Amazon and Google among .internal TLD ban backers

Google and Amazon have publicly backed ICANN’s plan to reserve the top-level domain .internal for private behind-the-firewall uses.

ICANN picked the string “internal” as the one that it will promise to never delegate to the DNS root, allowing network administrators and software developers to confidently use it with a lower risk of data leakage should the TLD come under a registry’s control in future.

The public comment period over its choice is coming to a close tomorrow, with a generally supportive vibe coming from the 30-odd comments submitted so far.

Notably, tech giants Amazon and Google have both filed comments backing .internal, with both companies saying that they already use the TLD extensively for internal purposes (Google in its Cloud services) and that to allow it to be delegated in future would cause big problems.

Some commenters niggled that .internal is too long, and that something like .local or .lan, both already reserved, might be better. Others wondered why strings such as .corp or .home, which are already effectively banned due to the high risk of name collisions, were not chosen instead.

.ing doing way better than .meme

Google Registry launched two new gTLDs in December, and just over a month later one is doing way better than the other.

As of the latest zone files, .ing has over 16,000 domains, while .meme has just 2,700. Both went to general availability on December 5.

This might seem surprising, given that .ing is intended purely for domain hacks, but memes are of course ephemeral things where registering a matching domain might not be a sound long-term investment strategy.

Both Google launches pale in comparison to the registry’s most successful gTLD, .app, which sold over 250,000 names in its first month, May 2018.

Google sells five-figure AI domain and six-figure .ing hack

A single-letter domain, an AI-related name, and a category-killer domain hack appear to have been sold by Google Registry during the latest week of its ongoing Early Access Period for the new .ing gTLD.

Judging by the .ing zone file, at least three domains have been registered in .ing since I last posted about the apparent seven-figure sale of host.ing a couple weeks ago.

The new names are w.ing, shipp.ing and tur.ing. I assume tur.ing refers to war hero Alan Turing, one of the fathers of computing and namesake of the Turing Test, used to judge AI intelligence.

w.ing was registered first, on November 13, when it would have incurred a six-figure price tag, according to published registrar retail prices. The registrant is listed as Google via the registrar Markmonitor.

Unlike w.ing and host.ing, the other two were registered via GoDaddy (albeit with redacted registrant names) so we can be more confident they are actually sales to third-party registrants.

Both shipp.ing and tur.ing were registered shortly after Google’s EAP rolled over into week three pricing ($35,000 at 101Domain‘s low-end prices, as a guide) on November 21 at 1600 UTC.

If Whois can be relied upon, the shipp.ing registrant is based in Texas and the tur.ing registrant in Arizona.

tur.ing is the only one trying to resolve currently, from where I’m sitting, but it fails due to a cert error.

Google’s EAP enters week four tomorrow at 1600 UTC, at which point prices fall daily until they settle at general availability pricing on December 5.

Did somebody spend a million bucks on a Google domain hack?

There’s evidence that Google Registry may have sold a .ing domain name for seven figures during its pre-launch period.

Google is well into its Early Access Period for the new gTLD, which runs for five weeks with premium prices decreasing every week or day until December 5, when they go to general availability pricing.

The EAP was notable for just how premium the first-week prices were — if you really wanted a quality domain hack for your business, it would cost you well north of $1 million.

But as far as I can tell from zone files, just one domain was added during that first week — host.ing, which has a Whois creation date of November 6, well within the cut-off for the seven-figure price tag.

The domain does not resolve and Whois currently shows Google itself as the registrant and Google’s go-to registrar, Markmonitor, as the registrar.

So it may be a self-reg, but waiting until EAP to grab a name in-house when Google has had literally years to do so does seem unusual.

Google to launch two fun new gTLDs next month

Google Registry is continuing its piecemeal rollout of new gTLDs with the launch of .ing and .meme this September.

Both TLDs will go to sunrise for a month from September 20, with general availability from December 5.

While both will have more-expensive Early Access Period phases, .meme is also getting a Limited Registration Period where “only content creation platforms specializing in the creation and distribution of internet memes may apply”.

While .meme is a pretty self-explanatory regular TLD with standard amount of long-tail potential, I think .ing might be the first TLD ever to launch with domain hacks as the primary envisaged use case.

Google gave “design.ing or writ.ing, ink.ing or row.ing” as potential domains.

There are a finite number of English verbs that would work well with a .ing suffix, potentially limiting registrations. I doubt the TLD will pass the 50,000 name threshold at which ICANN starts charging transaction fees, unless some other use cases are found.

