<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div lang="EN-US" vlink="purple" link="blue" bgcolor="#ffffff"><div class="Section1"><div style="border-right-width: medium; border-right-style: none; border-right-color: initial; padding-right: 0in; border-top-width: medium; border-top-style: none; border-top-color: initial; padding-left: 4pt; padding-bottom: 0in; border-left-color: blue; border-left-width: 1.5pt; border-left-style: solid; padding-top: 0in; border-bottom-width: medium; border-bottom-style: none; border-bottom-color: initial; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span class="Apple-style-span" style="font-family: Arial; "> </span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; ">Attached is a paper that was created by the Domain Name System Policy Working Group of the Anti-Phishing Working Group. This compilation of this paper was initiated because of the formation of your group - the DNSPWG wanted to determine whether or not phishers use domain tasting.<o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; ">In general, the conclusions are that phishers do not use domain tasting but domain tasting does negatively impact the anti-phishing organizations due to increased infrastructure needs for monitoring domain registrations.<o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; ">If you have questions about this paper, don't hesitate to contact me.<o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; ">-<span class="Apple-style-span" style="color: rgb(20, 79, 174); font-size: 14px; -webkit-text-stroke-width: -1; "> </span></span></font></div></div></div></div></span></div></body></html>