Tech giants gunning for AlpNames over new gTLD “abuse”

A small group of large technology companies including Microsoft and Facebook have demanded that ICANN Compliance take a closer look at AlpNames, the budget registrar regularly singled out as a spammers’ favorite.
The ad hoc coalition, calling itself the Independent Compliance Working Party, wrote to ICANN last week to ask why the organization is not making better use of statistical data to bring compliance actions against the small number of companies that see the most abuse.
AlpNames, the Gibraltar-based registrar under common ownership with new gTLD portfolio registry Famous Four Media, is specifically singled out in the group’s letter.
The letter, sourcing the August 2017 Statistical Analysis of DNS Abuse in gTLDs (pdf), says there “is a clear problem with one particular contracted party”.
AlpNames was the registrar behind over half of the new gTLD domains blacklisted by SpamHaus over the study period, for example, the letter states.
The tiny territory of Gibraltar also frequently ranks unusually highly on abuse lists due to AlpNames presence there, the letter and report say.
The ICWP letter also says that the four gTLDs .win, .loan, .top, and .link were used by over three quarters of abusive domains over the SADAG study period.
The letter calls the abuse rates “troublesome” and says:

We are alarmed at the levels of DNS abuse among a few contracted parties, and would appreciate further information about how ICANN Compliance is using available data to proactively address the abusive activity amongst this subset of contracted parties in order to improve the situation before it further deteriorates.

It goes on to wonder whether high levels of unaddressed abuse could amount to violations of new gTLD Registry Agreements and Registrar Accreditation Agreements, and to ask whether there any barriers to ICANN Compliance pursuing breach claims against such potential violations.
The ICWP comprises Adobe, DomainTools, eBay, Facebook, Microsoft and Time Warner. It’s represented by Fabricio Vayra of Perkins Coie.
Other than the letter (pdf), the Independent Compliance Working Party does not appear to have any web presence, and a spokesperson has not yet responded to DI’s request for more information.
The SADAG report also singled out Chinese registrar Nanjing Imperiosus Technology Co, aka DomainersChoice.com, as having particularly egregious levels of abuse, but noted that this abuse disappeared after ICANN terminated its RAA last year.
AlpNames has not to date had any public breach notices issued against it, but this is certainly not the first time it’s been singled out for public censure.
In November last year, ICANN’s Competition, Consumer Trust, and Consumer Choice Review Team (CCT) named it in a report that claimed: “Certain registries and registrars appear to either positively encourage or at the very least willfully ignore DNS abuse.”
AlpNames seems to have been used often by abusers due to its bargain-basement, often sub-$1 prices — making disposable domains more cost effective — and its tool that allowed up to 2,000 domains to be registered simultaneously.
If not actively soliciting abusive behavior, these factors certainly don’t make abuse any more difficult.
But will ICANN Compliance take action in response to the criticism leveled by CCT and now ICWP?
The main problem with the ICWP letter, and the SADAG report it is based upon, is that the data it uses is now rather old.
The SADAG report sourced abuse databases only up to January 2017, a time when AlpNames’ total gTLD domains under management was at its peak of around three million names.
Since then, the company has been hemorrhaging DUM, losing hundreds of thousands of domains every month. At the end of November 2017, the most recent data compiled by DI shows that it was down to around 838,000 domains.
It’s quite possible that AlpNames’ customer base is no longer the den of abuse it once was, whether due to natural attrition or a proactive purge of bad actors.
A month ago, in a press release connected with a $5.4 million buy-out of an co-founder, AlpNames chairman Iain Roache said he has a “10-year strategic plan” to turn AlpNames into a “Tier-1” registrar and “bring the competition to the incumbents”.

10 Comments Tagged: abuse, alpnames, DomainTools, ebay, facebook, Famous Four Media, ICANN, independent compliance working party, Microsoft, new gTLDs, spam

Get drunk on Neustar’s tab and it will donate money to hurricane relief

Neustar has promised to donate thousands of dollars to a Puerto Rican hurricane relief charity, providng enough people show up to its open bar event in San Juan next week.
It’s fairly standard for domain companies of Neustar’s size to host free after-hours social events during ICANN meetings, but this time the company said it will donate $25 for each attendee to charity.
The beneficiary is the Puerto Rico Resistance Fund, operated by Americas for Conservation and the Arts, which is helping rebuild the island after Hurricane Maria hit it for six last September.
“We want to bring together the community, help spread awareness of the hardship and devastation in Puerto Rico, and make our community proud they are contributing in a small way financially,” Neustar VP Lori Anne Wardi told DI.
With the company telling me it expects 500 guests or more to the invitation-only event, expect a total donation topping $12,500.
The venue is the Antiguo Casino, which appears to be about a 10-minute taxi ride from the Puerto Rico Convention Center, at which the ICANN 61 public meeting is being held.
The event runs from 1900 to 2330 local time.
The official death toll in Puerto Rico from Maria was 64, but a New York Times analysis puts the number at closer to 1,000. Parts of the island, a US territory, are still suffering from infrastructure problems such as power outages.

