Verisign growth slows with post-Covid blues

Verisign sold fewer .com and .net domains than it did a year ago in the third quarter and has once again slashed its outlook for the year.

It had 174.2 million names across the two TLDs at the end of September, an increase of 1.2% over the year but down by around 100,000 names (rounded) on the quarter.

There were 9.9 million new domains sold. That compares to 10.1 million in the second quarter and 10.7 million in Q3 last year.

It now expects its total domains under management to increase by between 0.25% and 1% for the full year. That compares to the between 0.5% and 1.5% it predicted at the end of Q2, the 1.75% and 3.5% predicted in April, and the between 2.5% and 4.5% it predicted in February.

That equates to 2022 revenue of $1.418 billion to $1.426 billion, CFO George Kilguss told analysts. Verisign’s always jaw-dropping operating margin is expected to be between 65.75% and 66.25%.

CEO Jim Bidzos told analysts the slower growth can the attributed to the general macroeconomic malaise, Verisign coming off the lockdown bump experienced in 2020 and 2021, and the perennial issue of Chinese lumpiness.

Renewal rates for Q3 are expected to be 73.8%, the same as Q2 but down from 75% a year-ago.

But the company continues to make money hand over fist. Revenue was up 6.8% compared to Q3 last year at $357 million and net income was up to $169 million compared to $157 million a year ago.

Unstoppable Domains stops over 116,000 domains as alt-root TLD goes dark

Blockchain alt-root provider Unstoppable Domains has taken a huge credibility hit with its decision to essentially turn off one of its TLDs, rendering over 116,000 domains pretty much useless.

Unstoppable said Tuesday that it has stopped selling .coin domains and would immediately stop supporting their resolution. The names would no longer work with the over 500 cryptocurrency wallets, apps and services that integrate with Unstoppable, the company said.

“As of today, we’ve disabled .coin resolution in our libraries and services. Unstoppable domains are self-custodied NFTs, so you still own your .coin domain, but it won’t work with our resolution services or integrations,” Unstoppable said in a blog post.

According to AltRoots.com, there were almost 117,000 .coin domains at the time they were turned off.

That’s about the same size as Identity Digital’s .email gTLD, and the shutdown is the equivalent of ID telling its registrants that they can keep their domains, but it’s deleting the .email zone file.

The decision drew immediate critical reaction on social media, with many users pointing out that the Unstoppable system doesn’t sound particularly “decentralized” or censorship-resistant any more.

“Doesn’t sound too decentralized or empowering. Hopefully this will wake people up,” one Twitter user wrote.

“So many people literally just had to change their identity due to incompetency. Basically like visa saying you can keep the card but it wont work anywhere anymore,” wrote another.

Users also criticized the company’s decision to offer compensation in the form of store credit — three times what they paid for the domains they return — instead of a cash refund.

Unstoppable said the decision was made after it discovered another blockchain project, Emercoin, has been selling .coin domains since 2014, whereas its own .coin was launched in 2021.

“We’re committed to protecting our customers from the risk of functional collision,” Unstoppable said. “The Emercoin team are pioneers in our industry and we regret that we weren’t aware of this naming collision earlier.”

Name collisions are of course a big deal in the regular DNS, but cohesion around a single consensus root allows risk to be managed and mitigated, as we saw in ICANN’s 2012 new gTLD roll-out.

And in the ICANN system, a TLD would not simply be shut off overnight. Rather, it would transition to an emergency back-end operator for three years until it is either taken over by another permanent registry or wound down in an orderly fashion.

As Domain Name Wire notes, Unstoppable is currently trying to get the operator of a competing .wallet blockchain alt-root TLD shut down in court on the basis of the name collision, and it would have been hypocritical to continue offering its own colliding TLD.

CentralNic expects to blow past revenue estimates

CentralNic has updated its financial projections for the year, saying it expects to “materially exceed” the current analysts’ estimates.

The London-listed company expects to next month report revenue for the nine months to September 30 up 86% at $525 million and adjusted EBITDA of “at least” $61 million, up 89% compared to last year.

That’s just for three quarters. The latest analyst consensus estimate was for revenue of $626.6 million and EBITDA of $72.5 million for the entire year, the company said.

Twelve-month organic growth, excluding the effect of acquisitions, to September 30 is estimated at 66%.

