Mucho weirdness as Google “forgets” to renew major domain

Google has lost control of a key domain name, breaking millions of URLs used by its customers.

It emerged today that the domain blogspot.in expired in May and was deleted around June 24.

It was promptly re-registered via a non-ICANN registrar based in India called Domainming and put up for sale on Sedo for $5,999.

Blogspot is the brand used by people using Google’s Blogger platform. While the .com is the primary domain, the company localizes URLs to the ccTLD of the visitor’s home country in most cases.

There are currently over four million blogspot.in URLs listed in Google’s index.

Most of the reports I’ve read today chalk the loss of the domain down to corporate forgetfulness, but it appears to be weirder than that.

Google uses MarkMonitor to manage its portfolio, so if it is a case of the registrar forgetting to renew a client’s domain, it would be hugely embarrassing for whoever looks after Google over there.

However, historical Whois records archived by DomainTools suggests something odder is going on. It looks like MarkMonitor would have been prevented from renewing the domain by the .in registry.

These records show that from June 1, 2018, blogspot.in has had a serverRenewProhibited status applied, basically meaning the registry won’t allow the registrar to renew the domain.

ICANN describes the code like this:

This status code indicates your domain’s Registry Operator will not allow your registrar to renew your domain. It is an uncommon status that is usually enacted during legal disputes or when your domain is subject to deletion.

Often, this status indicates an issue with your domain that needs to be addressed promptly. You should contact your registrar to request more information and resolve the issue. If your domain does not have any issues, and you simply want to renew it, you must first contact your registrar and request that they work with the Registry Operator to remove this status code. This process can take longer than it does for clientRenewProhibited because your registrar has to forward your request to your domain’s registry and wait for them to lift the restriction.

The domain was placed into clientDeleteProhibited, clientTransferProhibited, clientUpdateProhibited, serverDeleteProhibited, serverTransferProhibited, and serverUpdateProhibited statuses at the same time.

Basically, it was fully locked down at both registrar and registry levels.

All of those status codes apart from serverRenewProhibited were removed in the first week of May this year, after almost two years.

The registry for .in is government-affiliated NIXI, but the back-end provider is Neustar.

At the time the domain was locked down, Afilias ran the back end, and there was a somewhat fractious battle going on between the two companies for the .in contract.

Judging by the changing status codes, it appears that two years ago somebody — Google, MarkMonitor, NIXI or Afilias — put the domain into a state in which it could not be renewed, transferred or deleted.

For some reason, the domain stayed like that until just a couple of weeks before it expired, when the prohibitions on deletion and transfer were removed.

I’ve been unable to find any information about legal trouble Google had in India two years ago that would have led to this unusual state of affairs.

It doesn’t seem to be a simple case of forgetfulness, however.

First deadbeat dot-brand ripped from the root

ICANN has terminated a dot-brand gTLD contract for non-payment of fees for the first time.

The unlucky recipient of the termination notice is aigo, a privately held Chinese consumer electronics manufacturer.

ICANN first hit the company with a breach of contract notice in March 2018, noting its non-payment and a litany of other infractions.

The two parties have been in mediation and arbitration ever since, but the arbitrator found aigo was in fact in breach in late May.

ICANN issued its termination notice June 25 and IANA yanked .aigo from the DNS root servers a couple of days later.

While aigo is not the first dot-brand registry to be hit with a non-payment breach notice, it is the first to have it escalated all the way to involuntary termination.

Also recently, .intel and .metlife — run by the chipmaker and insurance company respectively — both decided to voluntarily their dot-brand registry agreements.

The total number of voluntary terminations is now 78.

Coronavirus helps .nl beat 6 million regs

Dutch ccTLD .nl passed the six-million-domains milestone recently due in part to a surge in registrations during coronavirus lockdown.

According to SIDN, the registry, the six millionth domain was deyogiclub.nl and it was registered June 18.

According to my data, .nl has grown by about 100,000 domains since the start of 2020, and by about 80,000 names in the second quarter.

