How I just registered Twitter.sucks for free in just five clicks

This morning, I caused the registration of and was given control of a web site at twitter.sucks.
I didn’t pay a thing, though I did — by checking a box linked to hidden terms and conditions — promise to pay $10,000 if I was later determined to be working for Twitter.
Ordinarily, registering a .sucks domain would have cost me over $200.
The controversial This.sucks service (which may share ownership with .sucks registry Vox Populi) has gone live and is giving out 10,000 .sucks web sites for free.
Users, who can sign up merely by connecting their Facebook or LinkedIn accounts, are able to cause This.sucks to register names on their behalf.
They are then immediately given limited control over a WordPress blog hosted at that domain, though not to the associated name servers or Whois records.
It’s actually quite a slick, streamlined service, that could quite easily dramatically increase the number of active .sucks site overnight.
But it’s going to cause no end of headaches for trademark owners.
Earlier this week, you may recall DI reporting that This.sucks seemed to have registered the .sucks names matching the brands of Twitter, Adobe, Goldman Sachs and Justin Timberlake.
It seems that this may have been a test of the This.sucks service, as I was tipped off last night that twitter.sucks was no longer registered.
Here’s how I got control over the twitter.sucks web site in just FIVE clicks.
This.sucks has a domain availability query box, just like a regular registrar. I looked up “twitter”:

Seeing that the domain was available, I went through the two-click process of allowing This.sucks to use my Facebook login credentials.

Obviously, while I used a genuine Facebook account, I see no reason why I couldn’t have used a fake one.
After connecting, I was bounced back to This.sucks and was given the ability to register twitter.sucks in a single click.

I also had to check a box confirming:

I’m a free-thinking individual, not a corporate yes-man. I agree to the terms and conditions and any penalties which may apply.

Clicking either of the T&C links, or hovering over the question mark, will introduce you to the concept of a $10,000 penalty.

That’s right — by causing This.sucks to register a .sucks domain, you agree to pay $10,000 if the company decides, in its “sole discretion” that you are affiliated with the matching trademark owner. The terms state:

Site Runners on this.sucks must be individuals who have no affiliation with the subject matter of the Site. You can’t be running the Site on behalf of a company, entity or anyone who is the subject of the Site.
As a Site Runner you agree that if you are found by this.sucks, in our sole discretion, to be in violation of this principal, that a $10,000 USD payment to This.sucks will immediately become due and payable. You will also no longer be a Site Runner with us. Your Site may also be given to a different Site Runner to run.
If you think a Site is being run by someone acting on behalf of the subject of the Site, please email us at whistleblower@this.sucks

Given that Twitter’s lawyers are probably going to hate me for doing this, I felt pretty confident in accepting this risk.
In addition, at this point This.sucks has not asked me for any payment information. If they want $10,000 off of me, they can take a hike, I figure.
So I clicked the “Register Now” button.
Bam! In under 10 seconds the domain name twitter.sucks existed in DNS, in Whois, and there was a simple WordPress web site there that I, to a significant extent, controlled.
The domain is registered to This.sucks, which makes it clear on its web site FAQ that its users — or “Site Runners” — do not actually own the domains they cause to be registered.

As administrator of the WordPress site, I am able to create and update blog posts as well as change the appearance by switching between a limited selection of themes. I can also edit and delete comments and manage registered users.
There’s a little bit more to my story — which I cannot get into for now.
For the moment, it must suffice to say that this is a whole new world for famous brand owners.
They can either pay the roughly $2,000 required to defensively register their brand in .sucks, or they can try to sneak through a free (or $0.99 per month) registration at This.sucks at the risk of being billed $10,000 if they get rumbled.

