CINXE.COM
Mitigating DNS Abuse and Safeguarding the Internet
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <head> <!-- Google Tag Manager --> <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-M665HZ6');</script> <!-- End Google Tag Manager --> <title>Mitigating DNS Abuse and Safeguarding the Internet</title> <meta name="description" content="The internet is a beacon of global connectivity and information, but it has also become a battleground where malicious actors exploit vulnerabilities for various immoral purposes. Domain Name System (DNS) abuse stands has proven a constant in the internet threat landscape, posing risk to the overall digital trust." /> <meta name="keywords" content="cybersecurity, dns, dns-security, icann, internet_governance," /> <meta property="og:description" content="The internet is a beacon of global connectivity and information, but it has also become a battleground where malicious actors exploit vulnerabilities for various immoral purposes. Domain Name System (DNS) abuse stands has proven a constant in the internet threat landscape, posing risk to the overall digital trust." /> <meta property="og:url" content="https://circleid.com/posts/20231031-mitigating-dns-abuse-and-safeguarding-the-internet" /> <meta property="og:type" content="article" /> <meta property="og:title" content="Mitigating DNS Abuse and Safeguarding the Internet" /> <meta property="og:image" content="https://circleid.com/images/member_photos/photo_9367.jpg" /> <meta name="twitter:site" content="@circleid" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <link rel="alternate" type="application/rss+xml" title="CircleID Master Feed" href="http://feeds.circleid.com/cid_master/" /> <link rel="shortcut icon" type="image/ico" href="/favicon.ico" /> <link rel="stylesheet" type="text/css" media="all" href="/css/base.css" /> <link rel="stylesheet" type="text/css" media="all" href="/css/banners.css" /> <link rel="stylesheet" type="text/css" media="all" href="/css/posts.css" /> <script>document.documentElement.className = "js";</script> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script> <link href="https://fonts.googleapis.com/css2?family=PT+Serif:ital,wght@0,400;0,700;1,400;1,700&family=Roboto+Condensed:wght@400;700&family=Roboto+Mono:wght@300;400;700&family=Roboto:ital,wght@0,400;0,500;0,700;0,900;1,400;1,700&display=swap" rel="stylesheet"> <script type="text/javascript" src="/js/jq.clickmenu/jq.clickmenu.min.js"></script> <script type="text/javascript" src="/js/jq.scrollable/scrollable.min.js"></script> <script async src="https://cse.google.com/cse.js?cx=003374819184044847448:yb5rk7pq36s"></script> <!-- font awesome --> <script defer src="/fontawesome-free-6.6.0-web/js/brands.js"></script> <script defer src="/fontawesome-free-6.6.0-web/js/solid.js"></script> <script defer src="/fontawesome-free-6.6.0-web/js/fontawesome.js"></script> <div id="fb-root"></div> <script>(function (d, s, id) { var js, fjs = d.getElementsByTagName(s)[0]; if (d.getElementById(id)) return; js = d.createElement(s); js.id = id; js.src = "//connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.5"; fjs.parentNode.insertBefore(js, fjs); }(document, 'script', 'facebook-jssdk'));</script> <script language="javascript" type="text/javascript" src="/js/html_buttons/html_buttons.min.js"></script> <script type="text/javascript" src="/js/js.textarearesizer/jquery.textarearesizer.min.js"></script> <link rel="stylesheet" type="text/css" media="all" href="/js/js.textarearesizer/textarearesizer.css" /> <script type="text/javascript" src="/js/jq.cid.postpage.js"></script> </head> <body> <div id="header"> <a href="/"><img class="headerLogo" src="/images/circleid.svg" border="0"/></a> <div class="headerLinks"> <span> Welcome: <a href="https://circleid.com/account/login">Login</a> | <a href="https://circleid.com/account/signup">Sign Up</a> | <a href="https://circleid.com/about">About CircleID</a> </span> <span> Follow: <a href="https://x.com/circleid" class="socialIcon"><i class="fa-brands fa-square-x-twitter"></i></a> | <a href="https://www.facebook.com/circleid/" class="socialIcon"><i class="fa-brands fa-square-facebook"></i></a> | <a href="https://www.linkedin.com/company/circleid" class="socialIcon"><i class="fa-brands fa-linkedin"></i></a> | <a href="http://feeds.circleid.com/cid_master/" class="socialIcon"><i class="fas fa-rss-square"></i></a> </span> </div> <div class="clear"></div> </div> <noscript> <div id="headerAlert"> WARNING: JavaScript is either disabled or not supported by your browser. You may encounter problems using various features on CircleID. </div> </noscript> <div