Registrar shamed for alleged crypto abuse neglect

ICANN has given a warning to Malaysian registrar WebNic, claiming that it has turned a blind eye to abuse reports in breach of new Registrar Accreditation Agreement rules.

ICANN Compliance says the company, a subsidiary of Kuala Lumpur-based Qinetics, failed to take action to resolve abuse reports made against several domains it manages.

Online reports and databases suggest the names in question were used in phishing attacks attempting to steal cryptocurrency wallet credentials.

Compliance said it “has observed a concerning pattern regarding DNS Abuse mitigation”, saying WebNic continually drags its feet on responding to abuse reports, often only taking action after ICANN gets involved.

The breach notice adds:

The Registrar frequently issued repeated requests for evidence to abuse reporters – even when the original reports appeared actionable – and failed to fully consider information or clarifications provided by the abuse reporter, ICANN or otherwise reasonably accessible to the Registrar. In other cases, the Registrar requested evidence from the abuse reporters that did not appear to be relevant to the reported activity, causing additional delays.

WebNic is not a young, fly-by-night registrar. It’s been around a quarter century and has over 800,000 domains under management just in the gTLDs. Its parent also offers registry back-end services.

The company has until August 19 to make Compliance happy or risk termination proceedings.

Comment Tagged: abuse, breach, compliance, ICANN, phishing, webnic

Poblete’s ICANN board seat safe

Patricio Poblete seems set to serve a third and final term on ICANN’s board of directors, after nobody else put themselves forward as an alternative.

Poblete, of Chilean ccTLD registry NIC Chile, was nominated to continue in the role as one of the two ccNSO representatives on the board after his current term expires October 2026.

Nobody else stepped up as an alternative, so Poblete now appears to be a shoo-in, assuming he passes due diligence. The ccNSO said “if only one candidate is nominated, no election is required”.

His third term would end in late 2029.

Comment Tagged: board, ccnso, election, ICANN

.com off to strong start in Q3

Verisign’s .com gTLD had a relatively strong showing in the first month of the third quarter, its zone file growing by over half a million domains.

The TLD had 155,946,391 names in its zone at the start of August, up 526,205 names or 0.34% on the start of July.

For comparison, the zone grew by 464,822 names in June, 795,533 in the whole of Q2 and 817,590 in the whole of Q1.

Other strong volume performers in July were cheapo new gTLDs .xyz and .top, which grew by 257,830 domains (5.63%) to 4,840,663 and 224,816 domains (5.2%) to 4,547,051 respectively.

In percentage terms, the biggest growers were .casa, up 82.83% or 14,974 domains to 33,051, .mobi, up 47.05% or 121,174 domains to 378,703 and .help, up 39.55% or 22,513 domains to 79,275.

In raw domain terms, the biggest losers in zone file growth in July were .lol (down 97,718 to 294,656), .sbs (down 42,169 to 839,977) and .bond (down 37,845 to 150,272).

Of the 1,194 TLDs for which I currently have monthly growth stats, about 250 shrank, about 420 grew, and the rest (largely dot-brands or unlaunched generics) were flat.

1 Comment Tagged: .com, stats, verisign

.my is growing like crazy

Malayasia’s .my ccTLD has almost doubled in size since the start of the year, likely due to rule liberalizations and steep discounts at leading registrars.

MYNIC, the local registry, is reporting 675,607 domains under management at the end of July. That’s up 165,061 or 32% on the 510,546 reported at the end of June.

A total of 523,218 were direct second-level .my registrations, up from 350,441. DUM in third-level spaces such as .com.my and .net.my were all flat or slightly down over the month.

.my started the year with 342,326 domains. The TLD has grown 97% since then. All the growth has been at the second level.

The surge is likely due to a combination of factors — that the ccTLD has only recently dropped its local residency requirements, and that some international registrars have discounted .my to bargain-bin prices.

MYNIC signed a deal with Internet Naming Co and Tucows last year that would see .my names registerable by non-Malaysian registrants, but it was not immediately successful.

MYNIC had hoped to hit 400,000 domains by the end of 2024. It ended up taking until April 2025 to hit that milestone.