Radiohead backs .music community bid

Ed O’Brien, guitarist with the band Radiohead, has become the latest musician to throw his support behind DotMusic’s community-based application for the new gTLD .music.
In a letter to ICANN today (pdf), O’Brien said that if DotMusic loses its ongoing Community Priority Evaluation, it will “be setting back the world’s chances of a Fair Trade Music Industry by many years”.
“I challenge The Internet Corporation for Assigned Names and Numbers views that the global music community to which I belong does not exist,” he wrote.
He’s arguably the highest-profile musician to support DotMusic to date. Radiohead have sold over 30 million records and a few years ago O’Brien was ranked by Rolling Stone as the 59th greatest guitarist of all time.
The phrase “Fair Trade Music Industry” appears to have been coined last week at TechCrunch Disrupt by Grammy-nominated musician Imogen Heap, another one of DotMusic’s celebrity supporters.
It refers to the notion that artists should be fairly compensated for their work, opposing services such as Spotify, which reportedly pays artists less than a tenth of a cent every time one of their songs is played.
Both Heap and Radiohead are noted for their innovative uses of technology in their music (for example, listen to Radiohead’s incredible 1997 album OK Computer, bootlegs of which are available to stream for free on YouTube).
Radiohead is also known for its love-hate relationship with internet-based music business models.
In 2007, Radiohead released a new album for free on its web site, allowing fans to set their own price. But in 2013, it pulled its back catalog from Spotify, with lead singer Thom Yorke calling the service “the last desperate fart of a dying corpse”.
Its music is back on Spotify now.
But you can see why the band would support DotMusic’s application for .music, which proposes a number of novel rights protection mechanisms covering not just trademarks, but also copyright.
One interesting proposal is to ban any domain name from .music if a matching domain in another TLD has received over 10,000 copyright infringement notices from a big music industry body. This is to prevent TLD “hopping” affecting .music.
So, for example, if thepiratebay.com had received 10,000 notices, thepiratebay.music would be permanently blocked from registration.
The company is proposing a somewhat restricted namespace too, where only “community members” are allowed to register domains.
But prospective registrants merely need to self-identify as a member of one of the community’s dozens of subsets — which includes “fans” and “bloggers” — in order to register.
Parking will be prohibited, however, which would cut down on domain investor speculation.
Quite how .music will enhance the move for “fair trade” for artists is not entirely clear from O’Brien’s letter. After .music launches, there will still be hundreds of other TLDs that do not have DotMusic’s rules in place.
It’s also unlikely that the Economist Intelligence Unit, which is currently handling the CPE, will even see O’Brien’s letter.
ICANN told DotMusic (pdf) recently that the EIU “may not consider” any support letters received after October 13, which was two months after the official deadline for letters to be submitted.
DotMusic has letters of support — mostly the same letter with a different signature — from literally hundreds of musicians, trade groups, producers and publishers.
CEO Constantine Roussos told DI last week that it has more support letters than all the other “Community” gTLD applicants combined.
He said he’s confident that DotMusic’s CPE will be successful, citing positive precedent set by EIU panels in .osaka, .hotel and .radio CPE cases.
But the closest precedent we have so far is the Far Further application for .music, which comprehensively lost its CPE a year ago, scoring just three points out of the available 16, well short of the 14-point passing score.
There are differences between the applications, but Far Further’s CPE panel told it that there was no such thing as “the music community”, which sets a pretty high bar for DotMusic to leap.
If DotMusic wins its CPE, the remaining seven competing applications for the string get kicked out of the program. If it loses, it goes to an auction it has little chance of winning.

Twitter and Justin Timberlake targeted by This.sucks

This.sucks, a company with close ties to .sucks registry Vox Populi, has started registering domain names matching famous brands to itself.
Twitter, along with singer Justin Timberlake, software maker Adobe and investment bank Goldman Sachs all saw their matching .sucks domains registered by This.sucks on Friday, according to the .sucks zone file and Whois queries.
The domains twitter.sucks, goldmansachs.sucks, justintimberlake.sucks and adobe.sucks currently resolve in browsers, but only to a password-protected web site.
New York-based This.sucks says its service is in beta. It plans to give 10,000 .sucks domains away for free, and to sell them for as little as $12 per year. Its business model has not been revealed.
That’s a deep discount from their regular $250 suggested retail price, which rises to $2,500 for domains matching famous brands.
Technically, the company should have just paid around $10,000 for the four brand-matching domains it has just registered.
But it is broadly suspected that This.sucks shares ownership with Vox Populi, the .sucks registry operator, which would make this a case of the right hand paying the left.
As we uncovered in October, Vox Populi originally hosted This.sucks’ web sites and the CEO of Momentous, which founded Vox Pop, paid for its web site to be developed.
The two companies also share a physical address and a Cayman Islands lawyer.
Vox Pop has denied any involvement in This.sucks, saying it’s just another customer.
It will be interesting to see how long it takes for one of the four affected brands to file a UDRP or URS complaint on these new domains.
As far as I can tell, the .sucks namespace currently has an unblemished UDRP record.
Unlike rival Top Level Spectrum, which runs .feedback, neither Vox Pop nor This.sucks has revealed any plans to use brands belonging to third parties as part of their services.
TLS has said it plans to sell 5,000 branded .feedback domains to a third party after its sunrise period ends next month.
It has already registered fox.feedback to itself as one of its special 100-domain pre-sunrise registry allowance.
Since we last reported on .feedback a month ago, the registry appears to have also registered the names of all the current US presidential candidates — such as donaldtrump.feedback and hillaryclinton.feedback — to itself.
The sites are all live, as is santaclaus.feedback, which seeks commentary on the “fictional” character.

