IWF finds 3,401 “commercial” child porn domains

The Internet Watch Foundation last year found child sexual abuse material on 3,401 domains that it says appeared to be commercial sites dedicated to distributing the illegal content.

The UK-based anti-CSAM group said in its annual report, published last week, that it found 5,590 domains containing such material in 2020, and 61% were “dedicated commercial sites… created solely for the purpose of profiting financially from the distribution of child sexual abuse material online.”

That’s a 13% increase in domains over 2019, the report says. It compares to 1,991 domains in 2015.

IWF took action on 153,369 URLs containing CSAM last year, the report says.

For example, the TLD with the most CSAM abuse is of course .com, with 90,879 offending URLs in 2020, 59% of the total. That compares to 69,353 or 52% in 2019.

But because those 90,000 URLs may include, for example, pages on image-hosting sites that use .com domains, the number of unique .com domains being abused will be substantially lower.

Same goes for the other TLDs on the top 10 list — .net, .ru, .nz, .fr, .org, .al, .to, .xyz and .pw.

.co, .cc and .me were on the 2019 list but not the 2019 list, being replaced by .al, .org and .pw.

The most disturbing part of the report, which is stated twice, is the alarming claim that some TLDs exist purely to commercially distribute CSAM:

We’ve also seen a number of new TLDs being created solely for the purpose of profiting financially from the distribution of child sexual abuse material online.

…

We first saw these new gTLDs being used by websites displaying child sexual abuse imagery in 2015. Many of these websites were dedicated to illegal imagery and the new gTLD had apparently been registered specifically for this purpose.

I can only assume that IWF is getting confused between a top-level domain and a second-level domain.

The alternative would be that the organization believes one or more TLD registries are purposefully catering primarily to commercial child pornographers, and for some reason it’s declining to do anything about it.

I’ve put in a request for clarification but not yet received a response.

IWF is funded by corporate donations from primarily technology companies. Pretty much every big domain registry is a donor. Verisign is a top-tier, £80,000+ donor. The others are all around the £5,000 to £10,000 mark.

UPDATE May 26: IWF has been in touch to clarify that it was in fact referring to SLDs, rather than TLDs, in its claims about dedicated commercial CSAM sites quoted above. It has corrected its report accordingly.

UNR cuts $5.2 million from price of new gTLD portfolio

UNR has reduced the opening bids on almost all of the gTLDs it plans to auction off later in the week, to the tune of a whopping $5.2 million.

According to the minimum opening bids listed on the auction web site today, the job lot of 23 TLD contracts could go for as little as $11.65 million, if there’s no competitive bidding whatsoever.

That’s compared to the $16.87 million total when the TLDs were first announced for auction back in January.

It’s a no-reserve auction of UNR’s entire portfolio of gTLDs that runs from Wednesday to Friday this week.

Some gTLDs, such as .hiv and .juegos, have no minimum bids.

The only TLD to receive a price increase since January is .llp, which had a $0 listing back then but is now listed at $200,000. There’s been no change in .llp’s fortunes since then — it’s still unlaunched.

The music-themed .country, which had no list price in January, now has a $300,000 tag.

The biggest discount comes on .link, once listed with a $3 million opener, now reduced to $2 million.

Nine of the gTLDs are now priced at below the original ICANN application fee of $186,000.

Here’s a table comparing the January minimum bid to today’s pricing.

[table id=66 /]

UNR, which sold off its registrar and secondary market businesses to GoDaddy and its stakes in three car-themed gTLDs to XYZ.com last year, plans to remodel itself as a back-end operator post-auction.

UPDATE: According to UNR, the January prices were preliminary and published accidentally, and no changes have been made since late January or early February.

Decision on $135 million .web auction expected in weeks

ICANN, Verisign, Donuts, and the other applicants for .web will find out who gets to control the fiercely contested gTLD by the first week of June at the latest, according to Verisign’s CEO.

Jim Bidzos told analysts tonight that the Independent Review Process panel currently handling a complaint filed by Afilias declared its case closed April 7, and said that a decision will come within 60 days.

Afilias, now owned by Donuts, came second in an ICANN “auction of last resort” in which a Verisign-backed company called Nu Dot Co agreed to pay $135 million for the coveted string.

Afilias wants the auction declared invalid because ICANN, it claims, did not sufficiently pursue allegations that NDC was being secretly bankrolled by Verisign, which it says broke ICANN bylaws and new gTLD application rules.