id="headerNav"> <div id="headerNavContent"> <div id="headerNavMenu"> <ul> <li ><span class="head_menu"><a href="/">Home</a></span></li> <li> <span class="head_menu"><a href="https://circleid.com/topics">Topics</a><img src="/js/jq.clickmenu/arrow.gif" class="arrow" /></span> <div class="subMenu" style="width:480px;"> <table border="0" cellpadding="0" cellspacing="0"> <tr> <td> <a href="https://circleid.com/topics/access_providers">Access Providers</a> <a href="https://circleid.com/topics/artificial-intelligence">Artificial Intelligence</a> <a href="https://circleid.com/topics/blockchain">Blockchain</a> <a href="https://circleid.com/topics/brand_protection">Brand Protection</a> <a href="https://circleid.com/topics/broadband">Broadband</a> <a href="https://circleid.com/topics/censorship">Censorship</a> <a href="https://circleid.com/topics/cloud_computing">Cloud Computing</a> <a href="https://circleid.com/topics/cyberattack">Cyberattack</a> <a href="https://circleid.com/topics/cybercrime">Cybercrime</a> <a href="https://circleid.com/topics/cybersecurity">Cybersecurity</a> <a href="https://circleid.com/topics/data_center">Data Center</a> <a href="https://circleid.com/topics/ddos_attack">DDoS Attack</a> <a href="https://circleid.com/topics/dns">DNS</a> <a href="https://circleid.com/topics/dns-security">DNS Security</a> <a href="https://circleid.com/topics/domain-management">Domain Management</a> <a href="https://circleid.com/topics/domain_names">Domain Names</a> <a href="https://circleid.com/topics/email">Email</a> <a href="https://circleid.com/topics/enum">Enum</a> <a href="https://circleid.com/topics/gaming">Gaming</a> <a href="https://circleid.com/topics/icann">ICANN</a> <a href="https://circleid.com/topics/internet_governance">Internet Governance</a> <a href="https://circleid.com/topics/internet_of_things">Internet of Things</a> <a href="https://circleid.com/topics/internet_protocol">Internet Protocol</a> <a href="https://circleid.com/topics/ipv4-markets">IPv4 Markets</a> </td> <td style="border-left:1px solid #d5d5d5;border-right:1px solid #d5d5d5;padding:0 4px;"> <a href="https://circleid.com/topics/iptv">IPTV</a> <a href="https://circleid.com/topics/ipv6-transition">IPv6 Transition</a> <a href="https://circleid.com/topics/law">Law</a> <a href="https://circleid.com/topics/malware">Malware</a> <a href="https://circleid.com/topics/mobile_internet">Mobile Internet</a> <a href="https://circleid.com/topics/multilinguism">Multilinguism</a> <a href="https://circleid.com/topics/net_neutrality">Net Neutrality</a> <a href="https://circleid.com/topics/networks">Networks</a> <a href="https://circleid.com/topics/new_tlds">New TLDs</a> <a href="https://circleid.com/topics/p2p">P2P</a> <a href="https://circleid.com/topics/policy_regulation">Policy & Regulation</a> <a href="https://circleid.com/topics/privacy">Privacy</a> <a href="https://circleid.com/topics/regional_registries">Regional Registries</a> <a href="https://circleid.com/topics/registry_services">Registry Services</a> <a href="https://circleid.com/topics/satellite-internet">Satellite Internet</a> <a href="https://circleid.com/topics/spam">Spam</a> <a href="https://circleid.com/topics/telecom">Telecom</a> <a href="https://circleid.com/topics/udrp">UDRP</a> <a href="https://circleid.com/topics/voip">VoIP</a> <a href="https://circleid.com/topics/vpn">VPN</a> <a href="https://circleid.com/topics/web">Web</a> <a href="https://circleid.com/topics/white_space">White Space</a> <a href="https://circleid.com/topics/whois">Whois</a> <a href="https://circleid.com/topics/wireless">Wireless</a> </td> <td style="padding:0 0 0 4px;"> <div class="itemTitle">Display Options:</div> <a href="https://circleid.com/topics">List by Popularity</a> <a href="https://circleid.com/topics/chart">Chart by Popularity</a> </td> </tr> </table> </div> </li> <li> <span class="head_menu"><a href="https://circleid.com/blogs">Blogs</a><img src="/js/jq.clickmenu/arrow.gif" class="arrow" /></span> <div class="subMenu"> <a href="https://circleid.com/blogs">Latest</a> <a href="https://circleid.com/blogs/recently_discussed">Recently Discussed</a> <a href="https://circleid.com/blogs/most_discussed">Most Discussed</a> <a href="https://circleid.com/blogs/most_viewed">Most Viewed</a> </div> </li> <li> <span class="head_menu"><a href="https://circleid.com/news">News</a><img src="/js/jq.clickmenu/arrow.gif" class="arrow" /></span> <div class="subMenu"> <a href="https://circleid.com/news">Latest</a> <a href="https://circleid.com/news/recently_discussed">Recently Discussed</a> <a href="https://circleid.com/news/most_discussed">Most Discussed</a> <a