold will be released on Monday 3 October 2022.

To be eligible to register a domain name in .au direct (forexample.au), the registrant must have an Australian presence as defined in licensing rules of AUDA.

For foreign companies, this means they must have a trademark registered with IP Australia, and the domain name must be an exact match of the trademark.

If the launch of .AU direct represents an opportunity for companies wishing to gain visibility on the Australian Web, it also constitutes a risk for trademark holders in case of reservation of domain names identical to their trademarks from a third party (whether it is a cybersquatter with the opportunity to register with a connection to Australia or a homonymous rights holder).

For any information, don’t hesitate to contact your Nameshield’s expert.

Image source: kitkatty007 via Pixabay

Upcoming liberalization of Turkish extensions

Upcoming liberalization of Turkish extensions

We announced recently that the administration of extensions in Turkey was changing and was entrusted to TRABIS and that the liberalization of .com.tr, .net.tr and .org.tr was imminent.

The starting date of the system called TRABIS (.tr Network Information System), which covers the management and operation of the system and database of domain names in Turkey, was announced at the meeting organized by BTK on 22/07/2022.

It is confirmed, TRABIS will be launched on September, the 29th 2022.

We can expect to see the date of liberalization of the Turkish extensions: .com.tr, .org.tr and .net.tr to be specified in the following days.

At the moment, it is still necessary to send documents to register your domain names in Turkey, and this until September, the 29th 2022.

In anticipation, do not hesitate to protect your domain names before this future opening by contacting your consultants and account managers.

Image source : adrimarie via Pixabay

[New gTLD] Launch of .KIDS

[New gTLD] Launch of .KIDS

Managed by DotKids Foundation, a non-profit organization, the new extension .KIDS will be launched on August, the 11th in Sunrise period.

Dedicated to children, parents, educators, communities and groups related to child protection, .KIDS is an extension dedicated to all subjects related to children.

The mission of DotKids is:

• to create a dedicated Internet space for kids, supporting and advocating for a better cyberspace favorable to the positive development of kids;

• to serve as a source of support to children’s rights and welfare initiatives, especially related to the Internet.

.KIDS Launch Schedule

The launch of .KIDS will proceed according to the following schedule:

  • TMCH Sunrise period: from 11/08/2022 to 14/09/2022

Reserved for holders of trademarks registered in the TMCH.

  • Community Sunrise period: from 20/09/2022 to 19/10/2022

Reserved for non-profit organizations, institutions or charities whose main mission is to advocate for children’s rights, children’s well-being, education or child-welfare.

  • Pioneer Domains period: from 19/10/2022 to 29/11/2022

Reserved for the participants of the .KIDS Pioneer Program, which aims to encourage active and positive use and the development of relevant content for .KIDS domain names. The program is designed to identify qualified applicants with the best potential and capabilities to maximize the development of a domain name in children’s best interest.

  • General availability: from 29/11/2022

Protection Policy

The registry has implemented protective Guiding Principles that require .KIDS domain name holders to not post any illegal or inappropriate content, to protect the privacy and confidentiality of the personal data of children who visit their website.

For more information on the conditions for registration of your .KIDS, please contact your Nameshield consultant.

Image source: https://www.nic.kids/