RDRS usage stabilizing?

Usage of ICANN’s experimental Registration Data Request Service may have hit what might in future pass for normal levels, with not a massive amount of fluctuation across several key statistics for the last few months.

But ICANN’s latest monthly stats report, published late last week, shows that July was the worst month so far in terms of closed Whois data disclosure requests, dipping into double digits for the first time since its launch in late 2023.

There were 164 disclosure request in July, down from 169 in June but up on May’s low point of 154. The mix of requester types tilted towards IP owners — 40% versus a lifetime average of 33% — while law enforcement was down.

Only 97 requests were closed during the period, a third consecutive all-time low down from 134 in June and 140 in May. Approved requests were at 22.72% while denied requests were at 65.79%, a slight improvement in terms of the approved/denied mix compared to June.

It took a bit longer to get a request approved in July — 9.3 days on average versus 6.59 in June and a lifetime average of 7.19 days. The median time-to-approval since launch is still two days.

Getting a request denied took about half as long in the period — 10.7 days versus 19.46 in June. The median value is also still two days.

Two new, smaller registrars — one Chinese, one Moroccan — joined the project, and none quit, leading to a total of 92. Registrar coverage remained at 59% of registered gTLD domains.

The number of RDRS queries for domains held at unsupported registrars was down at 27.86% compared to a lifetime average of 29.7% but up against June’s 23.31%.

AI and games among July’s interesting dot-brand domains

A domain hosting a fun little video game for Lidl staff was the highlight dot-brand domain registration in July.

There were 210 registrations in dot-brands in July 2024, spread across 34 individual TLDs. As usual, the largest registrant was German financial services firm Deutsche Vermögensberatung, which gives .dvag domains to its agents, with 90 new regs.

Just like in the non-brand space, not all dot-brand regs immediately resolve publicly. Some never will. Others, technical indicators show, are only designed for private corporate purposes.

These are the new domains that caught my eye in July.

levelup.lidl (also level-up.lidl) — These domains leads to a surprisingly polished, cutesy-cutesy browser game where the player, presumably a new hire at the German supermarket giant, controls a cartoon potato (?) character as they wander around a 3D landscape interacting with other characters to learn about Lidl’s corporate values. Okay, I admit I only gave it five minutes, but it surely beats a PowerPoint.

gemini.google — Gemini is Google’s AI chatbot. The brand has been around since last December, but it took until July for the matching .google domain to be registered. It currently resolves to gemini.google.com, the official Gemini site. Google also registered another of its brands, fitbit.google, in the month, but it does not currently publicly resolve.

sustainability.bostik (and 27 others) — Adhesives maker Bostik registered 28 .bostik domains in July, all related to product categories (paper.bostik, tape.bostik), customer verticals (transportation.bostik, construction.bostik) or corporate purposes (history.bostik, careers.bostik). The company only has 36 active .bostik domains, registering none for over a year, so the new regs suggest a possible rethink of the dot-brand, even though the domains don’t yet publicly resolve.

escapegames.bnpparibas — Why would BNP Paribas, a large French bank, be interested in “escape games”? Is it planning on locking people in its massive safes? The domain doesn’t currently resolve, so I couldn’t tell you.

sellersinyourcommunity.amazon (and variants) — Amazon also registered the likes of sellersofthecommunity.amazon and sellersinthecommunity.amazon, but the registration of siyc.amazon suggests “Sellers In Your Community” is to be the correct brand for whatever localized e-commerce initiative the online retailer has in mind.

We grassed up .TOP, says free abuse outfit

A community-run URL “blacklist” project has claimed credit for the complaints that led to .TOP Registry getting hit by an ICANN Compliance action earlier this week.

.TOP was told on Tuesday that it has a month to sort of its abuse-handing procedures or risk losing the .top gTLD, which has over three million domains.

ICANN said the company had failed to respond to an unspecified complainant that had reported multiple phishing attacks, and now the source of that complaint has revealed itself in a news release.

URLAbuse says it was the party that reported the attacks to .TOP, which according to ICANN happened in mid April.