This is denied by ICANN, as well as NDC and Verisign, which have filed legal documents with the IRP panel despite not being parties.

Afilias and others suspect that Verisign wants .web in order to bury it, keeping what could be a strong .com competitor weak, which Verisign also denies.

The IRP panel held a seven-day virtual hearing last August, but has continued to receive briefs from ICANN and Afilias since then.

Ahead of GoDaddy acquisition, MMX to scrap premium fees on 725,000 domains

MMX plans to remove hundreds of thousands of domains from its premium list later this month, and reduce prices on a hundred thousand more.

Dubbed The Great Release, the April 23 adjustment will see 725,400 names currently reserved at premium prices released to the available pool at the usual wholesale fee for their respective gTLDs.

Another 102,000 names will keep a premium ticket, but will see their price reduced. MMX says it’s wiped $145 million from the list price of a total of 827,000 names.

The names are available in 26 of MMX’s portfolio of new gTLDs, which GoDaddy currently intends to buy for $120 million.

An MMX spokesperson said that the current pricing had been in place since 2014 and was up for review. He said:

Premium pricing is not something that had been looked at in great detail since it launched its TLDs, and MMX felt that its pricing was out of step with current market trends. MMX also saw that it had held back much of its inventory without ever releasing it, and following a large volume of enquiries over the last 12 months, MMX decided to release all reserved names to get them into the hands of users.

A searchable database of releasing names can be found here, but you’ll need to hand over your email address to access it.

ICANN threatens to seize gTLD after Whois downtime

Are we about to see our next gTLD registry implosion?

ICANN has whacked the company behind .gdn with a breach notice and a threat that it may seize the TLD, after its Whois systems allegedly suffered days of downtime.

According to ICANN, .gdn exceeded its weekly and monthly downtime limits in late March and early April, in both months triggering the threshold whereby ICANN is allowed to transition the TLD to an Emergency Back-End Registry Operator.

gTLD registries are allowed to have 864 minutes (about 14 hours) of unplanned Whois downtime per month. Downtime exceeding 24 hours per week is enough to trigger ICANN’s EBERO powers.

It appears to be the third time .gdn’s Whois has gone on the blink for longer than the permitted period — ICANN says it happened in April 2018 and August 2019 too. Those incidents were not publicized.

It seems the Russian registry, Joint Stock Company “Navigation-information systems”, managed to fix the problem on April 2, and ICANN is not invoking the EBERO transition, something it has done just a couple times before, just yet.

But it does want NIS to present it with a plan showing how it intends to avoid another spell of excessive downtime in future. It has until May 8, or ICANN may escalate.

.gdn is by most measures a bullshit TLD.

While it was originally intended to address some kind of satellite navigation niche, it eventually launched as a pure generic with the backronym “Global Domain Name” in 2016.

It managed to rack up over 300,000 registrations in the space of a year, almost all via disgraced and now-defunct registrar AlpNames, and was highlighted by SpamHaus as being one of the most spam-friendly of the new gTLDs.

After AlpNames went out of business two years ago, ICANN transferred some 350,000 .gdn names to CentralNic-owned registrar Key-Systems.

Today, Key-Systems has fewer than 300 .gdn domains. The TLD’s zone file dropped by about 290,000 domains in a single day last December.

.gdn had fewer than 11,000 domains under management at the end of 2020, 90% of which were registered through a Dubai-based registrar called Intracom Middle East FZE.

Intracom pretty much only sells .gdn domains, suggesting an affiliation with the registry.

Web searches for live sites using .gdn return not much more than what looks like porn spam.

A busted Whois looks like the least of its problems, to be honest.

China could block GoDaddy’s $120 million MMX swoop

GoDaddy’s proposed $120 million acquisition of essentially all the meaningful assets of portfolio gTLD player MMX will be subject to Chinese government approval, it emerged this morning.

Following GoDaddy’s bare-bones press release announcing the deal last night, this morning MMX added a whole bunch of flesh, including a list of closing conditions, in its statement to shareholders.

GoDaddy is proposing to buy essentially MMX’s entire operating business — the 28 gTLD registry agreements with ICANN, including the four porn-related strings belonging to subsidiary ICM Registry.

Not only do MMX shareholders have to approve the deal — and holders of 64% of the shares have already promised they will — but ICANN approval will be required for the registry contracts to be reassigned.