href="https://circleid.com/news/most_viewed">Most Viewed</a> </div> </li> <li> <span class="head_menu"><a href="https://circleid.com/community">Community</a><img src="/js/jq.clickmenu/arrow.gif" class="arrow" /></span> <div class="subMenu"> <a href="https://circleid.com/community">Recently Featured</a> <a href="https://circleid.com/community/most_featured">Most Featured</a> <a href="https://circleid.com/community/most_active">Most Active</a> <a href="https://circleid.com/community/most_read">Most Read</a> <a href="https://circleid.com/community/recent_members">Recent Members</a> <a href="https://circleid.com/community/top_100" class="itemLine">Top 100 Leaderboard</a> <a href="https://circleid.com/community/alphabetical" class="itemLine">Alphabetical View</a> <a href="https://circleid.com/community/random">Random View</a> <a href="https://circleid.com/comments" class="itemLine">Recent Comments</a> </div> </li> <li> <span class="head_menu"><a href="https://circleid.com/industry">Industry</a><img src="/js/jq.clickmenu/arrow.gif" class="arrow" /></span> <div class="subMenu"> <a href="https://circleid.com/industry">Latest Posts</a> <a href="https://circleid.com/industry/most_viewed">Most Viewed</a> <a href="https://circleid.com/industry/leaderboard">Leaderboard</a> <a href="https://circleid.com/industry/members" class="itemLine"><strong>CircleID Members:</strong></a> <a href="/members/8495">CSC</a> <a href="/members/9196">Brand Registry Group</a> <a href="/members/9484">DNIB.com</a> <a href="/members/7855">i2Coalition</a> <a href="/members/1582">Godaddy Registry</a> <a href="/members/8076">Internet Commerce Association</a> <a href="/members/8622">IPv4.Global</a> <a href="/members/6851">Radix Registry</a> <a href="/members/8414">Threat Intelligence Platform (TIP)</a> <a href="/members/5593">Verisign</a> <a href="/members/8352">WhoisXML API</a> </div> </li> </ul> </div> <style> /* Search Box */ form.gsc-search-box { font-size: 14px; margin: 0 0 0 0; width: 100%; padding:0; } table.gsc-search-box td.gsc-input { padding:0 3px 5px 0; } /* Search input */ .gsc-input { font-size: 15px; } /* Search Button */ .gsc-search-button-v2 { font-size: 0; padding: 7px 12px; width: auto; vertical-align: middle; margin: -5px 0 0 0; } </style> <!-- search --> <div style="width:300px;float:right;margin: 0;padding: 0;"> <div class="gcse-searchbox-only"></div> </div> <!-- search --> <div class="clear"></div> </div> </div> <!-- Benner - Leaderboard --> <div style="width: 995px; margin: 0 auto 4px auto"> <a href="/pp/global-domain-report" ><img style="width: 995px" src="/images/industry/sponsor/internetx/banner_horizontal_internetx.webp" alt="" /></a> </div> <!-- PAGE BODY --> <div class="container2c"> <div class="colWrapper"> <div class="colA"> <div class="colPad"> <!-- POST --> <div id="postPage"> <!-- if not result --> <h2> <a href="/" class="red">Home</a> / <a href="https://circleid.com/blogs" class="red">Blogs</a> </h2> <!-- post title --> <!-- <div style="background-color:#fdd663;padding:12px 12px 15px 12px;margin-bottom:24px;font-size: 16px;line-height: 24px;"> <i class="fa-solid fa-circle-arrow-right" style="color:#800000;"></i> <strong>To our readers:</strong> Does your company offer <span style="border-bottom:2px solid #800000;">DNS</span> or <span style="border-bottom:2px solid #800000;">DNS Security</span> services? CircleID has an opening for <span style="border-bottom:2px solid #800000;">an exclusive sponsor</span> for our DNS topic. Gain unparalleled results with our deep market integration. Get in touch: <a href="mailto:ads@circleid.com">ads@circleid.com</a> </div> --> <h3> <a href="https://circleid.com/posts/20231031-mitigating-dns-abuse-and-safeguarding-the-internet" class="blue">Mitigating DNS Abuse and Safeguarding the Internet</a> </h3> <!-- post meta --> <table class="postMeta"> <!-- row 1 --> <tr> <!-- --> <td class="image" rowspan="2"> <a href="https://circleid.com/members/9367" title="Ashley Heineman"><img class="photo" src="/images/member_photos/photo_9367.jpg"></a> </td> <!-- --> <td class="name" colspan="2" > <span class="author"> By <a class="blue" href="https://circleid.com/members/9367" title="Ashley Heineman"><strong>Ashley Heineman</strong></a> </span> <span class="author authorTitle">Director of Government and Industry Affairs at GoDaddy</span> </td> </tr> <!-- row 2 --> <tr> <td class="date" > <ul class="dateline"> <li>October 31, 2023</li> <li>Views: 20,412</li> <li><a href="#comments" class="blue">Add Comment</a></li> </ul> </td> <td class="share" colspan="2"> <div class="addthis_inline_share_toolbox sharePost"></div> </td> </tr> </table> <!