ICANN urged to crack down on new gTLD abuse

Registries selling dirt-cheap new gTLD domains should be rewarded with lower ICANN fees when they get proactive about abuse, while registrars that turn a blind eye to spammers should be suspended, an ICANN working group will recommend.
In its second batch of findings, the Competition, Consumer Trust, and Consumer Choice Review Team (CCT) said that financial incentives and a new complaints procedure should be used to persuade registries and registrars to fight DNS abuse.
The CCT said it “proposes the development of incentives to reward best practices preventing technical DNS abuse and strengthening the consequences for culpable or complacent conduits of technical DNS abuse” in a paper published today.
The review, which drew on multiple sources of market and abuse data, original research, and analysis of third-party research, is probably the most comprehensive study into the impact of the new gTLD program to date.
It concluded that overall rates of DNS abuse did not increase as a result of the program, but that bad actors are increasingly migrating away from legacy gTLDs such as .com to 2012-round TLDs such as .top, .gdn and Famous Four Media’s stable.
Indeed, much of the paper appears to be a veiled critique of FFM’s practices.
The registrar AlpNames, known to be affiliated with FFM and responsible for most of its retail sales, is singled out as the currently accredited registrar particularly favored by abusers.
The CCT report notes that AlpNames regularly sells domains for under $1, or gives them away for free, and offered a tool allowing registrants to randomly generate up to 2,000 available domains in 27 different gTLDs, pretty much inviting abuse.
“Certain registries and registrars appear to either positively encourage or at the very least willfully ignore DNS abuse. Such behavior needs to be identified rapidly and action
must be taken by ICANN compliance as deemed necessary,” the paper says.
The review found that gTLDs with no registration restrictions and the lowest prices had the most abuse. Duh.
“Generally, the DNS Abuse Study indicates that the introduction of new gTLDs did not increase the total amount of abuse for all gTLDs,” its report says. “[F]actors such as registration restrictions, price, and registrar-specific practices seem more likely to affect abuse rates.”
Drawing on data provided by 11 domain block-lists (SURBL, SpamHaus, etc), the paper states that at least one TLD (FFM’s .science) had an abuse rate excess of 50%.
Using SpamHaus data, the paper identities FFM’s .science, .stream, .trade, .review, .download and .accountant as having over 10% abuse during the period of its study. Also on that list: Uniregistry’s low-price .click and the China-based .top and .gdn.
One thing they all have in common is that AlpNames is a leading registrar, usually accounting for at least a quarter of domains under management.
There’s no way AlpNames/FFM is not aware of the amount of bad actors in its customer base, the question is what can ICANN do about it?
The CCT team recommends that registries and registrars with over 10% of their names used for abusive purposes should be tasked by ICANN with proactively cleaning up their zones. Those that fail to do so should be subject to a new Domain Abuse Dispute Resolution Process, it said.
These companies should have their contracts suspended when they’re “associated with unabated, abnormal and extremely high rates of technical abuse”, the report recommends.
There’s a big boilerplate specifying, tellingly, that registry operators that control registrars are affected by this recommendation too.
It should be noted that there was not a full consensus of support for the idea of a DADRP. Half a dozen working group members filed minority statements opposing it.
It’s not all stick in the report, however. There’s some carrot, too.
The CCT report recommends financial incentives such as fee reductions for registries that have “proactive anti-abuse measures” in place.
It noted that there is precedent for ICANN doing this kind of thing when it implemented an anti-tasting policy that seriously restricted registrars’ ability to get registry refunds.
The CCT Review Team was formed to figure out what impacts the 2012 new gTLD round had on the domain name market.
The completion of its work is one of several gating factors to the next new gTLD application round under ICANN’s new bylaws and the old Affirmation of Commitments with the US government.
It published initial recommendations earlier this year. This new set of recommendations is now open for public comment until January 8.