This may prove a hurdle or delay if third parties raise competition concerns, but ICANN’s pretty opaque approval process generally doesn’t frown too much on industry consolidation.

Another known unknown is China.

MMX told shareholders that it needs: “Approval of Chinese authorities for the change of control of MMX China (including change of control in respect of relevant licenses held by MMX China permitting it to distribute TLDs in China).”

The reason for this is quite straightforward: in volume terms, quite a lot of MMX’s business has been in China in recent years. Popular sellers such as .vip, with over 800,000 names today, have been driven primarily by Chinese investors.

A local presence (in this case MMX China) and approval from the Ministry of Industry and Information Technology is required to legally sell a TLD to Chinese registrants via Chinese registrars.

I’ve no particular reason to believe MIIT will withhold its approval for MMX China to move into GoDaddy’s ownership, but a failure to get the nod from China appears to be a deal-breaker.

MMX’s statement to the markets this morning also provided some clarity on what exactly it is that GoDaddy is proposing to buy.

The gTLDs to be acquired are: .vip,.nrw, .casa, .vodka, .xxx, .fit, .miami, .fishing, .porn, .beer, .surf, .boston, .adult, .yoga, .garden, .abogado, .work, .fashion, .horse, .rodeo, .sex, .wedding, .luxe, .dds, .law, .bayern, .cooking, and .country.

It seems that when Tony Farrow took over as MMX CEO last year, after his predecessor left due to an accounting snafu, he had the portfolio audited and came to the conclusion that it could expect only pretty crappy growth over the coming years.

It had banked on selling expensive defensive trademark blocks in its four porn-themed gTLDs to big brands to make up the shortfall, but then GoDaddy approached in December brandishing its rather large checkbook.

MMX reckons the deal values the company at a 92% premium over its closing share price Tuesday, and 87% and 78% premiums over its 20-day and 90-day average selling price.

.bayern, .nrw and the four porn gTLDs belong to subsidiaries that GoDaddy will acquire outright, but GoDaddy is not proposing to buy MMX itself.

Rather, MMX will likely stay alive and publicly traded long enough to redistribute its cash windfall to investors and sell or wind down about a dozen non-operating subsidiaries.

It has a transition services agreement to manage certain business functions of the registry until January next year, which sounds a bit like what fellow GoDaddy acquisition .CLUB Domains explained to me last night.

After that, London’s Alternative Investment Market rules will treat MMX as a “cash shell”, and it will either have to acquire an operating business from somewhere or make itself the subject of a reverse takeover by a company looking for a quick way to the public markets.

.CLUB CEO on selling to GoDaddy, Clubhouse, and .club’s “twerking moment”

.CLUB Domains CEO Colin Campbell says he’s planning to continue to promote the .club gTLD long after its acquisition by GoDaddy Registry, announced earlier today, closes.

The deal was one of several announced last night by GoDaddy, the highlight being the $120 million purchase of MMX’s portfolio of 28 gTLD contracts.

While the price of the .club deal was not disclosed, Campbell confirmed that it’s a contract reassignment rather than a purchase of the company. He’s not expecting any ICANN regulatory friction, pointing out that .club is relatively small fry in the grand scheme of things.

But .club is arguably one of the success stories of the new gTLD program.

It currently stands at over a million domains under management, recently boosted by the launch of the third-party audio conferencing app Clubhouse, which has driven demand.

“I think Clubhouse was the twerking moment for .club,” Campbell said. “It’s the moment everyone realized — holy shit this is the best domain on the market to start a community, to start a club.”

“Our volume of premium domains went up 700% in January,” he said. “We exploded.”

I understand a “twerking moment” to be a nodal point in a business’s performance so sensational that one feels obliged to stand up at one’s desk and “twerk“. I’d rather not think about it too much, to be honest.

Campbell said the volume decline .club was experiencing prior to Clubhouse launching — its zone file shrank by 200,000 names in 2020 — is misleading as a metric of measuring growth.

“We’ve always been growing,” he said. “What we’ve been doing the last few years is raising prices for the first year, so our quality of registrations is higher now than it’s ever been. Volume’s a joke… what we’re talking about is real registrations, real users. It’s all about usage.”

He was ambivalent on whether the GoDaddy deal would have happened without the Clubhouse boost.

“.club was growing very fast with real usage,” he said. “Clubhouse had nothing to do with this — in my opinion — but who knows, you’d have to ask GoDaddy.”