Registrars such as Namecheap and Gabia are currently selling .my for around $2 for the first year, a heavy cut from the roughly $50 they usually retail for. Porkbun has gone as low as $1.34, which it says is cost price.

But renewals will hit at full price for the second year, meaning the current growth spurt may not be sustainable.

Comment Tagged: .my, mynic

ICANN settles $77 million sexual harassment suit

ICANN has settled another sexual harassment lawsuit filed against it by a former employee.

An ICANN spokesperson said the case, filed last August by 22-year meetings-team veteran Tanzanica King, “has been resolved”. King did not immediately respond to a request for comment.

King had asked for $77 million in damages, approximately half of ICANN’s annual budget, alleging she was the victim of a widespread “frat boy culture” that contributed to her being sexually harassed by her boss, passed over for promotions, and paid less than male colleagues.

The settlement, any financial component of which will no doubt be for a tiny fraction of what was demanded, seems to have come just a few weeks after ICANN lost its attempt to get the case thrown out and referred instead to arbitration.

A Los Angeles judge in June ruled that King was protected by a post-#MeToo law, the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act (EFAA), even though her employment contract dated back to 2002.

ICANN said last year that the allegations were “untrue” and that it “strives to create a positive, safe, and inclusive work and community environment, and is committed to the highest possible standards of ethical, moral, and legal business conduct.”

It’s at least the third time ICANN has had to settle sexual harassment suits in recent years.

2 Comments Tagged: ICANN, lawsuit, sexual harassment

Chinese domain spikiness ends in first half

China’s typically lumpy .cn domain market seemed to stabilize in the first half of 2025, posting modest growth rather than wild fluctuations.

While local registry CNNIC does not seem to have published its full H1 statistical report yet, it said in a press release this week that the were 20.85 million .cn domains registered at the end of June.

That compares to the 20.82 million names it had at the end of 2024, representing basically flattish growth.

In previous quarters, the world’s second-largest TLD had seen its numbers all over the shop, with growth of 1.2 million names in H224 and a dip of 563,000 in H124.

CNNIC said the total number of domains registered in China was 32.62 million. No further breakdowns were available.

Comment Tagged: .cn, cnnic

Registrars agree to higher ICANN fees

Domain registrars have agreed to pay more in ICANN fees, after a supermajority vote.

ICANN said today that registrars representing over two thirds of fees voted in favor of the increases, part of a package which Org reckons will add $4.6 million to its annual budget at first.

The package of increases also comes with an increase of the per-transaction fee, typically added by registrars at the checkout and sometimes called the “ICANN tax”, from $0.18 per domain to $0.20.

But the vote related to the variable fees, which will now go up from $3.42 million to $3.8 million per year. That sum is split equally between registrar accreditations, with a deep two-thirds discount for registrars with under 350,000 domains.

The fixed annual $4,000 per-accreditation fee is not changing.

The increases were proposed last October, along with registry fee increases, to plug budget shortfalls caused by macroeconomic factors such as inflation, lumpy registration patterns, and the post-Covid slump in registered names.

These are the first price increases ICANN has implemented in well over a decade.

1 Comment Tagged: budget, fees, ICANN

ICANN to review reviews after review review request fails

An effort by ICANN’s At-Large community to force the Org to stick to its bylaws commitments to periodically review its accountability and transparency has failed after nobody else supported it.

As I reported last month, ALAC petitioned its Empowered Community co-members to get ICANN to overturn its decision to delay Accountability and Transparency Review Team 4, which is already more than a year late.

The other EC members — Government Advisory Committee, the Address Supporting Organization, the Country Code Names Supporting Organization and the Generic Names Supporting Organization — had until July 10 to file their letters of support or objection.

But it received no support and the ccNSO actively objected. The threshold for the petition to go ahead was three votes in favor and no more than one vote against.

