Domain Names

Project Jake: A New Model for Domain Registration Data Disclosure

Project Jake proposes a voluntary, group-based framework for domain registration data disclosure, giving registrars and registries control over access while establishing standardized agreements, requester validation and sensitivity levels to balance privacy with legitimate data needs. more

How Domain Abuse, Social Media, and AI Fuel Brand Attacks

CISOs expect social media impersonation to become their leading cybersecurity threat as attackers increasingly combine AI-enabled deception, executive impersonation, and domain abuse across multiple channels to conduct fraud and steal sensitive information. more

The Reporting Gap: What Happens Between a DNS Abuse Complaint and a Takedown

DNS abuse enforcement can stop abusive domains and drive systemic registrar reforms, but reporting barriers, inconsistent response times, and poorly documented complaints leave many phishing sites active before actionable cases ever reach enforcement. more

ICANN Sets Guidelines to Advance Universal Acceptance of Internationalized Domains and Email

ICANN's new Universal Acceptance guidelines target persistent interoperability gaps that prevent internationalized domain names and email addresses from working reliably across browsers, identity systems, applications and other Internet infrastructure. more

Thirty-Five Years Later, Moscow Comes Looking for the Soviet Union’s Domain

Russia is imposing state identity verification on .su, the Soviet Union's surviving domain, as researchers uncover criminal infrastructure across the namespace and ICANN pursues a retirement process that could eventually remove it from the global root. more

ICANN Terminates Two Registrars as DNS Abuse and Compliance Failures Escalate

ICANN has terminated two registrar accreditation agreements after unresolved compliance failures, citing Trustname's handling of DNS abuse and IPIP's failures involving RDAP, registration data escrow, accreditation fees, and access to non-public registration data. more

ICANN to Shut Down Open Data Platform and API September 1

ICANN will retire its Open Data Platform and API on September 1, shifting datasets to downloadable CSV files and forcing researchers, registries and domain-industry organizations to update automated workflows that rely on programmatic data access. more

After the Close: What the 2026 gTLD Round Has Already Revealed

ICANN's 2026 gTLD round drew more than 1,600 applications, led by ambitious portfolio investors. But scant brand disclosures and new rules banning private settlements could make contention costlier and reshape the economics of domain ownership. more

ICANN Draws More Than 1,600 Applications in New gTLD Round

ICANN has received more than 1,600 applications for new generic top-level domains, setting the stage for administrative checks, public disclosure and potentially fierce competition over sought-after additions to the internet's expanding domain-name system. more

ICANN’s New gTLD Application Window Set to Close, Capping a Landmark Expansion Round

ICANN's second major domain expansion round closes August 12, with costly applications, support for 27 non-Latin scripts and stricter technical vetting setting the stage for a broader, more multilingual internet naming system. more

Phantom Squatting: When LLMs’ Hallucination Becomes an Attacker’s Best Friend

As AI reshapes cybersecurity, attackers are exploiting a fundamental weakness in large language models. Phantom squatting turns hallucinated domain names into trusted attack vectors, creating a new class of DNS abuse that defenders cannot solve by eliminating hallucinations alone. more

From Human Trust to Machine Cryptography: The Infrastructure Deficit in AI Interoperability

As AI agents begin collaborating across the open internet, the absence of trusted identity, authorization, and accountability frameworks threatens interoperability, making cryptographic trust infrastructure essential to building a secure and scalable agentic economy. more

Who Registers the Domain That Steals Your Data? The Registrar Accountability Gap in India’s DNS Abuse Crisis

India's DNS abuse crisis exposes a registrar accountability gap: malicious domains remain online while vulnerable users bear the cost. Concentrated abuse patterns suggest stronger oversight and faster mitigation could significantly reduce predictable harms nationwide today. more

The Question Isn’t Whether the Harm Is Real - It’s Who Should Act

Measuring online abuse can reveal its scale, but not who should intervene. Effective policy must distinguish harm from contractual responsibility, identify the actors best placed to act, and target remedies where they can work effectively. more

.PK ccTLD Governance Issues and Pakistan’s Digital Future

Pakistan's .pk domain has long been controlled by a private company abroad, raising concerns over digital sovereignty, cybersecurity and accountability. Repeated breaches, offshore infrastructure and weak governance have left a critical national asset exposed and contested. more