It seems .CLUB Domains the company will wind up eventually, but Campbell said it will continue to promote the TLD even after the deal closes in a few months.

“I will never stop supporting .club, this is part of my DNA,” Campbell said. Pressed, he said that the company will continue to operate until at least the end of the year.

But why sell his baby? Campbell said “.club was never for sale”, so it appears GoDaddy reached out to .CLUB first. But Campbell sees GoDaddy as a safe pair of hands.

“The people that run GoDaddy Registry are Nicolai [Bezsonoff], and Lori Anne [Wardi], who were the co-founders of .co and they’ve done a good job of promoting .co and I really believe that can promote .club in a similar way,” Campbell said.

GoDaddy buys 30 new gTLDs for over $120 million

GoDaddy Registry has just announced it is acquiring 28 new gTLDs from rival MMX, along with the TLDs .club and .design.

The MMX deal is worth at least $120 million; the value of the other two deals was not disclosed.

GoDaddy is also taking over the back-ends for .rugby and .basketball, which had been contracted to MMX, and said it has won the back-end deal for the dot-brand, .ally.

It’s the most significant pieces of registry consolidation since Donuts and Afilias hooked up in December.

GoDaddy Registry will wind up being the contract holder or back-end for over 240 TLDs, with over 14 million domains under management, the company said.

It’s not entirely clear which gTLDs GoDaddy is acquiring right now, but it appears to be all of those listed on the MMX web site.

It’s currently listed by IANA as the sponsor for 21 gTLDs: .cooking, .fishing, .horse, .miami, .rodeo, .vodka, .beer, .luxe, .surf, .nrw, .work, .budapest, .casa, .abogado, .wedding, .yoga, .fashion, .garden, .fit, .vip and .dds.

MMX subsidiary ICM Registry runs .xxx, .porn, .adult and .sex, not an easy fit with the family-friendly image GoDaddy has attempted to cultivate in recent years.

MMX also manages geographic gTLDs .boston, .london and .bayern on behalf of their respective local governments.

The company hinted in January that it was considering selling off some of its under-performing registries, after a crappy 2020 that saw it forced to restate revenues, lay off staff and can its top executives.

MMX, which is publicly traded in London, has yet to make a statement on the deal but we should no doubt expect something in the morning before the markets open.

The deal appears to be bad news for Nominet, which runs the back-end for most MMX gTLDs. GoDaddy will very likely migrate them over to its own platform eventually.

MMX aside, GoDaddy is also buying .club from .CLUB Domains, according to its press release.

.CLUB is a bit of a rarity — a single-string new gTLD registry that done really rather well for itself without tarnishing its brand by becoming synonymous with cheap domains and spam.

.design, the other GoDaddy acquisition today, is run by Top Level Design, which also runs .ink, .wiki and .gay.

.design has over 120,000 domains in its zone file today, while .club has over 1 million. Both have been on a growth trajectory recently.

GoDaddy also said as part of the same announcement that it has signed Ally Financial’s dot-brand business for .ally, but as Ally was already a client of Neustar (which GoDaddy owns) I’m not entirely sure what it’s getting excited about.

XYZ adds .tickets to its gTLD stable

XYZ.com has taken over the ICANN registry agreement for the gTLD .tickets, according to records.

It looks to be the registry’s 23rd TLD, the latest of XYZ’s acquisitions of unused or floundering new gTLDs.

In the case of .tickets, it’s picking up a low-volume, high-price TLD with some rather onerous registration restrictions.

The TLD was originally set up by UK-based Accent Media to provide a space where people going to music, theater and sporting events, for examples, could buy tickets in the assurance that the sellers were legit.

Would-be .tickets registrants have a five-day waiting period before their domains go live, while the registry manually verifies their identities from paper records such as passports or driving licenses.

That high-friction reg process is one reason the shelf price for a .tickets domain is well over $500 a year.

It’s also a reason why very few .tickets domains have been sold. The registry peaked at fewer than 1,200 names in its zone file in 2018 and has been on the decline ever since.

It had 769 names in its zone at the end of March this year.

Registry reports show that the majority of its names are registered via brand-protection registrars and are likely unused. Searches for active .tickets sites return fewer than 100 results.

XYZ might be able to turn this around by smoothing out the reg friction and lowering the price.