Former ICANN director Blokzijl dies at 72

Rob Blokzijl, a former ICANN director widely acknowledged as an internet pioneer, died last week at the age of 72.
He passed away December 1, according to RIPE.
Blokzijl, a citizen of the Netherlands, was one of the founders of RIPE NCC, the European IP address registry and the first of the internet’s Regional Internet Registries, in 1989.
He was chair of the organization for 25 years until his retirement in 2013. He then held the title of Chair Emeritus.
RIPE said in a statement:

To many of us in the RIPE community and beyond, Rob was a mentor, a friend, a trusted confidante and always the voice of reason. His legacy stretches from the physical networks the Internet is made of to the community he built and the wisdom he injected into that community’s make-up from the very beginning. His legacy will continue to be felt as the community continues to grow and its participants often ask themselves, “What would Rob do?”

Blokzijl also sat on the board of ICANN, representing the Address Supporting Organization, from 1999 to 2002.
ICANN’s board passed a resolution in his memory last week, stating:

He was a gentle man who radiated warmth and optimism, while working constructively in the Netherlands, in Europe and, indeed, throughout the world to foster the development of the Internet.

Blokzijl was made Officer in the Order of Oranje-Nassau — a title awarded by the Dutch monarchy — in 2010 for his contributions to the internet.
Almost 200 people have left tributes on the RIPE web site.

Foot-dragging Amazon has bumper crop of new gTLDs

Amazon Registry Services took possession of 17 new gTLDs at the weekend.
The would-be portfolio registry had .author, .book, .bot, .buy, .call, .circle, .fast, .got, .jot, .joy, .like, .pin, .read, .room, .safe, .smile and .zero delegated to the DNS root zone.
Amazon seems to have waited until the last possible moment to have the strings delegated.
It signed its registry agreements — which state the TLDs must be delegated with a year — in mid-December 2014.
Don’t plan on being able to register domains in any of these gTLDs. You may be disappointed.
All of the strings were originally applied for as what became known as “closed generics”, in which Amazon would have been the only permitted registrant.
It recanted this proposed policy in early 2014, formally amending its applications to avoid the Governmental Advisory Committee’s anti-closed-generic advice.
Its registry contracts do not have the standard dot-brand carve-outs.
However, the latest versions of its applications strongly suggest that registrant eligibility is going to be pretty tightly controlled.
The applications state: “The mission of the <.TLD> registry is: To provide a unique and dedicated platform while simultaneously protecting the integrity of Amazon’s brand and reputation.”
They go on to say:

Amazon intends to initially provision a relatively small number of domains in the .CIRCLE registry to support the goals of the TLD… Applications from eligible requestors for domains in the .CIRCLE registry will be considered by Amazon’s Intellectual Property group on a first come first served basis and allocated in line with the goals of the TLD.

They state “domains in our registry will be registered by Amazon and eligible trusted third parties”.
Amazon has not yet published its TLD start-up information, which may provide more clarity on how the company intends to handle these strings.
I suspect we’ll be looking at a policy that amounts to a workaround of the closed-generic ban.
The registry seems to be planning to run its registry from AmazonRegistry.com.

Schilling: registries could wind-down unprofitable gTLDs

New gTLD portfolio registries may one day decide to wind down some of their gTLDs if they fail to reach profitability.
That’s according to Uniregistry CEO Frank Schilling, who told DI today that registries may “sunset” under-performing TLDs.
His comments came in response to our post earlier today about registries going out of business involuntarily due to lack of sales.
But he’s referring to registries managing large numbers of strings, winding down the unprofitable ones in a controlled manner.
“I can’t see Uniregistry doing that today, but if in round two we get 100 strings that all kill it and we have some round one stuff that sucks, yes,” he said in an email. “I would consider raising prices to get the string profitable or sunset the string.”
“That said,” he added, “that’s 5-8 years out [and] by then even the slowest should be profitable.”

