The recently discovered security vulnerability in one of ICANN’s web sites revealed how much Donuts was willing to pay for contested gTLDs at auction.
This worrying claim emerged during a meeting between registries and the ICANN board of directors at ICANN 53 in Buenos Aires yesterday.
“We were probably the largest victim of the data breach,” Donuts veep Jon Nevett told the board. “We had our financial data reviewed numerous times, dozens of times. We had our relative net worth of our TLDs reviewed, so it was very damaging information.”
He was referring to the misconfiguration in the new gTLD applicants’ portal, which allowed any user to view confidential application attachments belonging to any applicant.
But it was not until late May that it emerged that only one person, dotBerlin CEO Dirk Krischenowski, was suspected by ICANN of having deliberately viewed data belonging to others.
Nevett said communication should have been faster.
“We were in the dark for a number of weeks about who saw the data,” he told the board. “That was troubling, as we were going to auctions in that interim period as well.”
Donuts, which applied for over 300 new gTLDs, is known to have taken a strictly numbers-driven approach to string selection and auction strategy.
If a rival in a contention set had known how much Donuts was prepared to pay for a string, it would have had a significant advantage in an auction.
In response to Nevett’s concerns, ICANN CEO Fadi Chehade said that ICANN had to do a thorough investigation before it could be sure who saw what when.
XYZ.com has added .security and .protection to its portfolio of new gTLDs under a private deal with security software maker Symantec.
Symantec originally applied for both as closed generics, but changed its plans when ICANN changed its tune about exclusive access gTLDs.
The company won .security in an auction against Donuts and Defender Security late last year; .protection was uncontested. It lost auctions for .cloud and .antivirus.
Symantec’s .symantec and .norton, both dot-brands, are currently in pre-delegation testing.
XYZ already owns .college, .rent and of course .xyz.
In other news, Afilias has acquired .promo, which was in PDT with applicant Play.Promo Oy, in a private auction.
UPDATE: A couple of hours after this post was published, XYZ announced it has also acquired .theatre, which will compete with Donuts’ .theater, from KBE gTLD Holding Inc.
The soon-to-be-auctioned new gTLD .hiv has a reserve price of $200,000, but the registry reckons it’s worth as much as $700,000.
That’s according to auction documents provided by dotHIV Registry to DI today.
The documents also reveal that .hiv has made
a profit revenue of $83,000 in its first seven months.
UPDATE: Germany-based dotHIV says now that the reference to “net income” in its prospectus was a translation error. The $83,000 refers to revenue — the top line, not the bottom line. The company intends to update its auction documents “instantly”.
Earlier today we reported that the gTLD is to go under the hammer with Innovative Auctions on June 3/4.
We reported that the gTLD had about 2,000 registrations, but it turns out that number includes about 1,700 registry-reserved names.
The actual number, as of March 31, is 410, of which 345 pay the $179 annual registry fee. Another 63 domains were given away for free to HIV charities for a three-year period.
While this generated a
net income revenue of $83,000, registry CEO Carolin Silbernagl confirmed to DI that its contract with ICANN is supposed to require “all” of its profits to be donated to HIV causes.
According to the documents:
Public Interest Commitment binds the TLD to non-profit operations. All excess profit, after the deduction of all thinkable costs and investments, is to be donated to a charitable cause of the owner’s choice.
We have founded and built the .hiv TLD as a tool for positive social impact. To safeguard this vision, the voluntary PIC in the .hiv Registry Agreement binds the owner to invest all excess profit in the projects that support the fight against AIDS.
All this comes at no risk for the registry: Operational costs are covered first. No one expects you to donate if there is no surplus. Costs include the purchase price of the TLD in this auction.
The registry’s documents affirm that the key reason to buy .hiv would be to boost your public image due to “corporate social responsibility”.
The buyer would also get free marketing support from the German ad agency thjnk and free data escrow from NCC Group until July 2017, along with a bunch of software dotHIV uses to manage the TLD.
According to dotHIV, there were 14,000 pre-registrations with registrars prior to launch. Most balked at the high registration fee and did not convert into buyers.
The registry says the new owner could capitalize on some of this interest, growing volumes, by reducing its registry fee.
There are 47 registrars accredited to sell .hiv domains, including Go Daddy.
Premium names sold so far, for between $1,500 and $5,000, include: treat.hiv, test.hiv, cure.hiv, prevent.hiv, magazin.hiv, hivanswers.hiv, prävention.hiv, prep.hiv, vorsorge.hiv.
If dotHIV makes a profit from selling the gTLD, it says it will donate it to HIV charities.
Don’t all rush to your checkbooks at once.
The live TLD .hiv is going to be among the next batch of new gTLDs auctioned off by Innovative Auctions, but the contract comes with a no-profit clause.
Innovative and dotHIV Registry announced the sale yesterday.
.hiv is an unsuccessful gTLD so far. It had just over 2,000 registered names at the end of 2014, according to registry reports, but never more than 423 the names have been present in the DNS.
Registry CEO Carolin Silbernagl said:
In the eight months since our launch we have gained a lot of insight about what it needs to reach this. The reason why we are offering .hiv for sale is because we see how successful it can be. However, we realized that dotHIV is not the right vehicle for the next phase – the TLD needs a bigger and more international home to truly spread its wings.
It went to general availability last August, with an innovative but risky business model based around charitable micro-donations to HIV/AIDS causes.
Of the $200 annual retail fee, dotHIV put $120 into a pool reserved for charities. Every visit to a .hiv that was participating in a “Click Counter” service would cause a small amount of that money to actually be donated.
Judging by visits to a few .hiv domains this morning, just €862 — less than $1,000 — has been donated so far, based on fewer than 133,000 clicks.
This donation model is “just one of many possible uses” and not a contractual requirement, according to Silbernagl.
There is, however, a binding Public Interest Commitment that obliges the registry to give “all excess profits” to HIV causes. The PIC reads:
Registry Operator commits to implementing and performing the following protections for the TLD: Registry Operator, as a social enterprise, is driven by its sole mission to support the global HIV response. Therefore, Registry Operator will reinvest all excess profits in projects serving this mission.
Not it’s not exactly an attractive investment opportunity, in terms of pure cash ROI.
But Innovative said there’s another reason to buy: “Approaching .hiv as a corporate philanthropic engagement could have positive effects on public image and employee satisfaction for the buyer.”
.hiv is due to be part of the June 3/4 live gTLD auction, which also includes .promo.
.stream has become the latest new gTLD contention set to be settled prior to its ICANN auction, leaving ICANN’s auction schedule looking barren.
Famous Four Media beat Hughes Satellite Systems to the string, which was due to auction May 27.
The four strings scheduled for bidding April 29 — .living, .fun, .map and .search — were also recently settled.
All that remains on ICANN’s schedule is the controversial .game/.games contention set, which will employ a unique process designed for contention sets created by inconsistent singular/plural string confusion rulings.
The five .game applicants and one .games applicant (Donuts) are still due to hit the block May 20.
A couple dozen other gTLDs are still pending ICANN auction but do not have set dates due to various challenges and disputes.