Newly launched .zip already looks dodgy

A trawl through the latest zone file for Google’s newly launched .zip gTLD reveals that it is likely to be used in malware and phishing attacks.

.zip is of course also a filename extension used by the ZIP archive format, often used to compress and email multiple files at once, and many domains registered in the .zip gTLD in the last few days seem ready to capitalize on that potential for confusion.

I counted 3,286 domains in the May 14 zone file, and a great many of them appear to relate to email attachments, financial documents, software updates and employment information.

I found 133 instances of the word “update”, with sub-strings such as “attach”, “statement”, “download” and “install” also quite common.

Some domains are named after US tax and SEC forms, and some appear to be targeting employees at their first day of work.

I don’t know the intent of any of these registrants, of course. It’s perfectly possible some of their domains could be put to benign use or have been registered defensively by those with security concerns. But my gut says at least some of these names are dodgy.

Google went into general availability with eight new TLDs last Wednesday, and as of yesterday .zip was the only one to rack up more than a thousand names in its zone file.

The others were .dad (913 domains), .prof (264), .phd (605), .mov (463), .esq (979), .foo (665) and .nexus (330).

Google to drop EIGHT new gTLDs

Google Registry has announced launch details for eight new gTLDs that it has been sitting on for almost a decade.

It plans to launch .foo, .zip, .mov, .nexus, .dad, .phd, .prof and .esq over the coming couple of months, with all eight following the same launch schedule.

Sunrise will begin this weekend, April 2, and run for a month. The Early Access Periods will run for a week up until May 10, when they’re all go into general availability.

The .zip and .mov spaces will be worth keeping an eye on, especially for those in the security space.

Both gTLDs match popular file extensions — for compressed data and video respectively — which could present opportunities for innovation among the internet’s more nefarious players, such as phishers and malware distributors.

.zip is for “tying things together or moving really fast”, Google said, while .mov is “for moving pictures and other things that move”.

All of the new spaces appear to be marketed at general audiences, with no registration restrictions.

“Everyone thinks you’re a spammer” if you buy keyword domains, says Googler

A veteran Google “Search Advocate” has said he’s “not a fan” of keyword-rich domain names, partly because they’ll make people think you’re a spammer.

John Mueller responded to a Reddit thread from a user wondering whether it’s worth splashing out $2,000 on a two-keyword .com domain for his new business.

Mueller responded, according to Search Engine Roundtable and Search Engine Journal:

I’m not a fan of keyword-keyword domains, but YMMV [your mileage may vary]. Random thoughts:

everyone thinks you’re a spammer

changing business focus, or even expanding, is harder

you have no brand name, there’s nothing that people can search for which “obviously” should show your site. You’re always competing, you’re not building value with long-term users.

Google partners with UN on aids.day, womens.day and more

Google Registry has landed itself possibly the highest-profile anchor tenant of the new gTLD program to date — the United Nations.

Various UN organizations have picked up about 20 premium .day domains and launched redirects to promote the corresponding UN-recognized issue-awareness days that occur throughout the year.

For example UNAIDS has registered aids.day to raise awareness of the disease on December 1, World AIDS Day, UN WOMEN has registered womens.day for International Women’s Day on March 8, and UNICEF has registered childrens.day for November 20, World Children’s Day.

(If you’re wondering: International Men’s Day is not a UN-recognized event. The domain mens.day, which doesn’t resolve for me, was registered last month, apparently to somebody in Germany where, ironically, it is not observed.)

The UN domains all seem to redirect to pages on existing UN sites on other TLDs, rather than having bespoke web sites.

Google launched .day in late 2021 and has sold about 14,000 domains so far. It maintains a calendar of the various days and corresponding .day names at new.day, which also serves as a lead generator.

Google reveals launch dates for two new gTLDs

Google is slowly working through its backlog of unlaunched new gTLDs, this week announcing go-live dates for two dormant strings.

.boo and .rsvp will both follow the same launch schedule, with month-long Sunrise periods for trademark owners beginning October 4 and general availability starting November 15.

There will also be Early Access Periods, where names can be secured early for daily-decreasing premium fees, running from November 8 to November 15.

Google Registry described .boo as for those “building a website for love, laughs, or a surprise”, while .rsvp is for customers “celebrating a wedding, throwing a fundraiser, or accepting bookings for their business”.

They appear to be among the lightest-touch Google TLDs in terms of restrictions.

Google has been sitting on both gTLDs for over eight years.