1 Comment Tagged: abuse, alpnames, cct, cct-rt, competition, Famous Four Media, ICANN

China and cheapo TLDs drag down industry growth — CENTR

The growth of the worldwide domain industry continued to slow in the third quarter, according to data out today from CENTR.
There were 311.1 million registered domains across over 1,500 TLDs at the end of September, according to the report, 0.7% year-over-year growth.
The new gTLD segment, which experienced a 7.2% decline to 20.6 million names, was the biggest drag.
But that decline is largely due to just two high-volume, low-price gTLDs — .xyz and .top — which lost millions of names that had been registered for pennies apiece.
Excluding these TLDs, year-over-year growth for the whole industry would have been 2.5%, CENTR said. The report states:

Over the past 2 years, quarterly growth rates have been decreasing since peaks in early 2016. The slowdown is the result of deletes after a period of increased investment from Chinese registrants. Other explanations to the slowdown are specific TLDs, such as .xyz and .top, which have contracted significantly.

The legacy gTLDs inched up by 0.2%, largely driven by almost two million net new names in .com. In fact, only five of the 17 legacy gTLDs experienced any growth at all, CENTR said.
In the world of European ccTLDs, the average (median) growth rate has been flat, but CENTR says it sees signs of a turnaround.
CENTR is the Council of European National Top-Level Domain Registries. Its Q3 report can be downloaded here (pdf).

Comment Tagged: cctlds, centr, growth, new gTLDs

Domain blogger O’Meara elected to auDA board

Domainer-blogger Ned O’Meara, one of the fiercest critics of auDA, has been elected to the organization’s board of directors.
He was one of four directors elected at the Australian ccTLD registry’s Annual General Meeting today.
auDA splits its board into “demand” and “supply” classes. The former are registrants, the latter registrars and resellers.
O’Meara, a domain investor who blogs at Domainer.com.au, was elected as a demand class director, along with Nicole Murdoch, a trademark lawyer who O’Meara backed when he was prevaricating about his own run.
On the supply side, members elected Canadian-born chair of the Australian Web Industry Association and founder of 1300 Web Pro, James Deck, and Grant Wiltshire.
Wiltshire, who works for the government of the Australian state of Victoria, has been a demand-class director for the last two years. There’s no indication in his candidate statement where in the domain industry he has worked.
The election came a week after auDA named its new chair and a new independent director.
Chris Leptos is the new chair. He replaces Stuart Benjamin, who was forced out earlier this year after a “Grumpy” campaign led by O’Meara.
Leptos is deputy chair of financial advisory firm Flagstaff Partners and sits on the board of PPB Advisory. That’s the company that conducted an audit of auDA following the departure of its former CEO last year.
O’Meara landing on the board means he will of course become privy to all the information he’e been campaigning for auDA to be more transparent about recently. How this will affect his blogging remains to be seen, he has yet to write a post about his election.

Comment Tagged: .au, auda, domainer.com.au, grumpy

New gTLDs blamed as .pl starts to shrink

Polish ccTLD .pl has lost over 125,000 domains in the last year, a change of growth trajectory blamed partly on new gTLDs.
NASK, the registry, released its third-quarter report in English today. It’s overflowing with more statistics than you could possibly need about the TLD’s performance.
The headline is that .pl is on the decline. On NASK’s web site, it reports registrations as of today are down 128,671 on the last 12 months.
It has 2,577,566 active domains in total today, 2,592,014 at the end of September, about three quarters of which are direct second-level registrations.
It’s one of many ccTLDs to have started to feel the pinch over the last few years. Increased competition, spurred by the expansion of the gTLD space, has been fingered as a likely culprit.
In the report’s introduction, NASK director Wojciech Kamieniecki wrote:

Temporary slowdown of the dynamics of the .pl domain market, observed from the beginning of the year — decrease in the number of new registrations — should be perceived in the light of extending the selection of attractive names as well as a growing number of new generic domains and increase in competition in the global domain market.

The renewal rate overall was 62.22%, a slight increase on 2016 but still on the low side for an established TLD. However, if you exclude third-level registrations (under .com.pl and .net.pl for example) the rate was a much more respectable 76.37%.
There were 203,898 new domains registered in the third quarter.
The vast majority — 93.96% — of current .pl domains are registered to Polish registrants, with registrants from Germany, the UK and the US also contributing to the total.
The full Q3 report can be downloaded here (pdf).