ICANN security advisor predicts “hundreds” of new gTLDs will “go dark”

A security company led by a member of ICANN’s top security committee reckons that “hundreds” of new gTLDs are set to fail, leading to web sites “going dark”.
Internet Identity, which provides threat data services, made the prediction in a press release this week.
IID’s CTO, quoted in the release, is Rod Rasmussen. He’s a leading member of the Anti-Phishing Working Group, as well as a member of ICANN’s influential Security and Stability Advisory Committee.
He has a dim view of new gTLDs:

Most new gTLDs have failed to take off and many have already been riddled with so many fraudulent and junk registrations that they are being blocked wholesale. This will eventually cause ripple effects on the entire domain registration ecosystem, including consolidation and mass consumer confusion as unprofitable TLDs are dropped by their sponsoring registries.

The press release acknowledges that ICANN has an Emergency Back-End Registry Operator (EBERO) program, which will keep failing gTLDs alive for up to three years after the original registry operator goes out of business.
But it continues:

questions abound as to who would risk an investment in poorly performing TLDs, especially as they start to number in the hundreds. “That’s why eventually some are going to just plain go dark,” added Rasmussen.

The prediction is for “2017 and beyond”. Given the existence of the EBERO, we’re probably looking at 2020 before IID’s claim can be tested.
It’s a bit of a strange prediction to come out of a security company.
The whole point of EBERO is to make sure domain names do not go dark, giving either the registry the chance to sell on the gTLD or the registrants a three-year heads-up that they need to migrate to a different TLD.
It would be a bit like being told that there’s a horrible bit of malware that is set to brick your computer, but that you’ll be fine if you change your anti-virus provider in the next three years.
I could live with that kind of security threat, personally.
But what are the chances of hundreds of live, non-dot-brand going fully post-EBERO dead in the next few years?
I’d say evidence to date shows the risk may be over-stated. It may happen to a small number of TLDs, but to “hundreds”?
We’ve already seen new gTLD registries essentially fail, and they’ve been taken over by others even when they’re by definition not profitable.
Notably, .hiv — which has a contractual agreement with ICANN to not turn a profit — failed and was nevertheless acquired by Uniregistry.
We also see registries including Afilias and Donuts actively searching for failing gTLDs to acquire.

Complaints over 50% .uk price hike

.uk registrars are petitioning Nominet to complain about plans to increase the price of a .uk domain name by up to 50%.
The registry announced the price increase, which will come into effect March 1 next year, on Wednesday.
A one-year registration will go up to £3.75 ($5.65) wholesale, still cheaper than any gTLD I can think of.
Currently, Nominet charges £3.50 for a one-year reg and £2.50 per year for multi-year registrations.
The company heavily hinted, in an email, that some of this extra cash will wind up in registrars’ pockets, due to promotional spending:

Our new pricing strategy aims to accomplish three things. Firstly, as with any business the price we charge is linked to our ability to deliver a fantastic service. Secondly, we want to invest in the .UK namespace to ensure we can differentiate over the long-term. Thirdly, we want to be able to invest in marketing and promotions in order to secure prominence at point of sale – which our current pricing levels cannot support.

The price of a .uk domain has not increased since 1999, Nominet said.
Increasing the price from a posh coffee to a London beer is presumably not a big deal for most registrants, but domainer-registrars are unhappy.
Andrew Bennett of Netistrar has set up a web site at egm.uk to call for “outraged” registrants and Nominet members to voice their opposition to the changes.
The site points out that Nominet has said it will review its pricing annually.
It calls on Nominet to have a three-month public consultation then a member vote before introducing the changes.
At time of publication, 77 registrants and 47 Nominet members have signed the petition.
On its web site, Nominet lists 2,048 members.

Verisign warns about Chinese .com boom

Verisign has warned investors that the current boom in .com sales is largely coming from Chinese domainers and may not be sustainable.
The company has added an unprecedented 4.1 million domain in .com and .net so far during the fourth quarter.
“While there continues to be demand for domain names globally, the recent increased volume for Verisign’s top level domains, as well as top level domains of other registries, during the fourth quarter is coming largely through registrars in China,” the company said in a Securities and Exchange Commission filing.
It listed several factors that are likely responsible for the sudden uptick, but warned that renewal rates are typically not great.