-- post body --> <div class="body"> <div style="margin-top: 24px;"></div> <p>The internet is a beacon of global connectivity and information, but it has also become a battleground where <a href="https://www.cisa.gov/topics/cybersecurity-best-practices">malicious actors</a> exploit vulnerabilities for various immoral purposes. Domain Name System (DNS) abuse stands has proven a constant in the internet threat landscape, posing risk to the overall digital trust. Understanding the significance of robust mitigation strategies is not just a matter of technological advancement; it is a fundamental necessity for safeguarding the integrity of the online world we rely on daily.</p> <p>GoDaddy embarked on a journey to <a href="https://www.godaddy.com/resources/skills/demystifying-dns-abuse-understanding-the-digital-threat-landscape">demystify the intricate world of DNS abuse</a>, unraveling the complexities of this persistent digital threat. We laid out the nuances, challenges and implications of DNS abuse, delving deep into its multifaceted nature. As we continue our exploration, it is crucial to recognize the profound importance of DNS abuse mitigation in today’s rapidly evolving digital landscape.</p> <p>This blog builds upon our previous insights, shedding light on the challenges DNS abuse poses for registries, registrars and the broader internet community. It is essential to provide a comprehensive understanding of the proactive measures taken by industry leaders, including GoDaddy, so that internet users can more safely navigate, search, transact, communicate and learn with confidence.</p> <h4>Lost in Translation When Reporting Abuse</h4> <p>The Internet Corporation for Assigned Names and Numbers (<a href="https://www.icann.org/">ICANN</a>) is the global multistakeholder governing body responsible for managing the domain name space and developing policy. ICANN’s governance is conducted in part through contractual relationships with <a href="https://www.godaddy.com/help/what-is-the-difference-between-a-registry-registrar-and-registrant-8039">registries and registrars</a> of domain names. These contracts establish the rules for how <a href="https://www.icann.org/en/accredited-registrars">ICANN-accredited registrars</a> and <a href="https://www.icann.org/resources/pages/registries/registries-en">registries</a> (known as ‘Contracted Parties’) operate and engage with each other, as well as with their customers and users of the DNS.</p> <p>To date, contractual requirements for Contracted Parties regarding DNS abuse have been limited, mainly asking for contact information to report abuse and the expectation of a “response.” While the intention was to provide Contracted Parties with maximum flexibility and discretion to address reported abuse, often, the interpretation of the contractual requirements was to acknowledge receiving the report without necessarily acting upon the abuse itself. While some Contracted Parties are making significant investments in their efforts to mitigate DNS abuse, there is still a gap as not everyone has fully committed to these actions.</p> <h4>Taking Steps Towards Change</h4> <p>In December 2022, a historic milestone occurred within ICANN. For the first time, the Registries and Registrar Stakeholder Groups (<a href="https://gnso.icann.org/en/about/stakeholders-constituencies/rysg">RySG</a> and <a href="https://rrsg.org/">RrSG</a>) voluntarily initiated negotiations with ICANN to <a href="https://www.icann.org/en/system/files/correspondence/heineman-demetriou-to-marby-04nov22-en.pdf">propose</a> amendments to their contracts. These proposed amendments, in Section 3.18 of the Registrar Accreditation Agreement (<a href="https://www.icann.org/en/system/files/files/proposed-2013-raa-global-amendment-11sep23-en.pdf">RAA</a>) and the Base Generic Top-Level Domain (gTLD) Registry Agreement (<a href="https://www.icann.org/en/system/files/files/proposed-base-gtld-ra-global-amendment-11sep23-en.pdf">Base RA</a>), aim to make it crystal clear that action must be taken by Contracted Parties upon receiving well-evidenced DNS abuse reports.</p> <p>As chair of RrSG, I want to highlight that the primary goal of these changes is to establish a baseline obligation for Contracted Parties to take reasonable and appropriate measures to combat and disrupt malicious registrations involved in DNS abuse. ICANN, along RySG and RrSG, have worked expeditiously in negotiating these targeted amendments over the past nine months. These changes establish crucial requirements that we are confident will make a meaningful impact on DNS abuse mitigation.