“Despite repeated notifications, the .TOP Registry Operator failed to address these issues, prompting URLAbuse to escalate the matter to ICANN,” URLAbuse said, providing a screenshot of ICANN’s response.

URLAbuse provides a free abuse blocklist that anyone is free to incorporate into their security setup. Domain industry partners include Radix, XYZ.com and Namecheap.

RDRS stats improve a little in June

ICANN’s Registration Data Request Service saw a small improvement in usage and response times in June, but it did lose a registrar, according to statistics published today.

There were 170 requests for private Whois data in the month, up a little from May’s historic low of 153, and 20.88% were approved, compared to 20.29% in May.

The mean average response time for an approved request was down to 6.59 days, from 11.34 days in May and April’s huge 14.09 days. Since the RDRS project began last November, the median response time is two days.

Smaller registrar OwnRegistrar opted out of the program during the month, but the coverage in percentage terms held steady at 59%, with 90 registrars of various sizes still participating.

New gTLDs and ccTLDs drive domain universe growth

The seasonally strong first quarter saw growth return to the domain industry, despite .com’s continuing woes, according to the latest edition of Verisign’s Domain Name Industry Brief.

There were 362.4 million domain registrations across all TLDs at the end of March, up by 2.5 million names or 0.7% from the start of the year, according to the report. Growth over 12 months was 7.5 million or 2.1%.

The growth came in spite of continued shrinkage at Verisign’s own .com and .net. The flagship .com was down from 159.6 million to 159.4 million while .net remained flat at 13.1 million, the DNIB states.

The two TLDs combined lost a total of 0.3 million names over the quarter and 2.3 million names over the year, Verisign said.

ccTLD regs were up to 139.5 million, an increase of 1.2 million or 0.9% from the start of the year and 3.7 million from a year earlier.

Russia’s .ru overtook the Netherlands’ .nl to become fourth largest ccTLD. That’s 6.4 million versus 6.3 million, but Verisign’s methodology sees it count some 770,000 Cyrillic .РФ domains as if they were also .ru.

All of the top 10 ccTLD grew apart from .uk and .it.

New gTLDs also performed strongly, with 33.3 million regs at the end of the quarter, up 1.5 million (4.7%) sequentially and six million (22.1%) year over year.

Perhaps because the raw volume numbers have started make Verisign’s TLDs look terrible in comparison over the last few editions, the DNIB has started reporting an estimated renewal rate for many of the TLDs the DNIB tracks.

As you might expect, the renewal numbers for new gTLDs suck. While established TLDs like .com have the usual mid-70s percent renewal rate, that number plummets to the 20s when you look at big 2012-round TLDs such as .xyz, .online and .top.

RDRS usage hits all-time low

Usage of ICANN’s Registration Data Request Service, which lets people submit Whois queries to registrars, hit a new low in May, six months after its launch.

RDRS was used to submit 156 requests for private Whois data in the period, the lowest number to date. In December, there were 173 requests; the peak was 290 the following month.

While requests from law enforcement held at 46, requests from IP holders, which had peaked at 117 in February, dipped a little between April and May, going from 43 to 37.

The mix between approved and denied requests was pretty much unchanged — about 20% of requests get approved and about 70% get denied.

The number of RDRS queries (domain lookups that don’t necessarily result in a request) was also at at all-time monthly low, at 1,393, from a December peak of 2,349 and April’s 1,435. Only a quarter of queries were for supported domains, down from 30% in April.

The wait time for approval shortened a little, having topped out at a massive 14 days in April, to an average of 11.34 days. Denials took on average 9.77 days.

Three more registrars joined the voluntary service in May, and none left. One of the newcomers was a second Alibaba accreditation, which brought in 3.5 million domains and raised the overall service coverage from 57% to 59% of all gTLD domains.

One way of spinning the numbers would be to say that RDRS users have become disillusioned with the service, another would be to say they are done kicking the tires and seeing what they can get away with, have discovered its limitations, and are now using it as intended.

The people have spoken on RDRS and they said “Meh”

Users of ICANN’s new Whois data request service appear to be overwhelmingly apathetic about it, if the results of the first quarterly user survey are to be believed.

