Registry offers “$2,500” in sweeteners for .inc registrants

The newly launching .inc gTLD may be eye-wateringly expensive, but the registry is offering a package of incentives it reckons adds up to a $2,500 value to new registrants.
Intercap Registry’s .inc went into sunrise today. It’s expected to have retail price of $2,000 and up when it goes to general availability May 7. Sunrise registrants can expect to pay a couple thousand more.
Given the high price, and the fact that many businesses that end in “Inc” will likely view it primarily as an opportunity to waste yet more cash on defensive registrations, I’ve always been a bit skeptical of this particular gTLD.
But I’ve got to give the registry credit for at least making an effort to bump up its value proposition.
It’s currently listing 17 freebies, provided mostly by partners, that new .inc registrants can cash in to soften the dent in their wallets.
Registrants can get a free business formation package from LegalZoom and a free press release announcing their new business issued on GlobalNewsWire, for example. Together, that’s worth over a grand, Intercap says.
Most of the other benefits on offer are discounts on services such as telephony, shared office space, printing, accounting, payment processing and advertising services. Some require additional spending before they can be cashed in.
Partners include Google, Ting, Delta Airlines, Vistaprint and Quickbooks. Some of the offers look like typical affiliate marketing deals.
I imagine different registrants will find different benefits appealing. Some may use none at all. Intercap says more sweeteners will be added in future.
The registry says that its high pricing is there to deter cybersquatters. I imagine this will be successful to a large extent, but that it will probably attract a healthy defensive registration business also.

Another dot-brand bites the dust

Honeywell International, a $40-billion-a-year US conglomerate, has become the last major company to dump its dot-brand gTLD.
The company informed ICANN in February that it no longer wishes to run .honeywell, and ICANN yesterday published its preliminary decision not to transition the TLD to a new owner.
Honeywell never used .honeywell, which has been in the DNS root since June 2016, beyond the contractually mandated placeholder at nic.honeywell.
It becomes the 46th new gTLD registry to request a termination since 2015. Almost all have been dot-brands.
The company’s request is open for public comment until April 14. To date, there have been no public comments on any voluntary registry termination.
Honeywell is involved in the aerospace, building and consumer goods sectors. It has 130,000 employees and reported revenue of $40.5 billion for 2018.
It’s the first new gTLD termination request of 2019.

UDRP complaints hit new high at WIPO

The World Intellectual Property Organization handled 3,447 UDRP cases in 2018, a new high for the 20-year-old anti-cybersquatting policy.
The filings represent an increase of over 12% compared to the 3,074 UDRP cases filed with WIPO in 2017. There were 3,036 cases in 2016
But the number of unique domains complained about decreased over the same period, from 6,370 in 2017 to 5,655 domains in 2018, WIPO said today.
The numbers cover only cases handled by WIPO, which is one of several UDRP providers. They may represent increases or decreases in cybersquatting, or simply WIPO’s market share fluctuating.
The numbers seem to indicate that the new policy of redacting Whois information due to GDPR, which came into effect mid-year, has had little impact on trademark owners’ ability to file UDRP claims.
UPDATE: This post was updated a few hours after publication to remove references to the respective shares of the UDRP caseload of .com compared to new gTLDs. WIPO appears to have published some wonky math, as OnlineDomain noticed.

ICANN plays tough over Amazon dot-brands

ICANN has given Amazon and the governments of the Amazon Cooperation Treaty Organization less than a month to sort out their long-running dispute over the .amazon gTLD.
The organization’s board of directors voted on Sunday to give ACTO and the e-commerce leviathan until April 7 to get their shit together or risk not getting what they want.
But both parties are going to have to come to an agreement without ICANN’s help, with the board noting that it “does not think that any further facilitation efforts by ICANN org will be fruitful”.
Attempts by ICANN to meet with ACTO over the last several months have been agreed to and then cancelled by ACTO on at least two separate occasions.
The eight ACTO governments think the string “Amazon” more rightfully belongs to them, due to it being the English name for the rain forest region they share.
Amazon the company has promised to safeguard culturally sensitive terms in .amazon, to assist with future efforts to secure .amazonas or similar for the Amazonian peoples, and to donate services and devices to the nations concerned.
Now, the two parties are going to have to bilaterally decide whether this deal is enough, whether it should be sweetened or rejected outright.
If they can’t come to a deal by ICANN’s deadline (which could be extended if Amazon and ACTO both ask for more time), ICANN will base its decision on whether to approve .amazon based on how Amazon unilaterally proposes to address ACTO’s concerns.
While a rejection of the .amazon application is still on the table, my read is that this is a bigger win for Amazon than it is for ACTO.