</p> <h4>Next Steps in Combating Abuse</h4> <p>Our collective and collaborative efforts strive to continuously enhance the integrity of the DNS. To this end, the ICANN global stakeholder community continues to take the initiative to combat DNS abuse head-on. This year, ICANN organized several <a href="https://www.icann.org/resources/pages/global-amendment-2024-en/#news-archive">information sessions</a> with Contracted Parties to discuss the DNS abuse amendments, voting processes and procedures, and addressed questions. In a recent session held at the <a href="https://www.icann.org/en/system/files/files/dns-abuse-discussions-schedule-ids-04sep23-en.pdf">ICANN DNS Symposium</a> in Vietnam, GoDaddy’s Vice President of Government and Industry Affairs <a href="https://www.linkedin.com/in/james-bladel/">James Bladel</a> represented the company in a roundtable discussion where the dialogue centered on what components Contracted Parties are putting in place to address issues of DNS abuse and how they plan to meet these obligations.</p> <p>In the wake of those productive discussions in Vietnam, setting the stage for decisive action, on <a href="https://www.icann.org/en/blogs/details/icann-contracted-parties-set-to-vote-on-proposed-dns-abuse-amendments-05-10-2023-en">Oct. 9, 2023</a>, ICANN opened a 60-day voting period for all ICANN-accredited registrars and gTLD registry operators to cast their <a href="https://www.icann.org/resources/pages/global-amendment-2024-en#:~:text=The%20proposed%20amendments%20will%20enable,disrupt%20well%2Devidenced%20DNS%20Abuse.">vote on the proposed amendments to the RAA and Base RA</a>. This period marks a notable step in our collective efforts to combat DNS abuse. We’re pleased to share that GoDaddy wholeheartedly supports these amendments and voted ‘YES,’ showing our commitment to doing our part to create a safer and more secure online environment.</p> <h4>Empowering a Safer Online Future</h4> <p>In the face of DNS abuse challenges, our collective effort to strengthen online safety has never been stronger. This journey, from unraveling the complexities of DNS abuse to forging meaningful and significant milestone amendments, underscores our determination to safeguard the internet’s integrity.</p> <p>As we stand on the precipice of change to reduce malicious activities in the DNS, the collaborative strides of ICANN and all industry leaders, including GoDaddy, echo our dedication to fostering a secure, resilient and trusting online space for all.</p> <div class="affiliate-box"> <span style="color:pink;">NORDVPN DISCOUNT</span> - CircleID <span style="font-family: Arial, Helvetica, sans-serif;">x</span> NordVPN<br> <a href="https://go.nordvpn.net/aff_c?offer_id=15&aff_id=109931&url_id=902" class="affiliate-box-link" target="_blank">Get NordVPN</a> [74% +3 extra months, from $2.99/month] <!-- <div class="toggle-container"> <div id="toggle-header" class="toggle-header">10 facts about NordVPN that aren't commonly known</div> <ul id="toggle-list" class="toggle-list"> <li><strong>Meshnet Feature for Personal Encrypted Networks:</strong> NordVPN offers a unique feature called Meshnet, which allows users to connect their devices directly and securely over the internet. This means you can create your own private, encrypted network for activities like gaming, file sharing, or remote access to your home devices from anywhere in the world.</li> <li><strong>RAM-Only Servers for Enhanced Security:</strong> Unlike many VPN providers, NordVPN uses RAM-only (diskless) servers. Since these servers run entirely on volatile memory, all data is wiped with every reboot. This ensures that no user data is stored long-term, significantly reducing the risk of data breaches and enhancing overall security.</li> <li><strong>Servers in a Former Military Bunker:</strong> Some of NordVPN's servers are housed in a former military bunker located deep underground. This unique location provides an extra layer of physical security against natural disasters and unauthorized access, ensuring that the servers are protected in all circumstances.</li> <li><strong>NordLynx Protocol with Double NAT Technology:</strong> NordVPN developed its own VPN protocol called NordLynx, built around the ultra-fast WireGuard protocol. What sets NordLynx apart is its implementation of a double Network Address Translation (NAT) system, which enhances user privacy without sacrificing speed. This innovative approach solves the potential privacy issues inherent in the standard WireGuard protocol.