These might be the top 10 biggest new gTLD daily growth spikes

With news seeping out this evening that XYZ.com’s latest marketing blitz has very possibly added half a million domains to its .xyz gTLD today, I thought I’d knock out some data on the previous largest one-day growth spikes in new gTLDs.
With some caveats, which I’ll get to, I think these might be the top 10 growth days for new gTLDs.
[table id=41 /]
They’re the only 10 spikes of over 100,000 domains I could confirm in the DI PRO database, at least in 2012-round gTLDs.
With .xyz reportedly adding at least 400,000 domains today, due to several registrars basically giving them away, it’s certainly going to be at the top of this table tomorrow.
XYZ is celebrating its second anniversary of general availability tomorrow, and has invested several million bucks in promotions on registrars which are in turn selling .xyz names for as little as a penny apiece.
As mentioned, there are some caveats to the data in the table above.
It’s based on the zone files published daily by ICANN’s Centralized Zone Data Service, which can be patchy.
CZDS is set up in such a way that each user has missing days here and there, and it has in the not too distant past had a tendency to balk when it receives an unexpectedly large zone file.
In other words, there’s a pretty good chance I’ve missed some spikes, but I’m confident there’s nothing else approaching 400,000 in a day.
UPDATE: .vip should be on the table, with a one-day spike of 115,245 on May 18 2016.

2 Comments Tagged: .xyz, new gTLDs, xyz.com

ICANN proposes pricing changes for new gTLDs

ICANN is to give gTLD registries greater power to change their pricing under a proposed new deal.
The organization also says it could accept reduced fees from registries under some circumstances.
These are among about 40 substantial changes appearing in a new version of the standard new gTLD Registry Agreement that has been put out for comment.
The proposed new RA was posted last night after ICANN and registries spent months negotiating the details behind closed doors.
The contract would apply to registries that have signed the base new gTLD contract, not legacy gTLDs such as .com (though, in the passage of time, leaks may occur).
Many of the changes seek to bring clarity to registries’ technical obligations, particularly during their launch phases, and their data reporting requirements.
But there are a few notable changes concerning fees.
First, it seems registrars are going to be stripped of their right to challenge registry fee increases through the ICANN process.
Currently, any substantial changes to their Registry-Registrar Agreements has to go through scrutiny by ICANN and the registrars, and the registrars are allowed to object to the changes.
We saw such objections at the start of the year with .sucks, but RRA changes usually happen a few times a month.
Under the proposed new RA, that process would no longer apply when the only change made to an RRA is to change the registry fee.
Registrars would still have to be provided with 30 to 180 days notice, depending on the extent of the fee change, but there would be no ICANN review or registrar challenge process.
ICANN reasons that this is sensible because, unlike legacy gTLDs, its new gTLD contracts don’t regulate prices anyway.
Second, ICANN has introduced a new “Fee Reduction Waiver” concept to the contract. The draft deal states:

In ICANN’s sole discretion, ICANN may reduce the amount of registry fees payable hereunder by Registry Operator for any period of time (“Fee Reduction Waiver”). Any such Fee Reduction Waiver may, as determined by ICANN in its sole discretion, be (a) limited in duration and (b) conditioned upon Registry Operator’s acceptance of the terms and conditions set forth in such waiver. A Fee Reduction Waiver shall not be effective unless executed in writing by ICANN as contemplated by Section 7.6(i). ICANN will provide notice of any Fee Reduction Waiver to Registry Operator in accordance with Section 7.9.

It’s not entirely clear who asked for this or why.
I can imagine scenarios in which struggling registries might seek a handout from cash-rich ICANN, or in which dot-brands whose registrations are not linked to revenue might ask for a waiver.
Dot-brands — that is, registries that have signed Specification 13 of the RA — also get some love in the new RA, including an effective right of veto over changes that could affect their special status.
If in future an RA change is proposed that would effectively amend Spec 13, it will not happen unless Spec 13 registries vote in favor of the change.
The vote would require a two-thirds majority, with registries voting power weighted according to how much they pay ICANN in registry fees.
The whole contract is now open for a 43-day public comment period, which you can find here.