Comment Tagged: .pl, cctlds, nask, new gTLDs

GoDaddy renewal revamp “unrelated” to domainer auction outrage

GoDaddy has made some big changes to how it handles expired domain names, but denied the changes are related to domainer outrage today about “fake” auctions.
The market-leading registrar today said that it has reduced the period post-expiration during which registrants can recover their names from 42 days to 30. After day 30, registrants will no longer be able to renew or transfer affected names.
GoDaddy is also going to start cutting off customers’ MX records five days after expiry. This way, if they’re only using their domain for email, they will notice the interruption. Previously, the company did not cut off MX records.
The changes were first reported at DomainInvesting.com and subsequently confirmed by a GoDaddy spokesperson.
One impact of this will be to reduce confusion when GoDaddy puts expired domains up for auction when it’s still possible for the original registrant reclaim them, which has been the cause of complaints from prominent domain investors this week.
As DomaingGang reported yesterday, self-proclaimed “Domain King” Rick Schwartz bought the domain GoDaddyBlows.com in order to register his disgust with the practice.
Konstantinos Zournas of OnlineDomain followed up with a critique of his own today.
But the GoDaddy spokesperson denied the changes are being made in response to this week’s flak.
“This is unrelated to any events in the aftermarket,” he said. “We’ve been working on this policy for more than a year.”
He said the changes are a case of GoDaddy “optimizing our systems and processes”. The company ran an audit of when customers were renewing and found that fewer than 1% of names were renewed between days 30 and 42 following expiration, he said.
GoDaddy renews about 2.5 million domains per month in just the gTLDs it carries, according to my records, so a full 1% would equal roughly 25,000 names per month or 300,000 per year. But the company spokesperson said the actual number “quite a bit less” than that.
How many of these renewals are genuinely forgetful registrants and how many are people attempting to exploit the auction system is not known.
The changes will come into effect December 4. The news broke today because GoDaddy has started notifying its high-volume customers.

1 Comment Tagged: auctions, expiration, godaddy, renewal, schwartz

Aussie gov refuses to spill the beans on ICANN vice chair’s firing

The Australian government has refused to release documents concerning alleged “financial irregularities” at local ccTLD manager auDA that have been linked to the firing of former CEO Chris Disspain.
A request under the Freedom of Information Act sought documents detailing Disspain’s March 2016 termination, as well as high levels of travel expenses and apparent under-reporting of “fringe benefit tax” under his watch.
The request was filed in September by by industry consultant Ron Andruff, who is known to have beef with Disspain after having been passed over for an important ICANN leadership role.
One of the specific documents sought by Andruff was an unpublished audit by PPB Advisory known to have uncovered slack historical expenses management practices and high levels of travel expenditure.
While rumors have circulated, there have been no substantiated allegations of wrongdoing by Disspain.
The Australian Department of Communications and the Arts told Andruff this weekend that 13 relevant documents had been identified and reviewed, but that all were exempt from disclosure under the FOI Act.
Reasons given include the right to privacy of the individual concerned and the fact that the information could fuel “unsubstantiated allegations of misconduct”.
The Department also thought that disclosing the documents could make it harder to it to obtain information from auDA in future, particularly relevant given that it recently kicked off a review of the organization.
While acknowledging there were some public interest reasons to publish the documents, on balance it said that the public interest reasons not to publish were more numerous.
auDA has been plagued by problems such as high turnover of staff and board, unpopular policies, and the member-instigated ouster of its chair, since Disspain left.
Separately, Disspain became ICANN’s vice chair earlier this month, having sat on the board for the last seven years as a representative of the ccTLD community.
He’s one of four community-nominated ICANN directors who have agreed to undergo the same background checks as their Nominating Committee-appointed counterparts, in part due to pressure applied by Andruff.
The FOI response can be viewed here (pdf).