</li> <li><strong>Dark Web Monitor Feature:</strong> NordVPN includes a feature known as Dark Web Monitor. This tool actively scans dark web sites and forums for credentials associated with your email address. If it detects that your information has been compromised or appears in any data breaches, it promptly alerts you so you can take necessary actions to protect your accounts.</li> </ul> </div> --> </div> </div> <!-- post footer --> <div class="footerByline"> By <strong><a href="https://circleid.com/members/9367" class="blue-u">Ashley Heineman</a>, Director of Government and Industry Affairs at GoDaddy</strong> </div> <h2>Filed Under</h2> <div class="footerTopics"> <ul><li><a href="/topics/cybersecurity">Cybersecurity</a></li><li><a href="/topics/dns">DNS</a></li><li><a href="/topics/dns-security">DNS Security</a></li><li><a href="/topics/icann">ICANN</a></li><li><a href="/topics/internet_governance">Internet Governance</a></li</ul> <div class="clear"></div> </div> </div> <!-- comments --> <style> .comment-children.level_1 { margin-left: 0px; } .comment-children.level_2 { margin-left: 20px; } .comment-children.level_3 { margin-left: 40px; } .comment-children.level_4 { margin-left: 60px; } .comment-children.level_5 { margin-left: 80px; } </style> <h2 class="underPost">Comments</h2> <div id="comments"> </div> <div id="cmntForm"> <a name="add_comment"></a> <div id="cmntPreview" style="display: none;"> <p>COMMENT PREVIEW</p> <div id="livePreview"></div> </div> <form id="comment_form" method="post" action="https://circleid.com/posts/20231031-mitigating-dns-abuse-and-safeguarding-the-internet" > <div class='hiddenFields'> <input type="hidden" name="ACT" value="1" /> <input type="hidden" name="RET" value="+5VRfjq7jhA6UTtCYvwaJkAI1MhtdWNzQLFcHWgVHtCNDtjz0bGMiOdC+r8x3+SS8QuzVF0bzDcN/EpagYyzeqMe5DqsQ4Tb3rj7j8jAtA4KBY6uKsMrT6NPUQLGnvzUP6d4RlxXbnu7ImILh4+l9g==" /> <input type="hidden" name="URI" value="posts/20231031-mitigating-dns-abuse-and-safeguarding-the-internet" /> <input type="hidden" name="PRV" value="" /> <input type="hidden" name="entry_id" value="14284" /> <input type="hidden" name="parent_id" value="0" /> <input type="hidden" name="site_id" value="1" /> <input type="hidden" name="csrf_token" value="1b0e6120b1889fa593a3859e8b5b5f648f6a82e7" /> </div> <input type="hidden" name="name" value=""/> <input type="hidden" name="email" value=""/> <div id="cmntEdit"> <p><strong>Comment Title:</strong></p> <input class="inputTitle" type="text" name="headline" maxlength="100"><p></p> <textarea name="comment" cols="70" rows="10"></textarea> </div> <div id="cmntButtons"> <p style="margin:0 0 10px 0;"><input style="padding:0;margin:0;" type="checkbox" name="notify_me" value="yes" /> Notify me of follow-up comments</p> <input type="submit" name="submit" value="Submit" /> <p style="line-height:1.4em;color:#666;margin-top:12px;">We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see <a href="http://www.circleid.com/about/codes/" class="blue">Codes of Conduct.</a></p> </div> </form> </div> <!-- Start Newsletter Subscription Box --> <div class="newsletterSignUpBox"> <span class="header">CircleID Newsletter</span> <span class="subHeader">The Weekly Wrap</span> <p>More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.</p> <!-- Begin MailChimp Signup Form --> <div id="mc_embed_signup"> <form action="https://circleid.us15.list-manage.com/subscribe/post?u=71b27c0808a16ff6f58bfc4fc&id=5b2ca1a85f" method="post" id="mc-embedded-subscribe-form" name="mc-embedded-subscribe-form" class="validate" target="_blank" novalidate> <div id="mc_embed_signup_scroll"> <div class="mc-field-group"> <input style="padding:4px 8px;width:150px;font-size: 14px;" type="email" value="" name="EMAIL" class="required email" id="mce-EMAIL" placeholder="Enter your email address"> <input style="padding:7px 12px;" type="submit" value="Subscribe" name="subscribe" id="mc-embedded-subscribe" class="button"> </div> <div id="mce-responses" class="clear"> <div class="response" id="mce-error-response" style="display:none"></div> <div class="response" id="mce-success-response" style="display:none"></div> </div> <div style="position: absolute; left: -5000px;" aria-hidden="true"> <input type="text" name="b_71b27c0808a16ff6f58bfc4fc_5b2ca1a85f" tabindex="-1" value=""> </div> </div> </form> </div> <!--End MailChimp Signup Form --> </div> <!-- End Newsletter Subscription Box --> <!