Comment

Registrars selling .xyz names for pennies

XYZ.com’s campaign to keep its volumes high as .xyz approaches its second anniversary seem to have resulted in basically free registrations.
Uniregistry said yesterday that it has started selling .xyz domains for just $0.01, and NameCheap is offering them for $0.02.
The prices, which apply to first-year registrations, kicked in yesterday and expire at midnight June 3.
Over in China, Xin Net and West.cn are both pricing the domains at a relatively huge CNY 2 ($0.30).
I expect there are similar offers at other registrars too.
West.cn. the largest .xyz registrar, said last week that it is also subsidizing renewals for the month of June, bringing the cost down to $2.73.
The aforementioned registrars have big splashes announcing the offers on their home pages.
XYZ said Friday that it has put aside “several million dollars” to advertise its birthday on registrar storefronts and elsewhere.
Uniregistry said that from June 3 to June 30 the price will be just $0.18.
Uniregistry’s current .xyz volume is measured in the tens of thousands. It’s ranked just behind Go Daddy, which does not appear to be participating in this promotion, by .xyz domains under management.
.xyz went into general availability June 2, 2014.
Since August 2015, not long after its anniversary deletes have been substantially outstripping renewals, but adds have been going nuts.
It has about 2.8 million domains in its zone file right now, two million of which have been added in the last 12 months.
Despite the anniversary hoopla this time around, there was not a big spike in .xyz registrations around its first birthday last year, when it added a fairly normal 50,000 or so domains.

2 Comments Tagged: namecheap, uniregistry, west.cn, xin net, xyz.com

West.cn to prop up .xyz renewals with $1.5 million subsidy

Leading Chinese registrar West.cn has said it will subsidize .xyz renewals to the tune of $1.5 million.
According to a West.cn press release, CEO He Xiaojiang made the announcement alongside XYZ.com counterpart Daniel Negari at meeting in Beijing on Friday.
The registrar’s .xyz customers “are going to get high rebate back from West.cn so that they can get very low renewal fees”, according to a translation of the original Chinese.
The subsidized renewal price, which starts in June, will be RMB 18 ($2.73), according to the company.
That’s about a $7 discount on West.cn’s usual renewal price of RMB 64.
First-year .xyz prices at the registrar are currently RMB 8 ($1.22).
West.cn is believed to have well over a million .xyz domains on its books. With over a third market share, it’s XYZ.com’s biggest registrar.
The press release points out that West.cn is not getting a special rate from XYZ (which would be against ICANN rules).
Negari declined to elaborate on the specifics of the subsidy.
But in what is no doubt a related move, he told DomainInvesting.com yesterday that XYZ has “reserved several million dollars to be spent with registrars and on advertising platforms for our 2 year anniversary”.
This ad spend will be made over the month of June, he said, to coincide with the June 2, 2014 general availability launch of .xyz.
Fifty registrars are participating, he said, calling it the “biggest sale” the industry has seen.
Whether through heavily discounted renewals or bargain first-year regs, it seems the company is set on making sure its DUM volume does not dip as its anniversary approaches.
It’s not unusual for registries to do special offers to coincide with launch birthdays.
.xyz currently has about 2.8 million registered domains, but about 1.8 million of those were registered after June 2015 and are not in need of renewal before the promotion period expires (though registrants can of course renew whenever they like).