Comment Tagged: .au, andruff, auda, australia, disspain, expenses, ICANN, nomcom, ppb

Verisign launches name-spinner tool for if you really, really need a .com

Verisign has launched a new name-spinning tool, designed to help new businesses find relevant domain names in Verisign-managed TLDs.
It’s called NameStudio. Verisign said:

NameStudio can deliver relevant .com and .net domain name suggestions based on popular keywords, trending news topics and semantic relevance. Pulling from multiple and diverse data sources, the service can identify the context of a word, break search terms apart into logical combinations and quickly return results. It can also distinguish personal names from other keywords and use machine-learning algorithms that get smarter over time.

The machine-learning component may come in handy, based on my non-scientific, purely subjective messing around at the weekend.
I searched for “london pubs”, a subject close to my heart. Naturally enough, londonpubs.com is not available, but the suggestions were not what you’d call helpful.

As you can see, the closest match to London it could find was “Falkirk”, a town 400 miles away in Scotland. The column is filled with the names of British towns and cities, so the tool clearly knows what London is, even if its suggestions are not particularly useful for a London-oriented web site.
The closest match to “pubs” was “cichlids”, which Google reliably informs me is a type of fish. “ComicCon” (a famous trademark), “barbarians” and a bunch of sports, dog breeds and so on feature highly on its list of suggestions.
NameStudio obviously does not know what a “pub” is, but it’s not a particularly common word in most of Verisign’s native USA, so I tried “london bars” instead. The results there were a little more encouraging.
Again, Falkirk topped the list of London alternatives, a list that this time also prominently included the names of Australian cities.
On the “bars” column, suggestions such as “parties”, “stags” and “nights” suggests that NameStudio has a notion what I’m looking for, but the top suggestion is still “birthdays”.
I should note that the service also suggests prefixes such as “my” and “free” and suffixes such as “online” or “inc”, so if you have your heart set on a .com domain you’ll probably be able to find something containing your chosen keywords.
The domains alllondonpubs.com and alllondonbars.com were probably the best available alternatives I could find. For my hypothetical London-based pub directory/blog web site, they’re not terrible choices.
I also searched NameStudio for “domain blog”, another subject close to my heart.
The top three suggestions in the “domain” column were “pagerank”, “websites” and “query”. Potentially relevant. Certainly some are in the right ball-park. Let’s ignore that “pagerank” is a Google trademark that nobody really talks about much any more.
The top suggestions to replace “blog” were “infographic”, “snippets” and “rumor”. Again, right ball-park, but my best bet still appears to be adding a prefix or suffix to my original keywords.
I tried a few more super-premium one-word keywords too.
The best suggestion for “vodka” was “dogvodka.com”. For “attorney”, it was “funattorney.com”. For “insurance”, there were literally no available suggestions.
Currently — and to be fair the tool just launched last week — you’re probably better off looking at other name suggestion tools.
NameStudio does not appear to currently suggest domains that are listed for sale on the aftermarket. I expect that’s a feature addition that could come in future.
But possibly the main problem with the tool appears to be that it currently only looks for available names in .com, .net, .tv or .cc.
Repeating my “london pubs” search with GoDaddy and DomainsBot, which each support hundreds more TLDs, produced arguably superior results.

They’re only superior, of course, if you consider your chosen keywords, and the brevity of your domain, more important than your choice of TLD. For some people, a .com at the end of the domain will always be the primary consideration, and perhaps those people are Verisign’s target market.