-- related posts --> <h2 class="underPost">Related</h2> <div id="relatedPosts"> <h3 style="padding-top:0;margin-top:0;border:none;"><a href="/posts/malicious-ads-targeting-advertisers-in-the-dns-spotlight">Malicious Ads Targeting Advertisers in the DNS Spotlight</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/8352" class="blue">WhoisXML API</a></li> <li>Mar 21, 2025 12:05 PM PDT</li> <li>Views: 1,892</li> </ul> </div> <h3><a href="/posts/the-2024-2026-root-zone-ksk-rollover-initial-observations-and-early-trends">The 2024-2026 Root Zone KSK Rollover: Initial Observations and Early Trends</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/3397" class="blue">Duane Wessels</a></li> <li>Mar 19, 2025 11:29 AM PDT</li> <li>Views: 2,358</li> </ul> </div> <h3><a href="/posts/beyond-whois-circleid-and-edgemoor-research-institute-second-event-on-filling-the-gaps">Beyond WHOIS: CircleID and Edgemoor Research Institute Second Event on ‘Filling the Gaps’</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/501" class="blue">CircleID Reporter</a></li> <li>Mar 19, 2025 11:04 AM PDT</li> <li>Views: 2,373</li> </ul> </div> <h3><a href="/posts/sneaking-a-peek-into-the-inner-dns-workings-of-sneaky-2fa">Sneaking a Peek into the Inner DNS Workings of Sneaky 2FA</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/8352" class="blue">WhoisXML API</a></li> <li>Mar 18, 2025 10:39 AM PDT</li> <li>Views: 2,852</li> </ul> </div> <h3><a href="/posts/africas-digital-darkness-internet-shutdowns-reach-record-high">Africa’s Digital Darkness: Internet Shutdowns Reach Record High</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/501" class="blue">CircleID Reporter</a></li> <li>Mar 11, 2025 12:04 PM PDT</li> <li>Views: 6,895</li> </ul> </div> <h3><a href="/posts/unloading-mintsloader-iocs-using-dns-intelligence">Unloading MintsLoader IoCs Using DNS Intelligence</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/8352" class="blue">WhoisXML API</a></li> <li>Mar 10, 2025 1:52 PM PDT</li> <li>Views: 5,520</li> </ul> </div> <h3><a href="/posts/bad-news-from-the-2025-munich-security-conference-cyberspace-gets-weaponized">Bad News From the 2025 Munich Security Conference: Cyberspace Gets Weaponized</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/5851" class="blue">Wolfgang Kleinw盲chter</a></li> <li>Mar 10, 2025 1:18 PM PDT</li> <li>Views: 6,264</li> </ul> </div> <h3><a href="/posts/dns-spotlight-rockstar2fa-shuts-down-flowerstorm-starts-up">DNS Spotlight: Rockstar2FA Shuts Down, FlowerStorm Starts Up</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/8352" class="blue">WhoisXML API</a></li> <li>Mar 08, 2025 9:56 AM PST</li> <li>Views: 5,815</li> </ul> </div> <h3><a href="/posts/cyber-resilience-resources-restructuring">Cyber Resilience Resources Restructuring</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/6809" class="blue">Anthony Rutkowski</a></li> <li>Mar 08, 2025 9:45 AM PST</li> <li>Views: 4,888</li> </ul> </div> <h3><a href="/posts/dns-deep-dive-peeking-into-back-doors-to-abandoned-but-live-backdoors">DNS Deep Dive: Peeking into Back Doors to Abandoned but Live Backdoors</a></h3> <div class="dateLine pipedLinks"> <ul> <li><a href="https://circleid.com/members/8352" class="blue">WhoisXML API</a></li> <li>Mar 03, 2025 9:55 AM PST</li> <li>Views: 3,230</li> </ul> </div> <a href="{path=/posts" class="sectionFooter red">More</a> </div> </div> </div> </div> <div class="colB"> <div class="colPad"> <!-- sponsored topics --> <h2><a href="https://circleid.com/topics" class="red">Topics</a></h2> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/cybersecurity">Cybersecurity</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">Verisign</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsored_topic_box/verisign.jpg" border="0" alt="Verisign" /> </div> <div class="clear"></div> </div> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/dns">DNS</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">DNIB.com</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsored_topic_box/dnib.svg" border="0" alt="DNIB.com" /> </div> <div class="clear"></div> </div> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/ipv4-markets">IPv4 Markets</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">IPv4.Global</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsor/ipv4global/ipv4global.svg" border="0" alt="IPv4.Global" /> </div> <div class="clear"></div> </div> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/threat-intelligence">Threat Intelligence</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">WhoisXML API</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsored_topic_box/whoisxmlapi.svg" border="0" alt="WhoisXML API" /> </div> <div class="clear"></div> </div> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/brand_protection">Brand Protection</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">CSC</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsored_topic_box/cscglobal.png" border="0" alt="CSC" /> </div> <div