CentralNic said growth is being “driven predominantly by the growth of the Online Marketing Segment, which continues to win market share as a result of the ever-increasing demand for online customer acquisition services that are privacy-safe.”

.au adds 100,000 names in days after 2LD floodgates open

The Australian ccTLD, .au, added over 100,000 domain registrations in just a couple of days after restrictions were lifted on second-level names last week.

Local registry auDA is currently reporting 4,109,218 registered names (second and third-level combined), compared to 4,003,804 at the start of the month.

My records show that about 90,000 names were added in the day after unclaimed 2LDs were released back into the available pool after a six-month grandfathering period in which only matching 3LD owners could register.

.au had 3.4 million domains under management in late March, when auDA first started selling 2LDs.

At AUD 7.83 ($5) a year wholesale, the expansion seems to have netted auDA an extra recurring $3 million at least, of which back-end operator Identity Digital will also claim a slice.

Registry launches Ukrainian domains for Russian-occupied region

A Ukrainian registry has started offering domains in a second-level Ukrainian transliteration of a Russia-occupied region.

Southern Ukrainian Network Information Center started offering residents of the Mykolaiv oblast domains at the third-level under mykolaiv.ua at the start of October, according to the registry’s web site.

Mykolaiv is the Ukrainian version of the original Cyrillic name. Previously, domains were only available under the Russian transliteration, .nikolaev.ua. SUNIC also offers the shorter .mk.ua domain.

Mykolaiv, in the battle-scarred south of the country, is also the name of the region’s capital city. While the city has resisted Russian capture, much of the region has been under the invading force’s control since early in the war.

SUNIC, which also offers odessa.ua (Russian) and odesa.ua (Ukrainian) names for the Odesa region and city, is encouraging .nikolaev.ua registrants to acquire their matching mykolaiv.ua names.

Adopting Ukrainian transliterations of Cyrillic place names has been seen as a symbolic act of defiance against Russian ambitions.

DNSSEC claims another ccTLD victim

A botched DNSSEC upgrade has been fingered as the source of an outage that made .na domain names inaccessible last Tuesday.

Reports and archived DNS records show that names in the Namibian ccTLD suffered as many as 12 hours of downtime following the glitch, which has been blamed on human error.

When DNSSEC-signed domains, including TLDs, are unable to establish a cryptographic chain of trust, anyone using a DNSSEC-compatible resolver will be unable to access web sites or emails of affected domains.

Namibian Network Information Center boss Eberhard Lisse, talking to The Namibian newspaper, blamed the downtime on an unspecified upstream provider pushing an algorithm upgrade “without all prerequisite steps having been completed”.

It’s the second DNSSEC incident to hit .na following a July 2019 glitch, and one of dozens to affect TLDs since the technology started to become more broadly adopted.

Taliban seizing domains to silence journalists

The Taliban is attempting to close down independent media outlets in Afghanistan by deleting their .af domain names.

The Ministry of Communications and Information Technology tweeted that the sites of Hasht-e Subh Daily and Zawia News were “taken down” for publishing “unbalanced reports and fake news”.

د هشت صبح او زاویه نیوز خبري شبکو وېبسايټونه د مخابراتو او معلوماتي ټکنالوجۍ وزارت له لوري وټړل شول.
هشت صبح او زاویه نیوز خبري شبکې چې د افغانستان اسلامي امارت مشرانو پورې یې دروغجن تورونه تړل، بې توازنه راپورونه او کاذب خبرونه یې خپرول د یوې فیصلې پر بنسټ یې وبسایټونه ؤتړل شول pic.twitter.com/cexPduvMjT

— Anayatullah Alokozay (@Anayatalokozay) October 3, 2022

.af’s registry is government-run.

According to the Committee to Protect Journalists, the two sites have been reporting by Afghans in exile since the Taliban retook the country over a year ago.

Both outlets have now switched domains to TLDs based in the US — Verisign and Identity Digital, where presumably they’re pretty safe from the Taliban’s reach. They’re now using zawiamedia.com and 8am.media instead of the original .af names.

McCarthy wins Nominet director election

Kieren McCarthy, the former reporter who has spent much of his career bashing .uk registry Nominet in the pages of The Register, has been elected to its board of directors following a sometimes fractious campaign.