1 Comment Tagged: .com, name spinning, namestudio, verisign

Almost half of ccTLDs may block some Whois data

Almost half of ccTLDs are planning to hide parts of Whois results from public view in response to incoming European Union law.
That’s according to a recent informal survey of the members of CENTR, the Council of European National Top Level Domain Registries, detailed in a letter to ICANN (pdf) last week.
According to the survey of 28 ccTLDs, 13 of them (46.4%) said they plan to “hide certain data fields” in response to the requirements of the General Data Protection Regulation.
GDPR forces companies to give EU citizens more rights to control how their data is used, which includes the publication of Whois data.
While the sample size is small, the results are probably indicative of the direction of the industry.
The industry and community is still struggling to reconcile longstanding Whois practices and contractual requirements with the new law, but a consensus seems to be forming that Whois as we know it is not going to survive.
Hiding data fields such as contact information to general Whois users, while making it available to verified law enforcement, may be one part of becoming GDPR-compliant. It’s what two Dutch gTLD registries are already doing.
The CENTR survey also found that smaller numbers of registries are planning to throttle Whois queries and revise their agreements in response to GDPR, which comes into full effect next May.
The survey was carried out in June. Given the speed at which discussions in the community are progressing, I would not be surprised if the same survey carried out today would produce different results.

3 Comments

Hurricane victims get a renewal pass under ICANN rules

ICANN has given registries and registrars the ability to delay the cancellation of domain names owned by victims of Hurricane Maria and other similar natural disasters.
In a note to contracted parties, published by Blacknight boss Michele Neylon this weekend, Global Domains Division president Akram Atallah said:

registrars will be permitted to temporarily forebear from canceling domain registrations that were unable to be renewed as a result of the natural disaster.

Maria and other hurricanes caused widespread damage to infrastructure in the Caribbean earlier this year — not to mention the loss of life — making it difficult for many people to get online to renew their registrations.
ICANN’s Registrar Accreditation Agreement ties registrars to a fairly strict domain name renewal and expiration life-cycle, but there’s a carve out for certain specified “extenuating circumstances” such as bankruptcy or litigation.
Atallah’s note makes it clear that ICANN considers hurricane damage such a circumstance, so its contractual compliance department will not pursue registrars who fail to expire domains on time when the registrant has been affected by the disaster.
He added that perhaps it’s time for the ICANN community to come up with a standardized policy for handling such domains. There’s already been mailing list chatter of such an initiative.
ICANN is heading to Puerto Rico, which was quite badly hit by Maria, for its March 2018 public meeting.
While attendees have been assured that the infrastructure is in place for the meeting to go ahead, large parts of the island are reportedly still without power.

2 Comments Tagged: expiration, hurricane maria, ICANN

Cops tell Nominet to yank 16,000 domains, Nominet complies

Nominet suspended over 16,000 .uk domain names at the request of law enforcement agencies in the last year.
The registry yanked 16,632 domains in the 12 months to October 31, more than double the 8,049 it suspended in the year-earlier period.
The 2016 number was in turn more than double the 2015 number. The 2017 total is more than 16 times the number of suspended domains in 2014, the first year in which Nominet established this cozy relationship with the police.
The large majority of names — 13,616 — were suspended at the request of the Police Intellectual Property Crime Unit. Another 2,781 were taken down on the instruction of National Fraud Intelligence Bureau.
Nominet has over 12 million .uk domains under management, so 16,000 names is barely a blip on the radar overall.
But the fact that police can have domains taken down in .uk with barely any friction does not appear to be acting as a deterrent to bad actors when they choose their TLD.
The registry said that just 15 suspensions were reversed — which requires the consent of the reporting law enforcement agency — during the period. That’s basically flat on 2016.
“A suspension is reversed if the offending behavior has stopped and the enforcing agency has since confirmed that the suspension can be lifted,” the company said.
The company does not publish data on how many registrants requested a reversal and didn’t get one, nor does it publish any of the affected domains, so we have no way of knowing whether there’s any ambiguity or overreach in the types of domains the police more or less unilaterally have taken down.
It seems that the only reasons suspension requests do not result in suspensions are when domains have already been suspended or have already been transferred to an IP rights holder by court order. There were 32 of those in the last 12 months, half 2016 levels.
The separate, ludicrously onerous preemptive ban on domains that appear to encourage sexual violence resulted in just two suspensions in the last year, bringing the total new domains suspended under the rule since 2014 to just six.
Some poor bugger at Nominet had to trawl through 3,410 new registrations containing strings such as “rape” in 2017 to achieve that result, up from 2,407 last year.

1 Comment Tagged: .uk, crime, law enforcement, nominet, rape, suspensions