Airline gTLD crashes and burns

Another would-be dot-brand has added itself to the list of “On second thoughts…” gTLD registries, asking ICANN to tear up its contract.

Century-old Avianca, Colombia’s largest airline, filed its termination papers with ICANN in December and ICANN published them for comment last week.

While the original 2012 application clearly stated that .avianca was intended as a single-registrant dot-brand, Avianca never actually got around to applying for its Spec 13 exemptions so I won’t be technically counting it as a dead dot-brand.

Despite being operational since early 2016, the TLD never had any registrations beyond the mandatory nic.avianca registry placeholder.

The back-end registry services provider and original application consultant was Identity Digital (née Afilias).

First chunks of new gTLD Applicant Guidebook drop

ICANN has released for comment the first public drafts of seven sections of the new gTLD program’s Applicant Guidebook, the first of what are expected to be quarterly comment periods for the next 18 months or so.

As I previewed last week, the documents cover topics including geographic names, blocked strings, Universal Acceptance, conflicts of interest and freedom of expression.

The documents were prepared by the ICANN staff/community Subsequent Procedures Implementation Review Team, based on the recommendations of a working group reporting to the Generic Names Supporting Organization a few years ago.

ICANN says it wants to know whether everyone thinks the AGB text it has come up with is consistent with those recommendations.

The comment period is open until March 19. ICANN hopes to have the full AGB ready by May 2025, with the next application round opening April 2026.

Epik to reveal its owners soon

The new Epik registrar has been asked to reveal the identities of its officers and owners shortly, I’ve learned.

The company last night revealed that it had passed through ICANN’s due diligence process, over six months after Epik LLC bought the assets of Epik Inc following a long financial mismanagement scandal, allowing it to take over its corporate predecessor’s accreditation.

Epik said the ICANN process had confirmed that Epik Inc founder Rob Monster and final CEO Brian Royce were not involved in Epik LLC in any way, but the company did not reveal who the owners or managers of the new company are.

I asked ICANN whether this was kosher under the Registrar Accreditation Agreement, which obliges all registrars to publish the names and positions of their officers, as well as the names of any ultimate parent entity, on their web sites.

“We are reminding them of that obligation and expect it to be addressed shortly,” ICANN vice president Russ Weinstein told us.

Breaches of the RAA can lead to suspension or termination of the contract, but I don’t believe ICANN has ever initiated public Compliance proceedings against a registrar based solely on a relatively minor infraction.

Regardless, it seems that after half a year of mystery, the speculation may very well come to an end soon.

Monster and Royce are NOT involved in Epik?!

Rob Monster and Brian Royce are no longer involved in the management or ownership of the registrar Epik, according to both Epik and ICANN.

Epik announced tonight that ICANN had completed its due diligence on the new company and approved the transfer of Epik Inc’s registrar accreditation to Epik LLC, following an acquisition in June last year.

Not only that, but it added that the two guys in charge of the Inc during its descent into disgrace in late 2022 and early 2023 are no longer involved with the company.

“No previous owners, including Epik Inc founder Rob Monster and late stage CEO Brian Royce, are involved in Epik LLC in any capacity, including ownership interest in the business,” Epik said (emphasis in original).

I’ve received a confirmation from ICANN. Vice president Russ Weinstein said in a statement:

ICANN has completed its thorough review of the assignment request and of the Assignee, and has determined that the new entity (Epik, LLC) meets the established registrar criteria. Epik, LLC is a recently formed entity that is completely independent of Epik, Inc., its leadership, and shareholders.

ICANN has updated its registrar records to remove the name of Bryce Myrvang as Epik’s primary contact to the generic “Domain Support”. Its phone number has changed from one in Idaho to one in Austin, Texas. Its email address has also changed.

Myrvang, who appeared in ICANN records following the June acquisition, works for a company called Registered Agents Inc, which specializes in anonymous company formations. It was not clear before whether Registered Agents had bought Epik LLC or was just a proxy to hide the true owner.

There had been speculation online that Epik founder Monster or subsequent CEO Royce might have been still secretly controlling Epik, exacerbated last week when the person in charge of Epik’s Twitter account appeared to go nuts, in keeping with both former CEOs’ previous social media behavior.

Who is running Epik, and who owns it, is currently unknown.