ICANN sent surveys to 861 users of the Registration Data Request Service and 29 of the registrars that support it. Only 17 requesters and 15 registrars responded, and not every respondent answered every question.

With such a small sample size, it’s debatable whether the results can tell ICANN or anyone else whether RDRS is any good or not.

Asked whether having RDRS was better or worse than not having RDRS, only seven requester respondents answered. Two thought it was “much worse”, one thought it was “somewhat worse”, two thought it was “about the same” and two thought it was “somewhat better”.

Nobody clicked the button for “much better”, a fact that would be quite easy to seize upon as a headline if not for the fact that this is a survey of seven people and therefore pretty much worthless.

Responses to free-text questions perhaps shed a little light on the user experience: some people think it’s too slow, they’re not happy that they didn’t get the data they wanted, and the level of registrar support is too low.

Asked the same question about whether RDRS has made handling Whois requests better or worse, 11 registrars responded. The mix was heavily towards the “worse” end of the scale, which is probably not what ICANN wanted to hear.

In free-text responses, some registrars said they found the interface and workflow lacking, making the process of handling requests take more time and effort than doing the same outside RDRS. Pretty much the diametrical opposite of RDRS’s raison d’etre.

RDRS is a two-year pilot that has data-gathering as one of its primary purposes, but with such a lackluster response to the first survey ICANN is surely hoping the seven remaining surveys may produce some more meaningful stats.

The full survey results are available to read here (pdf), if you can be bothered.

DNS Abuse Institute changes name

The DNS Abuse Institute is rebranding around its flagship product in order to make its name shorter and less confusing, according to the organization.

It’s now called the NetBeacon Institute, after a free security service it launched two years ago, and its products are also being renamed accordingly.

The old NetBeacon service, a clearinghouse for DNS abuse reports, is now called NetBeacon Reporter. The old DNSAI Compass abuse metrics reporting service is now the NetBeacon Measurement and Analytics Platform.

“The old name was a bit long, generated confusion, and required explanation,” executive director Graeme Bunton said on social media.

It’s moved its internet presences from dnsabuseinstitute.org to netbeacon.org.

NetBeacon’s services are free and funded by .org registration fees collected by Public Interest Registry.

New Vegas conference “Davos for Web3 interoperability”

Specialist new gTLD consultancy D3 is to hold a two-day conference in Las Vegas at the end of the month it’s describing as the “Davos for Web3 interoperability”.

Imposingly named Dominion, it’s due to take place at the Cesar’s Palace hotel from April 29 to 30. The theme is the interoperability between the traditional domain name system and newer blockchain-based naming systems.

Organizers says it’s invite-only, and limited to about 125 attendees, but an invitation can be requested from the event’s web site.

Keynote speakers include Lily Liu (president of the Solana Foundation) and Fred Gregaard (CEO of the Cardano Foundation) on the blockchain side of things, and Matt Overman of Identity Digital on the domain name side, as well as D3 CEO Fred Hsu.

D3 specializes in arranging gTLD applications for blockchain firms and has five announced clients so far.

GlobalBlock blocking 2.5 million domains

GoDaddy-led brand protection project GlobalBlock says it is already blocking over 2.5 million domains, just a couple of weeks after its formal launch.

The GlobalBlock web site reports that 2,569,815 domains are currently being blocked across 559 extensions (a mix of ccTLDs, gTLDs, third-level domains and blockchain names), for an average of just under 4,600 per extension.

It’s difficult to extrapolate much useful information about rapid market demand for the service from this one number, for a variety of reasons.

First, the more-expensive GlobalBlock+ service can block well north of 10,000 domains, mostly homographic variants of a trademark, for a single fee, which could mean as few as just a couple hundred customers have signed up so far at the most pessimistic interpretation.

Second, GlobalBlock offered pricing incentives to existing customers of GoDaddy’s AdultBlock and Identity Digital’s Domain Protected Marks List, both of which are over a decade old, in the months-long run-up to launch.

The vanilla, single-brand GlobalBlock service retails for about $6,000 per year, with GlobalBlock+ going for closer to $9,000.