Radix sees revenue up 30%

New gTLD registry Radix said today that its revenue increased by 30% in 2018, largely due to an end-of-year boost.
The company, which runs nine gTLDs including .online and .site, said that gross revenue was $16.95 million last year.
It added that net profit was up 45.6%, but the privately held company does not actually disclose the dollar value of its bottom line.
Radix said that the fourth quarter of the year, which presumably saw the benefits of Operation September Thrust, was its strongest quarter.
The company said that 27% of its revenue came from standard-price new registrations and 60% from renewals.
Its premiums brought in $1.9 million, 56% of which were premium renewals.

Donuts founder replaces Pitts as MMX’s premium guru

MMX has hired one of Donuts’ recently departed co-founders to market its premium domain name inventory, the company said today.
Dan Schindler, formerly Donuts’ executive VP, has been hired as a “special advisor”, tasked with “monetizing” premiums in the US and Europe.
He appears to be functionally replacing Victor Pitts, who was hired as director of premium sales two years ago. Pitts appears to have left the company in January.
MMX, which counts .vip, .law and .luxe among its stable of 32 gTLDs, expects to report premium sales for 2018 of around $2.3 million.
The company has also hired domain consultant Christa Taylor, founder and CEO of dottba, as its new chief marketing officer, a newly created position.
News of the appointments was released as MMX published another preliminary trading update ahead of its final 2018 financial results next month.
Here are some more nuggets from the announcement:

• Total domain registrations so far in 2019 up 38% to 1.84 million compared to a year ago.
• Billings up 129% year-on-year due to contributions from ICM Registry and a 40% increase in sales of .vip and .luxe domains in China.
• ICM’s porn-themed domains are renewing at 91%.
• Integration of .luxe into two more blockchain platforms — NameCoin and XAYA — is underway.

MMX expects to announce its full-year results April 3.

Phishing still on the decline, despite Whois privacy

The number of detected phishing attacks almost halved last year, despite the fact that new Whois privacy rules have made it cheaper for attackers to hide their identities.
There were 138,328 attacks in the fourth quarter of 2018, according to the Anti-Phishing Working Group, down from 151,014 in Q3, 233,040 in Q2, and 263,538 in Q1.
That’s a huge decline from the start of the year, which does not seem to have been slowed up by the introduction in May of the General Data Protection Regulation and ICANN’s Temp Spec, which together force the redaction of most personal data from public Whois records.
The findings could be used by privacy advocates to demonstrate that Whois redaction has not lead to an increase in cybercrime, as their opponents had predicted.
But the data may be slightly misleading.
APWG notes that it can only count the attacks it can find, and that phishers are becoming increasingly sophisticated in how they attempt to avoid detection. The group said in a press release:

There is growing concern that the decline may be due to under-detection. The detection and documentation of some phishing URLs has been complicated by phishers obfuscating phishing URLs with techniques such as Web-spider deflection schemes – and by employing multiple redirects in spam-based phishing campaigns, which take users (and automated detectors) from an email lure through multiple URLs on multiple domains before depositing the potential victim at the actual phishing site.

It also speculates that criminals once involved in phishing may have moved on to “more specialized and lucrative forms of e-crime”.
The Q4 report (pdf) also breaks down phishing attacks by TLD, though comparisons here are difficult because APWG doesn’t always release this data.
The group found .com to still have the most phishing domains — 2,098 of the 4,485 unique domains used in attacks, or about 47%. According to Verisign’s own data, .com only has 40% market share of total registered domains.
But new, 2012-round gTLDs had phishing levels below their market share — 4.95% of phishing on a 6.83% share. This is actually up compared to the 3% recorded by APWG in Q3 2017, the most recent available data I could find.
Only two of the top 20 most-abused TLDs were new gTLDs — .xyz and .online, which had just 70 attack domains between them. That’s good news for .xyz, which in its early days saw 10 times as much phishing abuse.
After .com, the most-abused TLD was .pw, the ccTLD for Palau run by Radix as an unrestricted pseudo-gTLD. It had 374 attack domains in Q4, APWG said.
Other ccTLDs with relatively high numbers included several African zones run as freebies by Freenom, as well as the United Kingdom’s .uk and Brazil’s .br.
Phishing is only one form of cybercrime, of course, and ICANN’s own data shows that when you take into account spam, new gTLDs are actually hugely over-represented.
According to ICANN’s inaugural Domain Abuse Activity Reporting report (pdf), which covers January, over half of cybercrime domains are in the new gTLDs.
That’s almost entirely due to spam. One in 10 of the threats ICANN analyzed were spam, as identified by the likes of SpamHaus and SURBL. DAAR does not include ccTLD data.
The takeaway here appears to be that spammers love new gTLDs, but phishers are far less keen.
ICANN did not break down which gTLDs were the biggest offenders, but it did say that 52% of threats found in new gTLDs were found in just 10 new gTLDs.
This reluctance to name and shame the worst offenders prompted one APWG director, former ICANN senior security technologist Dave Piscitello, to harshly criticize his former employer in a personal blog post last month.

