Cloudflare blocks anti-trans site for “emergency threat to human life”

Internet infrastructure provider Cloudflare has “blocked” a site it provides domain services to after identifying “an imminent and emergency threat to human life”.

The company said on Saturday that it has reluctantly stopped providing services to Kiwi Farms, a web forum whose users reportedly bully and carry out doxxing and swatting attacks on transgender people and activists.

Visitors to kiwifarms.net are now presented with a message from Cloudflare stating: “Due to an imminent and emergency threat to human life, the content of this site is blocked from being accessed through Cloudflare’s infrastructure.”

A linked blog post explaining the decision said:

This is an extraordinary decision for us to make and, given Cloudflare’s role as an Internet infrastructure provider, a dangerous one that we are not comfortable with. However, the rhetoric on the Kiwifarms site and specific, targeted threats have escalated over the last 48 hours to the point that we believe there is an unprecedented emergency and immediate threat to human life unlike we have previously seen from Kiwifarms or any other customer before.

The move is likely linked to a campaign by a trans Twitch streamer, who reportedly has been campaigning for Cloudflare to drop the site after multiple threats to her life, including a recent swatting (where armed police are tricked into showing up at your door).

Last week, the company had tried to explain its continued support for the domain by stating that one two previous occasions it has blocked sites, authoritarian governments have used that precedent to try to get human rights sites pulled.

At this stage, it appears that Cloudflare is using its status as the site’s DNS provider to implement the block. It’s still the domain’s registrar, and so far the Whois record does not reflect an attempt to move it elsewhere.

The domain was registered with DreamHost until last year, but was asked to leave following the suicide of a software developer, one of three suicides reportedly linked to Kiwi Farms users’ behavior.

Could Epik be its next destination? The company is a strong proponent of free speech, but even it has a line when it comes to violence. This could be Epik’s new CEO‘s first big test.

Epik replaces Monster with younger clone

Epik has replaced CEO Rob Monster with a younger model whose Twitter feed suggests could be every bit as controversial.

The company announced today that Brian Royce, who seems to have joined the company as an executive VP last month, is taking the corner office. Monster will stay on as non-executive chairman.

Royce appears to be a newcomer to the domain name industry, but ideologically very much in tune with Monster.

A glance at his Twitter feed for the last three months reveals he dislikes liberals, gun control, murder victim George Floyd, abortion rights, Joe Biden, wokeness, US attorney general Merrick Garland, Rep Alexandria Ocasio-Cortez, universal healthcare, Beto O’Rourke, mask-wearing and providing support to Ukraine.

It shows that he likes Christians, free speech, conservative politicians and, at least in May before Donald Trump started being publicly investigated, the police.

“Epik will continue to stand for free speech. It is extremely important to me to see core values of freedom, truth and liberty reflected in all we do at Epik,” Monster said in a press release.

“I am concerned about free speech as I look at what is happening across America. People are actively trying to silence people like Joe Rogan, Dave Chappelle and Chris Rock just for talking and telling jokes,” Royce said.

“More conversations, more speech, more debate—that is what makes people more informed and more compassionate,” he said.

Epik’s line on free speech has seen it become the registrar of choice for many controversial figures and organizations, often those asked to leave their original registrars due to their far-right or violent views.

Cancelled misogynist Andrew Tate moves domain to (drumroll)… Epik!

Andrew Tate has become the latest high-profile controversy magnet to move his domain to Epik, at the end of a week that saw him thoroughly “cancelled” over reportedly violently misogynistic speech.

Tate, a former kick-boxer and reality TV contestant who made his money through a large social media following and an online course called Hustler’s University, reportedly told Fox News host Tucker Carlson yesterday:

When they go to cancel you, ladies and gentlemen, it comes hard and fast. You lose your Facebook, then your Instagram, then your Gmail, your Discord, then your website hosting, your domain name, like then your payment processor, and your bank.

Tate reportedly had his accounts on Facebook, YouTube, Instagram and Tiktok deleted this week. He was getting banned so much it briefly became a meme.

The domain name in question appears to be cobratate.com, based on his apparent nickname “Cobra”, and it appears to still be in his possession, although he has changed registrars.

Up until an hour or two ago the name was managed by Tucows, via United-Internet-owned reseller Fasthosts, but the Whois record now shows it’s with Epik.

It’s not clear right now whether he jumped or, as he implied to Fox, was pushed. Tucows tells me it had not received any complaints about the site, had not investigated, and had not asked Tate to leave. I’ve asked United for comment.

Epik has over the last few years become the safe-haven registrar of choice for people and groups who become internet persona non grata, typically those with far-right or violent views, such as Infowars, 8chan, Gab and The Daily Stormer.

NameSilo reports revenue up 33%

Canadian registrar NameSilo this week reported its second-quarter financial results, showing revenue up 33.7% compared to the year-ago period.

The company said it now has 4.61 million domains under management and had revenue of $11.2 million for the quarter. It reported a net loss of $683,000.

Bookings, the best indicator of future revenue, were up 22% to $12 million. The company had $25.3 million of deferred revenue on its balance sheet at the end of the quarter.

NameSilo said “an increase in domains under management, marketplace revenues, and from the sale of ancillary services” all contributed to the growth.

Whois Disclosure System likely over a year away

ICANN lifted the curtain a little on its fetal Whois Disclosure System this week, but the news is not good if you’re champing at the bit for a usable system for requesting private Whois data from registrars.

The system, formerly referred to as SSAD Lite, will take “seven to nine months” to develop after ICANN staff gets the green light from its board, staffers told a small GNSO volunteer working group on a Wednesday conference call.