2 Comments Tagged: ICANN, icann 61, neustar, puerto rico

Industry report show slightly stronger growth than Verisign’s

The latest domain name industry growth figures from CENTR show slightly better performance than a recent report from Verisign covering the same period.
CENTR says in its latest DomainWire Global TLD Report there were 331.1 million registered domains at the end of 2017, whereas Verisign, in its Domain Name Industry Brief last month, put that at 332.4 million domains.
But CENTR’s figures show growth of 1.2% compared to the end of 2016, a figure Verisign put at 0.9%.
The CENTR report shows growth in ccTLDs offset by a 0.4% decline in gTLD registrations. The drag factors for gTLDs were largely .net, .xyz and .top.
CENTR and Verisign use mostly the same sources for their data — published zone files for gTLDs and cooperative ccTLDs, and independent researcher Zooknic to plug the gaps — but they vary in how they calculate their growth numbers.
For example, Verisign said .com ended the year with 131.9 million names, but CENTR puts that number at 130.4 million. It looks to me like Verisign counts registered domains that do not appear in the .com zone file to get to its total.
In addition, CENTR excludes dot-brand gTLDs, gTLDs with fewer than 500 domains, and ccTLDs that do not provide reliable quarter-to-quarter data from its calculations.
The CENTR report can be downloaded here.

Comment Tagged: centr, dnib, domain name industry brief, domainwire, growth, verisign

Google’s $25 million .app domain finally has a launch date

One of the questions I get asked fairly regularly is “When is .app coming out?”, but until today I haven’t had a good answer.
Now I do. Google has finally released its launch timeline for the could-be-popular new gTLD.
.app will go to sunrise March 29, the company said last week.
Trademark holder exclusivity will end May 1, at which point a week-long Early Access Period will kick in.
There will be an extra fee, so far undisclosed, for EAP buyers.
Finally, on May 8, everyone will get access to the domain as it goes into general availability.
Registry pricing has not been disclosed.
Unusually for a new gTLD, Google plans to keep its Trademark Claims service — which notifies registrants and trademark owners when there’s a potential trademark infringement — open indefinitely, as opposed to the minimum 90-day period.
.app was delegated in early July 2015, so it’s been a loooong wait for people interested in the space.
Google paid $25 million for .app at an ICANN public auction in February 2015. At the time, that was a record-breaking price for a gTLD, but it’s since between dwarfed by the $135 million Verisign is paying for .web.
Google also said that it’s currently working on a launch plan for .dev, another gTLD that folk have been asking about, but that for now it’s focused on .app alone.