4 Comments Tagged: Chengdu West Dimension, new gTLDs, renewals, subsidy, west.cn, xyz.com

CentralNic doing okay out of new gTLDs

Local former rival Minds + Machines may be struggling to turn a profit, but CentralNic seems to be doing quite well out of this new gTLD malarkey.
But not as well as you might expect. Large growth at its clients does not appear to have translated to a whole lot more revenue for CentralNic itself.
The company yesterday reported 2015 profit before tax of £1.45 million ($2.13 million), compared to £520,000 in 2014, on revenue up 71% at £10.39 million ($15.28 million).
While it may be best known nowadays as a back-end registry provider, its revenue is now fairly evenly split over its three reporting segments.
CentralNic runs the back-end registry for volume gTLDs including .xyz and Radix’s .site, .online, .website, and .space.
The company calls this “wholesale domain sales”, and it brought in £3.12 million last year, compared to £2.82 million in 2014.
You might think that the volume success of .xyz, which added about a million names in 2015, might have translated into a bigger boost, but it didn’t.
Its registrar business, which it got into through the acquisitions of Internet.bs and Instra, brought in £3.4 million, compared to £1.55 million in 2014.
Its third segment, “Enterprise including Premium Domain Name Sales” saw revenue of £3.85 million, compared to $1.69 million.
The enterprise business, which also included two software licenses and revenue from dot-brand clients, is easily the most profitable segment, with a 67% EBITDA margin. For wholesale, it’s 44%.
The £3.8 million of enterprise revenue included £3.22 million premium name sales, of which over £3 million came from a single buyer.
It’s not clear whether this was a single domain deal or a package of premiums, but it represents the most volatile element of CentralNic’s revenue.
Update (May 30) — This article originally misidentified “Company A” and “Company B” in CentralNic’s accounts as registry clients. In fact, according to CEO Ben Crawford, they’re registrar channel partners.

Comment Tagged: .xyz, centralnic, earnings, xyz.com

Verisign says new gTLDs put millions at risk

Verisign has revived its old name collisions security scare story, publishing this week a weighty research paper claiming millions are at risk of man-in-the-middle attacks.
It’s actually a study into how a well-known type of attack, first documented in the 1990s, might become easier due to the expansion of the DNS at the top level.
According to the paper there might be as many as 238,000 instances per day of query traffic intended for private networks leaking to the public DNS, where attackers could potentially exploit it to all manner of genuinely nasty things.
But Verisign has seen no evidence of the vulnerability being used by bad guys yet and it might not be as scary as it first appears.
You can read the paper here (pdf), but I’ll attempt to summarize.
The problem concerns a virtually ubiquitous protocol called WPAD, for Web Proxy Auto-Discovery.
It’s used by mostly by Windows clients to automatically download a web proxy configuration file that tells their browser how to connect to the web.
Organizations host these files on their local networks. The WPAD protocol tries to find the file using DHCP first, but fails over to DNS.
So, your browser might look for a wpad.dat file on wpad.example.com, depending on what domain your computer belongs to, using DNS.
The vulnerability arises because companies often use previously undelegated TLDs — such as .prod or .global — on their internal networks. Their PCs could belong to domains ending in .corp, even though .corp isn’t real TLD in the DNS root.
When these devices are roaming outside of their local network, they will still attempt to use the DNS to find their WPAD file. And if the TLD their company uses internally has actually been delegated by ICANN, their WPAD requests “leak” to registry or registrant.
A malicious attacker could register a domain name in a TLD that matches the domain the target company uses internally, allowing him to intercept and respond to the WPAD request and setting himself up as the roaming laptop’s web proxy.
That would basically allow the attacker to do pretty much whatever he wanted to the victim’s browsing experience.
Verisign says it saw 20 million WPAD leaks hit its two root servers every single day when it collected its data, and estimates that 6.6 million users are affected.
The paper says that of the 738 new gTLDs it looked at, 65.7% of them saw some degree of WPAD query leakage.
The ones with the most leaks, in order, were .global, .ads, .group, .network, .dev, .office, .prod, .hsbc, .win, .world, .one, .sap and .site.
It’s potentially quite scary, but there are some mitigating factors.
First, the problem is not limited to new gTLDs.
Yesterday I talked to Matt Larson, ICANN’s new vice president of research (who held the same post at Verisign’s until a few years ago).
He said ICANN has seen the same problem with .int, which was delegated in 1988. ICANN runs one of .int’s authoritative name servers.
“We did a really quick look at 24 hours of traffic and saw a million and a half queries for domain names of the form wpad.something.int, and that’s just one name server out of several in a 24-hour period,” he said.
“This is not a new problem, and it’s not a problem that’s specific to new gTLDs,” he said.
According to Verisign’s paper, only 2.3% of the WPAD query leaks hitting its root servers were related to new gTLDs. That’s about 238,000 queries every day.
With such a small percentage, you might wonder why new gTLDs are being highlighted as a problem.
I think it’s because organizations typically won’t own the new gTLD domain name that matches their internal domain, something that would eliminate the risk of an attacker exploiting a leak.
Verisign’s report also has limited visibility into the actual degree of risk organizations are experiencing today.
Its research methodology by necessity was limited to observing leaked WPAD queries hitting its two root servers before the new gTLDs in question were delegated.
The company only collected relevant NXDOMAIN traffic to its two root servers — DNS queries with answers typically get resolved closer to the user in the DNS hierarchy — so it has no visibility to whether the same level of leaks happen post-delegation.
Well aware of the name collisions problem, largely due to Verisign’s 11th-hour epiphany on the subject, ICANN forces all new gTLD registries to wildcard their zones for 90 days after they go live.
All collision names are pointed to 127.0.53.53, a reserved IP address picked in order to catch the attention of network administrators (DNS uses TCP/IP port 53).
Potentially, at-risk organizations could have fixed their collision problems shortly after the colliding gTLD was delegated, reducing the global impact of the vulnerability.
There’s no good data showing how many networks were reconfigured due to name collisions in the new gTLD program, but some anecdotal evidence of admins telling Google to go fuck itself when .prod got delegated.
A December 2015 report from JAS Advisors, which came up with the 127.0.53.53 idea, said the effects of name collisions have been rather limited.
ICANN’s Larson echoed the advice put out by security watchdog US-CERT this week, which among other things urges admins to use proper domain names that they actually control on their internal networks.