Epik fell from grace in late 2022 after a financial mismanagement scandal that saw it withhold money from domain buyers for months. It lost hundreds of thousands of domains as a result.

Freenom’s domains land at Gandi after termination

French registrar Gandi will be the beneficiary of Freenom’s ignominious collapse last year, it has emerged.

ICANN records updated today show that Freenom’s gTLD domains will be transferred to Gandi following the termination of Freenom’s Registrar Accreditation Agreement last November.

Freenom, legally OpenTLD, had been ignoring customers transfer and renewal requests, leading to domains being lost, according to ICANN Compliance, which flicked the off switch after three rapid-fire breach notices.

Freenom had just 14,546 gTLD domains under management at the end of September, mostly in .com and .net, down quite a lot from its October 2019 peak of 44,774.

The domains are being moved under ICANN’s De-Accredited Registrar Transition Procedure, which does not apply to any domains registered in any of the ccTLDs Freenom was managing under its much-abused free-to-register model, notably Tokelau’s .tk.

Freenom has not been accepting new registrations in any of these ccTLDs for over a year. It has reportedly lost its contracts to run .ml, .ga, .cf, .gq and .tk is looking for the exit.

ICANN picks its first ever Supreme Court

After foot-dragging for a decade, ICANN has finally approved a slate of a dozen jurists to act as its de facto Supreme Court.

Its board of directors voted at the weekend to create the first-ever Independent Review Process Standing Panel, a pool of legal experts from which panels in future IRP proceedings — the final appeals process for ICANN decisions under its bylaws — will be drawn.

ICANN has not named the 12 people yet. The names are redacted from the published resolution, presumably because they haven’t signed contracts yet. ICANN said they are “well-qualified” and “represent a diverse breadth of experience and geography”.

The names were put forward by a cross-community working group called the IRP Community Representatives Group, which looked after the application and interview process. A thirteenth CRG pick was deemed “ineligible” by ICANN for undisclosed reasons.

The Standing Panel is intended to make IRPs faster and cheaper by drawing the three-person panel in each case from an established pool of experienced professionals. The panelists will be contracted for staggered terms of service.

The ICANN bylaws have called for the establishment of such a panel for over a decade, but its timely creation was another victim of the lethargy that consumed ICANN for years. The lack of a Standing Panel has been raised by claimants in multiple IRPs, some of which are ongoing.

Elsewhere in IRP policy-making, a separate staff/community working group called the IRP Implementation Oversight Team expects to shortly publish certain revisions to the IRP rules for public comment, but the fact that the legal language of the rules is to be written by the law firm Jones Day, which represents defendant ICANN in IRP cases, has raised some eyebrows.

Lebanon’s ccTLD going back to Lebanon after ICANN takeover

ICANN’s board of directors has voted to redelegate Lebanon’s ccTLD to the country’s local Internet Society chapter, six months after the Org took it over as an emergency caretaker.

The resolution, passed at the weekend, as usual with ccTLD redelegations does not get into any depth about the switch, other than to note IANA has ticked all the requisition procedural boxes. IANA will publish a report at a later date.

ICANN took over the ccTLD, .lb, last July after the former registry was left in limbo following the sudden death of its founder and manager. It was only the second time ICANN had made itself a ccTLD’s “caretaker”.

The board also voted at the weekend to redelegate Cameroon’s .cm, best-known in the Anglophone world for enabling .com typos purely by existing, to Agence Nationale des Technologies de l’Information et de la Communication, the local technology ministry.

ICANN picks the domain it will never, ever release

ICANN has picked the TLD string that it will recommend for safe use behind corporate firewalls on the basis that it will never, ever be delegated.

The string is .internal, and the choice is now open for public comment.

It’s being called a “private use” TLD. Organizations would be able to use it behind their firewalls safe in the knowledge that it will never appear in the public DNS, mitigating the risk of public/private name collisions and data leakage.

.internal beat fellow short-lister .private to ICANN’s selection because it was felt that .private might lure people into a false sense of security.

While it’s unlikely that anyone was planning to apply for .internal as a commercial or brand gTLD in future, it’s important to note that when it makes it to the ICANN reserved list all confusingly similar strings will also be banned, under the current draft of the Applicant Guidebook.