But even just 1,000 names at $500 a year could be considered a nice little earner as part of a portfolio with low overheads from economies of scale. XYZ already runs even higher-priced, lower-volume zones such as .cars and .auto.

EFF rages as Ethos closes Donuts buy

The Electronic Frontier Foundation thinks the acquisition of Donuts by “secretive” private equity group Ethos Capital represents a risk to free speech.

The deal, which sees Ethos buy a controlling stake from fellow PE firm Abry Partners, closed earlier this week, having apparently received no official objection from ICANN.

But the EFF now wants ICANN to force Donuts to change its gTLD registry contracts to make it harder for the company to engage in what it calls “censorship-for-profit”.

The group’s senior staff attorney, Mitch Stoltz, raised the issued at the Public Forum session of last week’s ICANN 70 virtual public meeting, and expanded upon his thinking in a blog post this week. He wrote:

Donuts already has questionable practices when it comes to safeguarding its users’ speech rights. Its contracts with ICANN contain unusual provisions that give Donuts an unreviewable and effectively unlimited right to suspend domain names—causing websites and other internet services to disappear.

He pointed to Donuts’ trusted notifier program with the Motion Picture Association, which streamlines the takedown of domains used for pirating movies, as an example of a registry’s power to censor.

Donuts runs gTLDs including ones with social benefit meanings that the EFF is particularly concerned about, such as .charity, .community, .fund, .healthcare, .news, and .university.

Stoltz also makes reference to the Domain Protected Marks List, a Donuts service that enables trademark owners to block their marks, and variants, across its entire portfolio of 240+ gTLDs.

In effect, this lets trademark holders “own” words and prevent others from using them as domain names, even in top-level domains that have nothing to do with the products or services for which a trademark is used. It’s a legal entitlement that isn’t part of any country’s trademark law, and it was considered and rejected by ICANN’s multistakeholder policy-making community.

The DPML is not unique to Donuts. Competitors such as UNR and MMX have similar services on the market for their gTLDs.

When Stoltz raised the EFF’s concerns at last week’s ICANN meeting, CEO Göran Marby basically shrugged them off, saying he didn’t understand why one PE firm buying an asset off another PE firm was such a big deal.

I have to say I agree with him.

Ethos came under a lot of scrutiny last year when it tried to buy .org manager Public Interest Registry, turning it into a for-profit entity, generating cash for Ethos’ still-undisclosed backers.

(This week, Ethos disclosed in a press release that its investors include massive hedge funds The Baupost Group and Neuberger Berman “among others”, which appears to be the first time these names have been mentioned in connection with the company).

But a pretty good case could be made that .org is a unique case, that has had a non-profit motive baked into its DNA for decades. That does not apply to Donuts, which was a profit-making venture from the outset.

It’s not entirely clear why the EFF is suddenly concerned that Donuts will start exercise its contractual right-to-suspend more frequently under Ethos than under Abry. Stoltz wrote:

As we learned last year during the fight for .ORG, Ethos expects to deliver high returns to its investors while preserving its ability to change the rules for domain name registrants, potentially in harmful ways. Ethos refused meaningful dialogue with domain name users, instead proposing an illusion of public oversight and promoting it with a slick public relations campaign. And private equity investors have a sordid record of buying up vital institutions like hospitals, burdening them with debt, and leaving them financially shaky or even insolvent.

Even with the acquisition passing through ICANN easily, the EFF wants Donuts to change its contracts to make it more difficult for the company to suspend domain names on a whim.

I believe the language causing the controversy comes from anti-abuse policies in the Public Interest Commitments found in almost all Donuts’ contracts with ICANN, which state in part:

Registry Operator reserves the right, at its sole discretion and at any time and without limitation, to deny, suspend, cancel, or transfer any registration or transaction, or place any domain name(s) on registry lock, hold, or similar status as it determines necessary for any of the following reasons:

a. to protect the integrity and stability of the registry;

b. to comply with any applicable laws, government rules or requirements, requests of law enforcement, or any dispute resolution process;

c. to comply with the terms of this Registry Agreement and the Registry Operator’s Anti-Abuse Policy;

d. registrant fails to keep Whois information accurate and up-to-date;

d. domain name use violates the Registry Operator’s acceptable use policies, or a third party’s rights or acceptable use policies, including but not limited to the infringement of any copyright or trademark; or

e. as needed during resolution of a dispute.

As a voluntary PIC, this language is unique to Donuts, though other registries have similar provisions in their registry agreements.