3 Comments Tagged: .app, eap, google, google registry, launch, new gTLDs, sunrise

Whois privacy will soon be free for most domains

Enormous changes are coming to Whois that could mark the end of Whois privacy services this year.
ICANN has proposed a new Whois model that would anonymize the majority of domain name registrants’ personal data by default, only giving access to the data to certain certified entities such as the police.
The model, published on Friday and now open for comment, could change in some of the finer details but is likely being implemented already at many registries and registrars.
Gone will be the days when a Whois lookup reveals the name, email address, physical address and phone number of the domain’s owner.
After the model is implemented, Whois users will instead merely see the registrant’s state/province and country, organization (if they have one) and an anonymized, forwarding email address or web form for contact purposes.
Essentially, most Whois records will look very much like those currently hiding behind paid-for proxy/privacy services.
Technical data such as the registrar (and their abuse contact), registration and expiry dates, status code, name servers and DNSSEC information would still be displayed.
Registrants would have the right to opt in to having their full record displayed in the public Whois.
Anyone wanting to view the full record would have to be certified in advance and have their credentials stored in a centralized clearinghouse operated by or for ICANN.
The Governmental Advisory Committee would have a big hand in deciding who gets to be certified, but it would at first include law enforcement and other governmental agencies.
This would likely be expanded in future to include the likes of security professionals and intellectual property lawyers (still no word from ICANN how the legitimate interests of the media or domain investors will be addressed) but there could be a window in which these groups are hamstrung by a lack of access to thick records.
The proposed model is ICANN’s attempt to bring Whois policy, which is enforced in its contracts with registries and registrars, into line with GDPR, the European Union’s General Data Protection Regulation, which kicks in fully in May.
The model would apply to all gTLD domains where there is some connection to the European Economic Area.
If the registrar, registry, registrant or a third party processor such as an escrow agent is based in the EEA, they will have to comply with the new Whois model.
Depending on how registrars implement the model in practice (they have the option to apply it to all domains everywhere) this means that the majority of the world’s 188 million gTLD domains will probably be affected.
While GDPR applies to only personal data about actual people (as opposed to legal persons such as companies), the ICANN model makes no such distinction. Even domains owned by legal entities would have their records anonymized.
The rationale for this lack of nuance is that even domains owned by companies may contain personal information — about employees, presumably — in their Whois records.
Domains in ccTLDs with EEA connections will not be bound to the ICANN model, but will rather have to adopt it voluntarily or come up with their own ways to become GDPR compliant.
The two largest European ccTLDs — .uk and Germany’s .de, which between them account for something like 28 million domains — last week separately outlined their plans.
Nominet said that from May 25 it will no longer publish the name or contact information of .uk registrants in public Whois without their explicit consent. DENIC said something similar too.
Here’s a table of what would be shown in public Whois, should the proposed ICANN model be implemented.
[table id=50 /]
The proposal is open for comment, with ICANN CEO Goran Marby requesting emailed input before the ICANN 61 public meeting kicks off in Puerto Rico this weekend.
With just a couple of months left before the law, with its huge fines, kicks in, expect GDPR to be THE hot topic at this meeting.

5 Comments Tagged: gac, gdpr, ICANN, icann 61, privacy, puerto rico, whois

ICANN loses comms chief to Fannie Mae

ICANN’s top PR guy has quit for a job at Fannie Mae.
Duncan Burns, senior vice president of global communications and managing director of the Washington DC office, will leave the organization next month after the ICANN 61 meeting in Puerto Rico.
Burns has been leading comms at ICANN for five years. Last year, he also took over as ICANN’s lead DC lobbyist, a reduced role in the post-IANA-transition world.
He told DI that he’s going to be VP of external communications at Fannie Mae, the mortgage finance company.
ICANN said that while a permanent replacement is found his deputy Gwen Carlson will take over the comms role while Chris Mondini, VP of stakeholder engagement, will cover US government relations.
If anyone’s wondering how this affects ICANN’s current budget discussions, Burns received total compensation in excess of $415,000 in 2016, ICANN’s last-reported tax year.

Comment Tagged: fannie mae, ICANN

auDA probably won’t pass on full Afilias savings to registrants

Switching .au’s back-end to Afilias will cut auDA’s per-domain costs by more than half, but registrants are not likely to benefit from the full impact of the savings.
auDA’s Bruce Tonkin, who led the committee that selected Afilias to replace incumbent Neustar, told DI this week that the organization is likely to take a bigger cut of .au registration fees in future, in order to invest in marketing.
That would include marketing the ability of Aussies to register .au domains at the second level for the first time — a controversial, yet-to-roll-out proposal.
Tonkin confirmed that the back-end fee auDA will be paying Afilias is less than half of what it is currently paying Neustar — the unconfirmed rumor is that it’s 40% of the current rate — but said that Afilias was not the cheapest of the nine bidders.
While .au names are sold for a minimum of two years, the current wholesale price charged to registrars works out to AUD 8.75 ($6.85) per year, of which Neustar gets AUD 6.33; auDA receives the other AUD 2.42.
A back-end fee of roughly $5 (US) per domain per year is well above market rates, so it’s pretty clear why auDA chose to open the contract to competition.
Tonkin explained the process by which Afilias was selected:

We first considered scoring without price, and Afilias received the highest score for non-financial criteria.
We then considered pricing information to form an assessment of value for money. The average pricing across the 9 [Request For Tender] responses was less than half of the present registry back-end fee ($6.33). Afilias was close to the average pricing, and while it was not the cheapest price — it was considered best value for money when taking into account the highest score in non-financial criteria.