15 Comments Tagged: ICANN, name collisions, new gTLDs, security, verisign, wpad

1,000th new gTLD goes live

The 1,000th new gTLD from the 2012 application round was delegated yesterday.
It was either .shop or .realestate, appropriately enough, which both appear to have been added to the DNS root zone at about the same time.
Right now, there are actually only 999 new gTLDs live in the DNS. That’s because the unwanted .doosan was retired in February.
During its pre-launch planning for the new gTLD program, ICANN based its root zone stability planning on the assumption that fewer than 1,000 TLDs would be added to the root per year.
In reality, it’s taken much longer to reach that threshold. The first few new gTLDs were added in late October 2013, 945 days ago.
On average, in other words, a new gTLD has been added to the root slightly more than once per day.
Over that same period, nine ccTLDs — internationalized domain names applied for via a separate ICANN program — have also gone live.
The 1,000th new gTLD to be added to the IANA database was .blog.
There are 1,314 TLDs in the root all told.

5 Comments Tagged: ., .realestate, ICANN, new gTLDs, root

M+M makes $3.2 million in five days from .vip

Minds + Machines has billed $3.2 million in .vip domain names sales after the first five days of operation, the company said this morning.
It’s already managed to pay off the cost of acquiring the domain at the September 2014 auction, which was $3.1 million.
Between 1600 UTC May 17, when .vip went to general availability, and the same time May 22, the gTLD racked up 203,720 domains, the company said.
The $3.2 million is a “billings” number, which will convert to accounting revenue over the lifetime of the domains.
For comparison, billings in the whole of 2015 was $7.9 million.
M+M now has over half a million domains under management, a 64% increase from the start of the year, the company said.
Registrations from China, where presumably owning a .vip name does not make you look like a douchebag, accounted for over 80% of the registrations. Almost half of its registrars are Chinese.
Major Chinese registrars are currently selling .vip names for CNY 25-26 (about $4) apiece.
The discrepancy between that low price and the $3.2 million (which implies an average wholesale price of about $16) is due to the effects of premiums, sunrise and multi-year registrations, CEO Toby Hall told DI.
M+M, like the vast majority of TLD registries, is not currently licensed in China, so these names will not legally be allowed to be developed into sites until the company has gone through the full governmental approval process.
Hall said in a press release:

The Chinese market for top-level domains is real and we are delighted to have accessed this key region through the .vip launch… It is a major milestone for the Company, the new management team and our business model centred on working with best-in-class partners across every aspect of our business so as to best monetize our assets while maintaining a tight control on central overheads. It demonstrates that, when properly executed, how quickly the initial investment costs for a domain can be recovered and the potential for a strong recurring revenue established. The .vip launch equally illustrates how as a b2b business we do not have to burn funds on marketing to reach end-consumers and achieve outstanding results.

He’s referring there primarily to M+M’s ongoing restructuring, which has seen the company ditch its registrar business in favor of a more heavily channel-focused approach.

Comment Tagged: .vip, Minds + Machines, new gTLDs

SpamHaus now publishing better TLD abuse data

SpamHaus has updated its “10 Most Abused Top Level Domains” list to provide a much more useful insight into abuse levels.
Rather than simply showing unexplained percentages of “badness” in each TLD, the spam-fighting organization’s daily report now exposes the hard numbers, in domain terms, underneath.
For example, on today’s list Famous Four Media’s .download is the most-abused TLD with 82% bad domains.
That percentage is based on SpamHaus categorizing 11,431 domains as abusive of the 13,945 .download domains that crossed its systems.
But the gTLD has 67,500 domains in its zone file, so the actual percentage of abusive domains could be as low as about 17%, much lower than SpamHaus’s 82%.
Whether you think the 82% metric is fair will depend on whether you think SpamHaus’s sample — about 20% of the full .download zone — is representative.
Some of the other TLDs on its list have even smaller sample sizes.
Minds + Machines’ .work is ranked #2 on the SpamHaus list with 73.3% badness, based on a SpamHaus-seen sample of 6,297 domains, something like 7% of the full .work zone.
Registries criticized SpamHaus for publishing misleading data when this list was first published in March, and I agreed with them.
Now that the group is publishing empirical data alongside its percentages, the conversation can now shift to something along the lines of:
“Is it okay that at least 17% of .download domains are abusive?”
To which the answer I believe is a clear: “Hell, no.”
The SpamHaus daily report can be found here.

13 Comments Tagged: abuse, famous four, Minds + Machines, spam, spamhaus

ICANN to publish board meeting transcripts

In a surprising move towards further transparency, the ICANN board of directors has decided to start publishing transcripts and possibly recordings of its meetings.
It passed a resolution during a meeting in Amsterdam this week stating:

the Board directs the President and CEO, or his designee(s), to work with the Board to develop a proposed plan for the publication of transcripts and/or recordings of Board deliberative sessions, with such plan to include an assessment of possible resources costs and fiscal impact, and draft processes to: (i) ensure the accuracy of the transcript; and (ii) for redaction of portions of the transcript that should be maintained as confidential or privileged.

Transcription services can be picked up dirt cheap, so I can’t see money getting in the way of this proposal becoming a reality.
A question mark of course hangs over the “confidential or privileged” carve-out, of course. ICANN is sometimes over-generous with what it considers redactable material.
Still, it’s great news for the ICANN community, which has been calling for greater board transparency for years.
When I started covering ICANN back in 1999, board sessions at the then four-times-a-year public meetings were conducted in the open; all the thinking was done aloud.
At some point in the early 2000s that stopped, however, and the board’s public sessions became a case of rubber-stamping resolutions that had already been debated behind closed doors.
Minutes, staff-prepared briefing materials and broad-stroke narrative reports have been published, but they give limited insight into the depth of the discussions.
Chair Steve Crocker has even stated in recent years that its goal was to make these public sessions “as boring as possible”.
That’s obviously no good for those of us who’d like to know how top-level decisions at ICANN actually get made.
The plan is for new CEO Goran Marby, who starts on Monday, to come up with a proposal before the Helsinki meeting next month, with a view to start publishing transcripts not long thereafter

Comment Tagged: ICANN