Scottish registry dumps the pound over Brexit fears

The .scot gTLD registry has decided to dump the British pound as its currency of choice, due to fears over Brexit.
DotScot’s back-end, CORE, told registrars this week that it will start billing in euros from March 29.
The switch is being made due to “the expected volatility in currency exchange rates between GBP and other main currencies post-Brexit”.
March 29 is currently enshrined in UK law as the date we will formally leave the European Union, though the interminable political machinations at Westminster are making it appear decreasingly unlikely that this date could be extended.
CORE said that the prices for .scot registrations, renewals and transfers will be set at €1.14 for each £1 it currently charges. That’s the average exchange rate over the last 12 months, registrars were told.
.scot is a geographic gTLD, rather than a ccTLD, which was approved in ICANN’s 2012 application round. It has about 11,000 domains under management.
Its largest registrar, 1&1 Ionos (part of Germany’s United Internet), charges £40 a year.
Only 38% of Scots voted in favor of Brexit back in 2016, the lowest of any of the UK’s four nations, with no region of Scotland voting “Leave”.
Naturally, a great many Scots believe they’re being dragged out of the EU kicking and screaming by their ignorant, English-bastard neighbors. Which strikes me as a fair point.

.film gTLD sees spike after dropping restrictions

The .film gTLD saw a small spike in registrations this week after dropping eligibility requirements.
The Australia-based registry, Motion Picture Domain Registry, went fully unrestricted February 22 and immediately saw at least 100 new names in its zone file.
It’s a small increase, but it meant .film, which sells for roughly $70 (101domain) to $120 (GoDaddy, its biggest channel) a year, topped 4,000 names for the first time.
It has not seen seen any additional growth since the weekend, however.
.film, from its 2015 launch, was restricted to registrants that could show a nexus to the film industry and was touted as an anti-piracy measure.
It does not appear to have been particularly well-policed, however. Its most popular domains (per Alexa rank) appear today to be piracy sites.
Despite the old restrictions, and despite being more than twice the price, .film has so far actually proved more popular than Donuts’ .movie gTLD, which has been wobbling around the 2,000 to 3,000 domain mark for the last couple of years.
I expect this is probably due to the fact that the word “film” means the same thing in many languages, whereas “movie” is a distinctly American English term.

Yanks beat Aussies to accountancy gTLD

The contention set for .cpa has been resolved, clearing the way for a new accountancy-themed gTLD.
The winner is the American Institute of Certified Public Accountants, which submitted two bids for the string — one “community”, one vanilla, both overtly defensive in nature — back in 2012.
Its main rival, CPA Australia, which also applied on a community basis, withdrew its application two weeks ago.
Commercial registries Google, MMX and Donuts all have withdrawn their applications since late December, leaving only the two AICPA applications remaining.
This week, AICPA withdrew its community application, leaving its regular “single registrant” bid the winner.
AICPA is the US professional standards body for accountants, CPA Australia is the equivalent organization in Australia. ACIPA has 418,000 members, CPA Australia has 150,000.
Both groups failed their Community Priority Evaluations back in 2015 on the basis that their communities were tightly restricted to their own membership, and therefore too restrictive.
AICPA later amended its community application to permit CPAs belonging to non-US trade groups to register.
Both organizations were caught up in the CPE review that also entangled and delayed the likes of .music and .gay. They’ve also both appealed to ICANN with multiple Requests for Reconsideration and Cooperative Engagement Process engagements.
CPA Australia evidently threw in the towel after a December 14 resolution of ICANN’s Board Accountability Mechanisms Committee decision to throw out its latest RfR. It quit its CEP January 9.
It’s likely a private resolution of the set, perhaps an auction, occurred in December.
The winning application from AICPA states fairly unambiguously that the body has little appetite for actually running .cpa as a gTLD:

The main reasons for which AICPA submits this application for the .cpa gTLD is that it wants to prevent third parties from securing the TLD that is identical to AICPA’s highly distinctive and reputable trademark

So don’t get too excited if you’re an accountant champing at the bit for a .cpa domain. It’s going to be an unbelievably restrictive TLD, according to the application, with AICPA likely owning all the domains for years after delegation.