I asked Afilias for comment on rumors that its price was 60% down on the current rate and received this statement:

Afilias believes auDA chose us based on the best overall value for the Australian internet community. The evaluation heavily weighted expertise, quality and breadth of service over price. While we don’t know what others bid, Afilias works to be competitive in today’s market. Attempts to price significantly higher than market without a value proposition are unrealistic and could even be considered price gouging.

It’s not known what price Neustar bid for the continuation of the contract, but I expect it will have also offered a deep discount to its current rate.
By switching, auDA is basically going to be saving itself over AUD 3 per domain per year, which works out to a total of AUD 9 million ($7 million) per year at least.
But the organization has yet to decide how much of that money, if any, to pass on to its registrars and ultimately registrants.
The auDA board of directors will meet in March to discuss this, Tonkin (who is in charge of the registry transition project but not on the board) said.
“We don’t want to set expectations that the wholesale price is going to change massively,” he said.
“I don’t expect it’s going to be any higher than the current wholesale price,” he said.
But he said he expects auDA to increase its slice of the pie in order to raise more money for marketing. The organization does “basically no marketing” now, he said.
“There’s certainly strong interest in doing more to market and grow the namespace,” he said. “One option is that more money is put into marketing the namespace and growing awareness of .au… That AUD 2.42, I expect that to change.”
This would include marketing direct second-level registrations, an incoming change to how .au names are sold that has domain investors worried about confusion and market dilution.
Outrage over the 2LD proposal — it appears to be a done deal, even if the details and timeline have yet to be finalized — has started attracting the attention of business media in Australia recently.
But auDA’s own research shows that opposition is not that substantial outside of these “special interests”.
A survey last year showed that 40% of .com.au registrants “support” or “strongly support” the direct registration proposal, with 18% “opposed” or “strongly opposed” Another 42% were completely unaware of the changes.
Support among .org.au registrants was lower, and it was higher among .net.au registrants.
But 36% of “special interests” — which appears to mean people who discovered the survey due to their close involvement in the domain industry — were opposed to the plan.
There’s no current timeline for the introduction of direct registrations, but the back-end handover from Neustar to Afilias is set to happen July 1 this year.
Neustar acquired AusRegistry, which has been running .au since 2002, for $87 million a couple of years ago.

4 Comments Tagged: .au, afilias, auda, back-end, direct, neustar, second-level

Should ICANN cut free travel, or its own staff?

Is ICANN’s suddenly limited budget best spent on its staff wages or on flights and hotels for certain volunteers?
That’s the debate that’s been emerging in the ICANN community in the last few weeks since ICANN revealed it would have to make some “tough choices” in the face of lower than expected revenue from a stagnant domain industry.
Members of the ICANN Fellowship program have started a petition calling for the organization to look at its own staffing needs before cutting the number of Fellows it supports in half.
The petition is not signed (though I have a pretty good idea who started it) and at time of publication, it has 194 signatures.
The Fellowship program sees ICANN pay for the travel and lodging, along with a per diem allowance, of up to 60 community members at each of its three annual major meetings.
They’re usually ICANN newbies and generally from less-developed regions of the world.
But because ICANN is trying to cut $5 million from its fiscal 2019 budget it wants to reduce the number of supported Fellows down to 30 per meeting.
ICANN says (pdf) that the average cost to send a Fellow to a meeting is $3,348, which would work out at or $200,880 per meeting or $602,640 per year.
Cutting the program in half would presumably therefore save a tad over $300,000 a year.
It’s not nothing, but it’s chickenfeed in a budget penciled in at $138 million for FY19.
While Fellows are not the only people seeing budget cutbacks, the only one of five broad areas that will actually see growth in ICANN’s FY19 budget is staffing costs.
The organization said personnel spend will go up from $69.5 million to $76.8 million in its next fiscal year.
That’s based on the staff growing by 34 people in the fiscal year to June 30. Those people will then earn a full year’s wages in FY19, rather than the partial year they earned in FY18.
It also plans to increase headcount by four people in FY19, and to give employees an average of 2% pay rises (cut from 4%).
The end-of-year headcount would be 425. That means headcount will have doubled since about September 2013. It was at under 150 when the new gTLD program kicked off in 2012.
Does ICANN really need so many staff? It’s a question people have been asking since before headcount even broke into three digits (over 10 years ago).
The petition organizers wrote that ICANN could not only maintain but increase funding for Fellows by just lowering staffing levels by one or two people, adding:

Given that most of the fellows are from developing countries, the Fellowship Program is not only a learning platform for capacity building to empower volunteers with the skills needed to create a positive impact both within ICANN and in their home countries, but also it is practically the only way to overcome the insurmountable financial burden faced by individuals coming from world regions where even access to drinking water is problematic, not to mention access to computers and quality IT infrastructure that is taken for granted in developed countries.