SIDN said (Google-translated from the original Dutch):

The number of registrations rose so rapidly during the corona crisis in recent months that the 6 million .nl domain registrations were reached much earlier than expected on the basis of the growth development.

The Netherlands entered its strongest period of lockdown March 15 and started easing restrictions in mid-May.

More dot-brands dump their gTLDs

A further three new gTLDs have applied to ICANN for self-termination over the last few months, bringing the total to 76.

They’re all dot-brands: .sbs, .rightathome and .symantec.

The most recent application came from the Australian broadcaster SBS, for Special Broadcasting Service. This seems to be a case of a brand owner briefly experimenting with redirects to its .au domain, then deciding against it.

.symantec is biting the dust because the security company Symantec recently rebranded as NortonLifeLock Inc.

.rightathome also appears to be a case of a discontinued brand, in this case formerly used by consumer products firm SC Johnson.

Donuts rolls out free phishing attack protection for all registrants

Donuts is offering registrants of domains in its suite of new gTLDs free protection from homograph-based phishing attacks.

These are the attacks where a a bad guy registers a domain name visually similar or identical to an existing domain, with one or more characters replaced with an identical character in a different script.

An example would be xn--ggle-0nda.com, which can display in browser address bars as “gοοgle.com”, despite having two Cyrillic characters that look like the letter O.

These domains are then used in phishing attacks, with bad actors attempting to farm passwords from unsuspecting victims.

Under Donuts’ new service, called TrueNames, such homographs would be blocked at the registry level at point of sale at no extra cost.

Donuts said earlier this year that it intended to apply this technology to all current and future registrations across its 250-odd TLDs.

The company has been testing the system at its registrar, Name.com, and reckons the TrueNames branding in the shopping cart can lead to increased conversions and bigger sales of add-on services.

It now wants other registrars to sign up to the offering.

It’s not Donuts’ first foray into this space. Its trademark-protection service, Domain Protected Marks List, which has about 3,500 brands in it, has had homograph protection for a few years.

But now it appears it will be free for all customers, not just deep-pocketed defensive registrants.

.black gTLD has seen boost since George Floyd killing

Afilias’ little-known new gTLD .black has seen a noticeable increase in registrations in the last few weeks, as Black Lives Matter protests span the globe.

Between January 1 and May 25 this year, the day on which George Floyd was killed by Minneapolis police over a trivial offence, the gTLD’s zone file grew by 227 domains.

But in the 22 days since the killing, as BLM protests have spread across the US and elsewhere, it’s grown by 292 domains, currently standing at a modest 4,490.

Basically, it’s grown in three weeks by more than the previous five months combined.

The domain georgefloyd.black was registered May 27, after video of the incident shared on social media had attracted mainstream media attention, and is currently parked at GoDaddy.

Other .black domains registered since his death include accountable.black, lives.black, understanding.black, listen.black and itshardbeing.black.

Three big registries will take down opioid domains for US govt

Verisign, Public Interest Registry and Neustar (now part of GoDaddy) will suspend domain names being used to illegally sell opioids under a pilot scheme with the US government.

The Food and Drug Administration announced this week that this new “trusted notifier” program will go into effect for 120 days.

When the FDA finds a site suspected of selling opioids illegally, it will notify the registry as well as the web site’s owner and hosting provider.

The registries will then be able to decide whether to suspend the domain or not. It’s voluntary.

The National Telecommunications and Information Administration will also take part in the project.

Verisign runs .com and .net, PIR runs .org and Neustar runs .us, .co and .biz.

Opioids are legal, pharmaceutical pain-killers derived from opium. They’re ridiculously addictive and account for as many drug overdose deaths in the US as heroin, but are over-prescribed by US doctors.

It’s not the first time registries have agreed to trusted notifier programs. Some new gTLD registries have deals with the movie and music industries to suspend domains involved in copyright infringement.

The announcement comes just a few weeks after ICANN rejected a deal that would have seen PIR create a community oversight body with responsibilities to monitor domain-suspension policies in .org.

Amazon finally gets its dot-brands despite last-minute government plea

Amazon’s three long-sought dot-brand gTLDs were added to the DNS root last night, despite an eleventh-hour attempt by South American governments to drag the company back to the negotiating table.