He won despite placing second to lawyer Jim Davies in the first round of voting, which saw CentralNic lawyer Volker Greimann eliminated. The vast majority of Greimann’s votes transferred to McCarthy in the second round. The results can be found here (pdf).

Turnout was a miserable 15.1%, almost 10 percentage points lower than it was in last year’s non-executive director election.

McCarthy is executive director of the International Foundation For Online Responsibility, the non-profit set up by .xxx registry ICM to hack around ICANN’s rules and give the illusion of legitimacy in the 2003 “sponsored” gTLD application round.

As such, he’s paid indirectly by GoDaddy, ICM’s current owner, which can’t have hurt his prospects in the election but GoDaddy says it did not vote in the election. Under Nominet’s controversial voting system, larger registrars get more votes, capped at 3% of the total.

With McCarthy standing on a platform of increased transparency, some Nominet members had pointed out the irony that IFFOR hadn’t published any board minutes in several years. He also faced criticism for using Nominet’s logo, apparently without permission, in his election mailshots.

McCarthy replaces Anne Taylor, whose three-year term is up.

Nominet “gaslighting” members over fees, candidate claims

Nominet has been accused of “gaslighting” its members over the issue of whether its membership fees are lawful by one of its non-executive director candidates.

Jim Davies is one of four signatories of the latest missive from the WeightedVoting.uk campaign, which is trying to get Nominet to address both its voting system and the fees it charges members.

Following the news last week that lawyer Ian Mitchell KC, hired by the campaign, had concluded that Nominet’s Articles haven’t technically allowed it to charge membership fees for the last 25 years, the registry issued a statement saying its own legal advice disagreed.

“That advice identifies significant flaws in the [Mitchell] advice that has been published. We remain confident in the legality of Nominet’s long-standing voting and membership arrangements,” Nominet told us last week, while declining to provide that advice.

It seems the same statement was provided to Nominet members, though only WeightedVoting was provided the new opinion.

Now WeightedVoting has published Nominet’s opinion, written by Andrew Thornton KC, which concludes that the weighted voting system Nominet uses — in which bigger registrars get more votes — is “entirely lawful and enforceable”.

What Thornton’s opinion does not address is the membership fees problem, despite Nominet’s suggestion that it covers both issues.

Now Davies and his supporters have written to Nominet’s current non-executive directors, asking again for the company’s annual general meeting, still apparently due to go ahead on Thursday, to be delayed.

They call Nominet’s statement “manifestly false” and call for the NEDs to exercise their legal duties or face “personal liability”.

Davies is one of three candidates to fill a vacating NED seat at the AGM this week when the results of a recently concluded election are announced.

His rivals are former reporter Kieren McCarthy and CentralNic lawyer Volker Greimann.

Identity Digital publishes treasure trove of abuse data

Identity Digital, the old Donuts, has started publishing quarterly reports containing a wealth of data on reported abuse and the actions it takes in response.

The data for the second quarter, released (pdf) at the weekend, shows that the registry receives thousands of reports and suspends hundreds of domains for DNS abuse, but the number of domains it takes down for copyright infringement is quite small.

ID said that it received 3,007 reports covering 3,816 unique domains in the quarter, almost 93% of which related to phishing. The company said the complaints amounted to 0.024% of its total registered domains.

Most cases were resolved by third parties such as the registrar, hosting provider, or registrant, but ID said it suspended (put on “protective hold”) 746 domains during the period. In only 11% of cases was no action taken.

The company’s hitherto opaque “Trusted Notifier” program, which allows the Motion Picture Association and Recording Industry Association of America to request takedowns of prolific piracy sites resulted in six domain suspensions, all as a result of MPA requests.

The Internet Watch Foundation, which has similar privileges, resulted in 26 domains being reported for child sexual abuse material. Three of these were suspended, and the remainder were “remediated” by the associated registrar, according to ID.

The report also breaks down how many requests for private Whois data the company received, and how it processed them. Again, the numbers are quite low. Of requests for data on 44 domains, 18 were tossed for incompleteness, 23 were refused, and only three resulted in data being handed over.

Perhaps surprisingly, only two of the requests related to intellectual property. The biggest category was people trying to buy the domain in question.

This is a pretty cool level of transparency from ID and it’ll be interesting to see if its rivals follow suit.