There’s no denying that attending ICANN meetings can be a pricey undertaking. I come from the developed world and I’ve skipped a few for cost reasons.
But there’s no point ICANN splashing out its cash (which is after all a quasi-tax gathered ultimately from domain registrants) on a Fellowship program unless it knows what the ROI is.
Are the Fellows worth the money?
There’s a kind of running joke — that, disclosure alert, I participate in regularly — that Fellows are mainly good for being strong-armed into singing ICANN’s praises at the open-mic Public Forum sessions held at two of the three meetings each year.
But that’s probably not entirely fair. The program has supported some committed community members who are certainly not slackers.
There are two former Fellows — Léon Felipe Sanchez Ambia and Rafael Lito Ibarra — currently sitting on the ICANN board of directors, and at least one I know of on the GNSO Council.
There are also about 10 members of ICANN staff who were former fellows and ICANN has documented several more participants who are still active in formal roles in ICANN.
Would these people have gotten so involved with ICANN if that financial support had not been there for them originally? I don’t know.
ICANN has attempted in the past to put some hard numbers on the value of the program, and the results are perhaps not as encouraging as when one cherry-picks the success stories.
It conducted a survey last year (pdf) of all 602 former Fellows and managed to get a hold of 597 of them. It wanted to know whether they were still engaged in the ICANN community.
But only 53%, 317 people, even bothered to respond to the survey. Of those who did respond, 198 said they were still involved in the ICANN community.
Basically, of the 600 Fellows ICANN has subsidized to attend ICANN meetings over the last 10 years, just one third say they are still participating.
Is that a good hit rate?
Would it be worth firing a couple of ICANN staffers — or at least allowing a position or two to fall to attrition — in order to keep the Fellowship program funded at current levels?
I honestly have no strong opinion either way on this one, but I’d be interested to hear what you have to say.
No doubt ICANN is too. Its public comment period on the FY19 budget is still open.

8 Comments Tagged: budget, fellows, fellowship, ICANN

Brandsight starts beta with “large corporations”

New brand management registrar Brandsight says it has started a beta test of its initial service.
Head of marketing Elisa Cooper tells DI the service is being tested by prospective clients at unspecified “large corporations”.
Brandsight Domain Name Management is a portfolio management system for large corporate domain controllers.
The company reckons its service is more streamlined than the competition, leveraging “big data” and modern user interface techniques to make brand managers’ lives easier.
Features include the ability to make sure domains are forwarding to where they’re supposed to. There’s also an industry news feed, according to a press release.
Brandsight was formed last year and staffed by former senior staffers from Fairwinds and MarkMonitor who thought they’d spotted a gap in the market.

Comment Tagged: brandsight, trademarks

ICANN would reject call for “diversity” office

ICANN’s board of directors would reject a call for an “Office of Diversity”, due to its current budget crunch.
The board said as much in remarks filed to a public comment period that got its final report this week.
The report of the CCWG-Accountability Work Stream 2 working group had recommended several potential things ICANN could do to improve diversity in the community, largely focused on collecting and publishing data on diversity.
“Diversity” for the purposes of the recommendations does not have the usual racial connotations of the word. Instead it means: geography, language, gender, age, physical disability, skills and stakeholder group.
Some members of the working group had proposed an independent diversity office, to ensure ICANN sticks to diversity commitments, but this did not gain consensus support and was not a formal recommendation.
Some commenters, including (in a personal capacity) a current vice chair of the Governmental Advisory Committee and a former ICANN director, had echoed the call for an office of diversity.
But ICANN’s board said it would not be able to support such a recommendation:

Given the lack of clarity around this office, lack of consensus support within the subgroup (and presumably within the CCWG-Accountability and the broader community), and noting the previously-mentioned budget and funding constraints and considerations, the Board is not in a position to accept this item if it were to be presented as a formal consensus-based recommendation

In general terms, it encouraged the working group to consider ICANN’s “limited funding” when it makes its final recommendations.
It added that it may be difficult for ICANN to collect personal data on community members, in light of the General Data Protection Regulation, the EU privacy law that kicks in this May.
All the comments on the report can be found here.

Comment Tagged: accountability, diversity, gdpr, ICANN, privacy