The ccNSO pointed out that the current cycle of constantly reviewing itself is broken and getting worse over time. It instead called for a fundamental change in how ICANN reviews itself:

We strongly believe that breaking this vicious cycle can only be achieved if the community pauses and critically assesses the current review system. Specifically, the community should evaluate the breadth and number of reviews by looking at purpose, scope, frequency and associated workload of all ICANN Bylaw mandated reviews (a review of reviews), before embarking again on an Accountability and Transparency Review, or any other Bylaw mandated review.

The GNSO Council had a motion on its table last week that would have expressed non-support for the ALAC’s petition, but a vote was deferred until August, by which point it will be moot anyway.

The ASO and GAC do not appear to have publicly expressed an opinion.

It was the first time any community group has attempted to get the Empowered Community to flex its powers over ICANN. Since Org’s split from the US government nine years ago, the EC has been essentially ICANN’s sovereign body.

The petition being thrown out enables either, depending on your point of view: a) a horrifying, bylaws-defying power grab by Org that threatens transparency and accountability or b) a common-sense step away from an interminable, soul-crushing, resource-sapping cycle of endless navel-gazing.

What it means is that ICANN is going to conduct a meta-review, reviewing how it conducts reviews, and then will fiddle with its bylaws to implement a new renew regime.

1 Comment Tagged: accountability, alac, atrt4, ICANN, reconsideration, transparency

Got junk? June’s biggest gTLD growers do

It’s becoming a truth universally acknowledged that when a gTLD sees a growth spike it’s because the registry is running a promo and tens of thousands of machine-generated junk domains have been registered.

That certainly seems to be true for June’s biggest growers.

The gTLDs the grew the fastest last month were .watch, .yachts, .autos, .irish, .boats and .qpon, each growing by between 50% and 73% and between 7,880 and 47,884 net domains compared to the end of May, according to zone file analysis.

But doom-scroll through lists of domains newly appearing in the zone in June (and presumably registered in the same month) and you’ll quickly see that the vast majority are utter crud.

XYZ’s .autos is a prime example. It’s currently retailing for under two bucks a name at the registrars I checked, and there were over 51,000 names in the July 1 zone that were not in the June 1 file.

Registrants took the opportunity to register hidden gems such as yqtsfg.autos, rgwydp.autos and l2xnnu7.autos… thousands of them. Not quite every new name but, eyeballing the list, very close to it.

I found that 37,428 of these 51,741 newly registered domains contain numerals. In .auto’s stablemate .yacht, 27,335 of its 33,620 new domains were partially numeric. These are not domains registered by investors.

The strings have clearly been algorithmically generated and bulk registered, but to what end?

It can be and is sometimes argued that there are legitimate reasons people might need to register tens of thousands of gibberish domains, but security researchers believe they’re primarily used for spam, phishing and other DNS abuse.

With ICANN being pressured to crack down on bulk regs, these kind of growth stories, along with the revenue they generate for the industry, might sooner or later become a thing of the past.

1 Comment

ICANN ditches Oman due to Middle-East conflicts

ICANN is relocating its next meeting, scheduled for this October in Muscat, Oman, due to travel difficulties and uncertainties caused by the ongoing conflicts in the region.

The meeting, ICANN’s 2025 Annual General Meeting, will now take place in Dublin, Ireland from October 25 to 30, the same dates as the Oman meeting was meant to take place, Org said.

“Recent developments, including associated flight disruptions and impending timelines related to planning the meeting, made it prudent and necessary to select an alternative and available location,” ICANN said.

While Oman is not involved in any current hostilities, other than as a mediator, Israel’s recent strikes on Iran have caused some busy air corridors in the region to be shut down.

Oman is over 2,000 kilometres distant from Israel, and just across the Gulf of Iran from Iran.

The switch will be frustrating not only for Omanis but also to community members from further afield who have booked their travel early or paid for visas and might have limited refund options. Dublin’s a way more expensive city to visit for travelers on a budget, too.

It also sucks for the organizers of Domain Days Dubai, the upcoming domainer conference. It is scheduled to take place in nearby Dubai immediately before ICANN 84.

ICANN has visited Dublin once before, exactly 10 years before the upcoming ICANN 84.

The Org hinted that Muscat could be selected for a future meeting, when and if things settle down.

Comment Tagged: dublin, ICANN, icann 84, muscat