In the past, Verisign has discussed many factors that affect the demand for domain names, including, but not limited to economic, social, and regulatory conditions, Internet adoption, Internet penetration, and increasing e-commerce. In addition to these factors affecting demand, Verisign is also evaluating additional potential factors unique to China that may also be responsible for the recent increased volume of new registrations in China.
In no particular order, these potential factors, or combination of factors, could include, but may not be limited to, government initiatives in China to develop their online economy such as ‘Internet Plus;’ registry and registrar regulatory requirements; cultural influences such as the popularity of numeric domain names; increasing competition amongst Chinese registrars; potential increases in domain name investment activity; and recent capital markets volatility and access to capital in China.
Verisign cannot predict if or how long this increased pace of gross additions will continue and we cannot at this time predict what the renewal rate for these domain names will be. Verisign has noted in the past that renewal rates for domain names registered in emerging markets, such as China, have historically been lower than those registered in more developed markets.

It’s difficult to imagine that Chinese investors have managed to find four million unregistered domains worth keeping.
There are currently 123,497,852 domains in the .com zone file, according to Verisign’s web site.
Verisign is not the only registry that appears to be benefiting from a deluge of registrations from China.
XYZ.com has seen over 440,000 domains added to its .xyz zone file in the last three weeks, bringing its total to over 1.5 million, which appear to be largely coming through Chinese registrars.

Verisign v XYZ judge confirms both companies suck

Verisign and XYZ.com have both come out of a US lawsuit looking like scumbags.
Explaining his dismissal of Verisign’s false advertising lawsuit against .xyz registry XYZ.com, Virginia judge Claude Hilton today said that XYZ.com’s statements about its registration numbers were “verifiably true”.
At the same time, he confirmed that they came about as a result of a bullshit deal with Network Solutions to bolster .xyz’s launch numbers.
The judge’s ruling confirms for the first time the financial details of the deal between XYZ and Web.com (Network Solutions) that saw .xyz’s registration volume rocket in its first few weeks of general availability. He wrote:

Web.com purchased 375,000 domain names for a price of $8 each totaling $3 million dollars. In exchange, XYZ purchased advertising from Web.com in the form of 1,000 impressions for $10 each, at a total cost of $3 million dollars. Instead of cash exchanging hands, advertising credit was given to XYZ and the .xyz domain names were given to Web.com, who subsequently gave them away as free trials to their subscribers.

In other words, XYZ bought $10,000 of advertising for $3 million and paid for it with $3 million of free .xyz domains — 375,000 of them.
That bogus deal enabled XYZ to report big reg volume numbers without actually, legally, lying,
“The statements regarding Defendants’ revenue and number of registrations are statements of fact that are verifiably true,” the judge wrote.

When the Defendants [XYZ.com] stated they were a market leader in new TLD’s and that they had the most new registrations than any other TLD, they were basing that information off of an accurate zone file. Further, the zone file confirms that there are over 120 million .com registrations and one {1) million .xyz registrations. These statements are also true.

The judge said he was dismissing the suit not just because XYZ wasn’t lying, but also because Verisign couldn’t show that it had been harmed.
The number of .com registrations has actually been going up, he noted.
Much of Verisign’s complaint centered on this ad:

Verisign said the ad lied about the availability of .com domains, which XYZ denied.
The judge said:

The video posted to YouTube is puffery and opinion. It displays no actual domain names, and communicates a subjective measure of value and superiority, not capable of being proven false.

“Puffery” is a term with legal weight in false advertising cases under US law. It basically means that advertisers are allowed to exaggerate. XYZ had in fact used the “puffery” defense.
The judge seems to have relied heavily on zone file analysis to reach his conclusions. He wrote.

according to Plaintiff’s [Verisign’s] own data, .com names are largely unavailable. In a given month, Plaintiff reports that it receives about two (2) billion requests to register <.com> domain names, yet fewer than three (3) million are actually registered.

I believe that “two billion” number refers to how many “attempted adds” Verisign gets every month for .com domains, as reported in its monthly reports with ICANN.
That number would include every automated attempt to register a dropping domain by every registrar.
It’s not a reflection of how many actual human beings attempt and fail to register .com domains and, in my view, it’s worrying that the judge took it to mean that.
In summary, the lawsuit managed to unearth the dirty reality behind XYZ’s launch “success”, whilst also making Verisign look like a petty, petulant, child.
Everybody loses.
Except the lawyers, obviously, who have been paid millions.