So reserving .internal also potentially bans .internat, which Google tells me is the French word for a boarding school, or .internai, which is a possible brand for an AI for interns (yes, I’m grasping here, but you get my point).

The public comment period is open now and ends March 21.

ICANN approves domain takedown rules

ICANN’s board of directors has formally approved amendments to its standard registry and registrar contracts aimed at forcing companies to take action against domains involved in DNS abuse.

At its meeting last weekend, the board passed a resolution amending the Registrar Accreditation Agreement and Base gTLD Registry Agreement to include tougher rules on tackling abuse.

Registrars must now “promptly take the appropriate mitigation action(s) that are reasonably necessary to stop, or otherwise disrupt, the Registered Name from being used for DNS Abuse” when provided with evidence of such abuse.

Registries have a similar obligation to take action, but the action might be to refer the abusive domain to the appropriate registrar.

The rules follow the now industry-standard definition of DNS abuse: “malware, botnets, phishing, pharming, and spam (when spam serves as a delivery mechanism for the other forms of DNS Abuse listed)”.

The changes were crafted by ICANN along with registries and registrars and voted through late last year by a hefty majority of both camps.

The two contracts are now in the hands of the ICANN CEO and her lawyers for final action before becoming enforceable.

Has Epik gone “woke”?

The epic saga of disgraced registrar Epik has taken a weird twist this week, with the company appearing to do a 180 on its longstanding devotion to “free speech”, going on a Twitter rampage, sarcastically embracing “wokeness”, and ejecting one of its most controversial anchor tenants, which is now threatening to sue.

On the face of it, it seems quite possible that the company’s official Twitter account may have been compromised. So take any quotes here from @EpikLLC with a pinch of salt. There’s also a non-zero chance that the account has shared child sexual abuse material this evening, so be careful.

The current chapter of the story appears to begin in mid-December, when the owner of the web forum KiwiFarms.net — which Wikipedia says “facilitates the discussion and harassment of online figures and communities” — claimed that Epik suspended his domain for an unspecified terms of service violation.

The domain seems to have moved to Namecheap a couple of days later, where it still sits today.

A month of online drama later, earlier today the person running Epik’s Twitter account either changed, or lost their mind. This was posted this morning as the company’s pinned tweet:

Alright all Whiny, Beta Snowflakes. Our DEI hires of the month cancelled #Kiwifarms @XJosh sorry. We don't like hate speech, porn, or doxxing. #JoeBiden will fix it! 2024! @EndWokeness

— Epik LLC (@EpikLLC) January 23, 2024

DEI stands for “Diversity, Equity and Inclusion” a workplace buzzword in some parts of the world, loved by some on the political left, hated by some on the right. @XJosh is KiwiFarms.net owner Josh Moon.

The content of the @EpikLLC tweet and the @EndWokeness mention suggests sarcasm. Epik has been known for the last several years for being a relatively safe home for some of the web’s most controversial content — typically sites for those with hard-right views.

After a series of tweets along the same lines, the @EpikLLC account reappeared this evening to post a screen grab apparently of a KiwiFarms.net page. The image in the tweet contained censored personal details and blurred photos of a naked male.

I won’t post the full tweet containing the image here, but the accompanying tweet text reads: “Here’s the complaint received that violated our TOS for doxxing. We believed this to be underage porn also. Regardless, Epik doesn’t want to do business with websites like this. If we misread this we apologize. Did we make the right choice in cancelling KF?”

Other Twitter users immediately pointed out that the Epik account had just shared an image it “believed to be underage porn”. Others said that the image showed a 19-year-old man rather than a child.

Moon, who goes by the handle “Null” on his web site, is currently asking his users whether they would be willing to crowd-fund a defamation lawsuit against Epik for claiming on Twitter that law enforcement had ordered the suspension of the domain and that the site hosted “child porn”. He says both claims are false.

KiwiFarms.net moved to Epik in September 2022 after its previous registrar, Cloudflare, kicked it out citing an “an imminent and emergency threat to human life” believed to relate to the targeting of a transgender Twitch streamer.

It’s not currently clear who owns or manages Epik. After a financial mismanagement scandal lasting many months, the company said last June that it had changed ownership. Contact details published by ICANN show it “belongs” to a company called Registered Agents Inc, which specializes in anonymous company formations.

ICANN said in June that it was doing due diligence on the new owners, but that the process could take several months.