.amazon, along with the Japanese and Chinese translations — .アマゾン (.xn--cckwcxetd) and .亚马逊 (.xn--jlq480n2rg) — and its NIC sites have already gone live.

Visiting nic.amazon today will present you with a brief corporate blurb and a link to Amazon’s saccharine social-responsibility blog. As a dot-brand, only Amazon will be allowed to use .amazon domains.

The delegations come despite a last-minute plea to ICANN by the eight-government Amazon Cooperation Treaty Organization, which unsuccessfully tried to insert itself into the role of “joint manager” of the gTLDs.

ACTO believes its historical cultural right to the string outweighs the e-commerce giant’s trademark, and that its should have a more or less equal role in the gTLD’s management.

This position was untenable to Amazon, which countered with a collection of safeguards protecting culturally sensitive strings and various other baubles.

Talks fell through last year and ICANN approved the gTLDs over ACTO’s objections.

ACTO’s secretary-general, Alexandra Moreira, wrote to ICANN (pdf) May 21 to take one last stab at getting Amazon back in talks, telling CEO Göran Marby:

the name “Amazon” pertains to a geographical region constituting an integral part of the heritage of its countries. Therefore, we Amazonians have the right to participate in the governance of the “.amazon” TLD.

…

Our side is ready to resume negotiations on the TLD’s governance with the Amazon Corporation., from the point where their side interrupted it, with a view to arriving at a satisfactory agreement.

Her letter came in response to an earlier Marby missive (pdf) that extensively set out ICANN’s case that talks fell apart due to ACTO repeatedly postponing and cancelling scheduled meetings.

Despite the fact that Amazon’s basically got what it wanted, seven years after filing its gTLD applications, ACTO’s members didn’t get nothing.

The contracts Amazon signed with ICANN back in December have Public Interest Commitments in them that allow the governments to reserve up to 1,500 culturally sensitive strings from registration, as well as giving each nation its own .amazon domain.

South Africa might raise, or lower, some wholesale domain fees

ZADNA, the South African ccTLD registry, has put out a call for comments on plans to adjust the wholesale price of .za domain names.

For the last nine years, it’s had a two-tier pricing system, with registrars on its EPP registry paying a lower fee than those still on its outdated bespoke technology.

Now, the registry is talking about possibly raising the price of the EPP, which has been at ZAR 45 ($2.62) for the last five years, and/or scrapping the legacy system, where prices currently stand at ZAR 130 ($7.58).

The fee for the legacy registry has been going up for years, to encourage registrars to migrate to the more modern, efficient EPP system. Today, all but 2.5% of .za domains are on the EPP system.

While ZADNA says it has not made up its mind whether to raise, lower or freeze its fees, its consultation document (pdf) seems to pitch pretty hard for increases.

The registry argues that an hike linked to the local Consumer Price Index, which it says has gone up 21% since 2015, may be called in order to track the cost of doing business.

In terms of lowering the price, ZADNA says it may help .za become more competitive, but at the expense of its ability to invest in infrastructure.

Interested parties have until June 30 to send in their comments. A decision will be made by the end of July, and any price changes will come into effect in October,

Verisign says its coronavirus fee waivers have saved businesses millions

Verisign has decided to extend the temporary fee waiver it introduced in April for another two months, declaring the scheme a success so far.

On April 2, the company said it would no longer charge a fee when a registrant restores a domain in the period between expiration and deletion. Many registrars passed this on to their customers.

The stated goal of the offer was to help out registrants laid low by coronavirus.

“We estimate these restore fee waivers have already saved several million dollars for registrants of all types, including hard hit small businesses,” Verisign said in a blog post yesterday.

The service typically retails for around $80, so we’re talking about tens of thousands of domains that have been restored post-expiration for free over the space of two months.

Now, Verisign says the offer, which had been due to expire at the start of June, will end on August 1.

The company added that it will also waive the restore fees for names in .cc, .tv, .name and its four IDN gTLDs effective June 1.