class="clear"></div> </div> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/new_tlds">New TLDs</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">Radix</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsored_topic_box/radix.svg" border="0" alt="Radix" /> </div> <div class="clear"></div> </div> <div class="sponsoredTopicCard"> <div class="textContainer"> <h3><a href="/topics/domain_names">Domain Names</a></h3> <p><span class="sponsoredBy">Sponsored by</span><span class="companyName">Verisign</span></p> </div> <div class="logoContainer"> <span class="helper"></span><img class="logo" src="/images/industry/sponsored_topic_box/verisign_com_net.svg" border="0" alt="Verisign" /> </div> <div class="clear"></div> </div> <a href="https://circleid.com/topics" class="sectionFooter red" style="margin-top:6px;">View All Topics</a> <!-- Benner - Leaderboard --> <div style="width: 300px; margin: 0 auto 36px auto"> <a href="/pp/global-domain-report" ><img style="width: 300px" src="/images/industry/sponsor/internetx/banner_vertical_internetx.webp" alt="" /></a> </div> </div> </div> <div class="clear"></div> </div> <!-- PAGE FOOTER --> <div id="footer"> <div id="footerContent"> <div style="float:left;"> <a href="/"><img src="/images/circleid.svg" border="0" style="width:140px;opacity: 0.9;" /></a><br /> <p style="font-size:14px;padding:11px 0 15px 0;margin:0;">A World-Renowned Source for Internet Developments. Serving Since 2002.</p> </div> <div style="float:right;"> <p style="font-size:12px;padding:0 0 10px 0;margin:0;line-height:1em;text-align:right;letter-spacing:0.05em;">FOLLOW</p> <a href="https://x.com/circleid" class="socialIcon"><i class="fa-brands fa-square-x-twitter"></i></a> <a href="https://www.facebook.com/circleid/" class="socialIcon"><i class="fa-brands fa-square-facebook"></i></a> <a href="https://www.linkedin.com/company/circleid" class="socialIcon"><i class="fa-brands fa-linkedin"></i></a> <a href="http://feeds.circleid.com/cid_master/" class="socialIcon"><i class="fas fa-rss-square"></i></a> </div> <div id="links" class="clear"> CIRCLEID: <a href="https://circleid.com/about">About</a> | <a href="https://circleid.com/about/contact">Contact Us</a> <br /> SECTIONS: <a href="/">Home</a> | <a href="https://circleid.com/topics">Topics</a> | <a href="https://circleid.com/blogs">Featured Blogs</a> | <a href="https://circleid.com/news">News Briefs</a> | <a href="https://circleid.com/industry">Industry Updates</a> | <a href="https://circleid.com/community">Community</a> <br /> TERMS OF USE: <a href="https://circleid.com/about/codes">Codes of Conduct</a> | <a href="https://circleid.com/about/privacy">Privacy Policy</a> | <a href="https://circleid.com/about/terms">Terms of Use</a> <br /><br /> Copyright © 2002-2025 CircleID. All rights reserved unless where otherwise noted. <br />Local Time: Thursday, March 27, 2025 12:19 PM PDT – Page Load: 3.4328 Sec. </div> </div> </div> <!-- addthis social share --> <script type="text/javascript" src="//s7.addthis.com/js/300/addthis_widget.js#pubid=ra-59f3b79af5b33318"></script> <script type="text/javascript"> $(document).ready(function(){ $('.reply').click(function() { $('#comment_form input[name=parent_id]').val($(this).attr('rel')); $('#comment_form').insertAfter( // Insert the comment form after... $(this) .parent() // The containing li tag ); $('#comment_form').show(); }); $('.quote').click(function() { $('#comment_form textarea[name=comment]').val('[quote]'+ $(this).parent().parent().find('.comment-text').text()+ '[/quote]' ); }); }); </script> <script language="javascript"> $(document).ready(function() { // First section for handling table row clicks $('#topicSponsor tr').click(function() { window.location.href = $(this).find("a").attr("href"); }); // Second section for handling banner clicks $(".ppBannerHorizontal,.ppBannerVertical,.sponsoredTopicCard").click(function(){ if($(this).find("a").length){ window.location.href = $(this).find("a:first").attr("href"); } }); // Ensure the toggle list functionality works after DOM is ready const toggleHeader = document.getElementById('toggle-header'); const toggleList = document.getElementById('toggle-list'); // Adding click event listener to toggle the list if(toggleHeader && toggleList) { // Ensure the elements exist toggleHeader.addEventListener('click', function () { toggleList.style.display = toggleList.style.display === 'block' ? 'none' : 'block'; toggleHeader.classList.toggle('open'); }); } else { console.error('Toggle elements not found!'); } }); </script> </body> </html>