That timetable assumes the staffers working on it are 100% devoted to developing the system, rather than sharing their time between competing projects, they quickly clarified.

This raises the specter of months-long delays to the other big, already-delayed, ICANN work-in-progress — the next new gTLD application round.

The responsible staffers plan to publish a design document for the Whois Disclosure System around ICANN 75 next month, but whether the board will give its immediate approval is not clear.

We’re probably looking at at least a year before there’s a system in place that IP lawyers, security researchers and the like can log into, request data, and be disappointed.

And that’s despite the fact that the system will be built using existing technology — namely the CZDS or Centralized Zone Data Service, which has be in use for many years allowing people to request zone files from gTLD registries.

During this week’s webinar, staffers described how, like CZDS, there will be two user interfaces: one for the data requester, one for the data holder. The system will simply act as an intermediary between the two.

It will use ICANN’s existing accounts system, so there will be no user vetting beyond email address verification. There’ll be no integration with registrars’ existing ticketing systems, and any communications between registrar and requester will have to take place via email.

There’ll also be no billing function, because the system will be free to use by all parties and completely voluntary. While registrars are contractually bound to respond to Whois data requests, there’s no such obligation to use the Whois Disclosure System to do so.

Staffers admitted on the call that they’re a bit stumped about how to encourage registrars to sign up when the system goes live.

Tucows’ domains business stagnates again in Q2

Tucows’ domain name business has experienced its third consecutive quarter of stagnating growth.

The company yesterday reported third-quarter total domains revenue of $61 million, compared to $62.3 million a year ago and $61.5 million in the second quarter.

Dave Woroch, CEO of Tucows Domains, described this 2% annual decline as “consistency” on a prerecorded address to analysts.

He pointed to Verisign’s recent comments about a decrease in .com registration volumes as evidence of an industry-wide post-pandemic slowdown, but was somewhat bullish on some new gTLDs.

“At the other end of the industry, we do see more robust growth in many of the new gTLDs that are of higher quality and that have little to no speculation or cyber crime opportunity,” he said.

The domains industry is “generally not showing a lot of growth”, he said, adding that “outsized growth would need to come from new areas”, which could include so-called “web3” efforts.

Woroch noted the recent funding of blockchain alt-root project Unstoppable Domains, but said Tucows is not a fan. Unstoppable has, like similar efforts dating back over 20 years, some “fatal flaws” and “a chicken and egg problem” of adoption, he said.

Domains under management at Tucows decreased to 24.8 million from 25 million sequentially and 25.6 million a year ago.

Tucows’ retail domains revenue was down to $8.5 million from $8.9 million a year ago, while the wholesale business, including value-added services, was down to $52.3 million from $53.4 million.

Including non-domains businesses, Tucows’ Q2 revenue was up 11% to $83.1 million and the net loss was $3.1 million compared with net income of $1.8 million a year ago.

GMO to sell Unstoppable’s crypto domains

Japan’s largest domain seller, GMO, is to sell Unstoppable Domains’s blockchain-based addresses under a new brand.

The company, which owns the registrar Onamae, is launching a site called “CryptoName by GMO” at cryptoname.jp, where Unstoppable’s full portfolio of crytocurrency-themed extensions are on offer.

Unstoppable said it’s first traditional domain name registrar to offer the service.

The CryptoName web site contains an extensive FAQ explaining that the names are primarily designed to address crypto wallets rather than web sites, where they won’t resolve for the vast majority of internet users and won’t be indexed by search engines.

ICANN terminates these three deadbeat registrars

Registrars based in the US, Philippines and Bangladesh have lost their ICANN accreditations for non-payment of fees.

ICANN recently sent termination notices to Domainia, HOAPI, and Innovadeus, which the Org says have breached their contracts by not paying and in some cases failing to provide required information and services on their web sites.

It appears all three companies are no longer operational. Domainia’s domain resolves to a GoDaddy sales lander, HOAPI’s is NX’d, and Innovadeus’s site is riddled with WordPress errors.

Innovadeus and HOAPDI were first deemed “past due” on their fees in November 2020, according to ICANN. For Domainia, it was September 2020.

Fortunately, it seems few to no registrants will be affected by the terminations. HOAPI had one gTLD domain under management, its own. Domainia had none, and Innovadeus had a few hundred, which will be transferred to another registrar.

New gTLD in trouble as largest registrar gets suspended

The .gdn gTLD registry, Navigation-information systems, is facing more trouble from ICANN Compliance, but this time it’s because its largest registrar has got itself suspended for non-payment of fees.

ICANN has suspended the accreditation of Dubai-based registrar Intracom for failing to cure an April breach notice demanding money, not implementing an RDAP service, not escrowing its data, and generally giving Compliance staff the runaround for the last eight months.

Intracom is NIS’ biggest partner, responsible for over 10,000 of its 11,000 registered domain names. It doesn’t appear to have many domains in other gTLDs.

The company will not be allowed to sell gTLD domains or accept inbound transfers from July 6 to October 4.

NIS has been hit with its own breach notices twice in the last year, most recently the day after Intracom’s own notice, for failing to keep its Whois service up, but it cured the breaches before ICANN escalated.

Dynadot takes down its own web site after apparent breach

Dynadot took the drastic move of turning off its own web site last week after noticing an apparent security breach.

The registrar also reset all of its customers’ passwords, acknowledging the pair of moves were “extremely inconvenient”.

It’s not clear from the company’s statement whether there really had been an attack or whether it overreacted

It said “our system noticed irregular activity” but later brought its site back up after staff “investigated and determined there was not a threat”.

The company said it has engaged “cyber security experts” to help it out in future.