New report says domain name registrants should avoid New gTLDs (specifically Donuts & Radix extensions)

EFF and Public Knowledge released a whitepaper titled Which Internet registries offer the best protection for domain owners?

Top-level domains are the letters after the dot, like .com, .uk, .biz, or .mobi. In the Internet’s early days, those wishing to register their own domain name had only a few choices of top-level domain to choose from, such as .com, .net, or .org. In the past few years hundreds of new top-level domains have come onto the market (like .cool, .deals, and .fun), and there has never been more choice for domain name registrants.

But apart from choosing a name that sounds right and is easy to remember, a domain name registrant should also consider the policies of the registry that operates the domain, and those of the registrar that sells it to them.

It turns out that not every top-level domain is created equal when it comes to protecting the domain holder’s rights. Depending on where you register your domain, a rival, troll, or officious regulator who doesn’t like what you’re doing with it could wrongly take it away, or could unmask your identity as its owner—even if they are from overseas.

To help make it easier to sort the .best top-level domains from the .rest, EFF and Public Knowledge have gotten together to provide this guide to inform you about your choices. There’s no one best choice, since not every domain faces the same challenges. But with the
right information in hand, you’ll be able to make the choice that makes sense for you.

These are some of the main problems discussed in the whitepaper:

  • Trademark Clearinghouse:
    Unfortunately, the Trademark Clearinghouse admits many questionable entries into its database, with the result that legitimate domain registrants are prevented from registering domains during the sunrise period, or are needlessly frightened away from doing so during the subsequent Claims period. Because the contents of the Trademark Clearinghouse is kept secret, we do not know about all of the brands that have been spuriously registered there, but they are known to include generic words such as smart, hotel, one, love, cloud, london, luxury, and even “the”.
  • New gTLDs:
    For better protection against trademark bullies, you should generally avoid registering your domain in any of the new gTLDs, and be aware that it may be more difficult to successfully register in a Donuts domain.
  • Copyright Bullies:
    The most notable private copyright takedown policies are those that apply to the domain name registries Donuts and Radix, and their respective registrars. The U.S.-based Donuts controls almost 200 (240 now with the addition of Rightside’s extensions) new top-level domains including .movie, theater, and .company, while Radix, based in the United Arab Emirates, has nine including .tech, .press, and .site. In 2016 both registries announced partnerships with the Motion Picture Association of America (MPAA) to establish a Trusted Notifier Program to ensure that websites using domain names registered with them were not engaged in “pervasive illegal online piracy”.
    For protection against copyright bullies, you should consider choosing a domain name operated by a registry that doesn’t have, and isn’t considering adopting, a streamlined policy to takedown domain names alleged to be associated with copyright infringement. This means avoiding the domains operated by Donuts and Radix.
  • Protection against overseas speech regulators
    For protection against overseas speech regulators, you should consider whether the country code domain registry based in your own country offers good protection for speech. Details of some of these are given in the table below. You should also look carefully at the policies of the gTLD registries, and consider avoiding those that allow an overseas “trusted notifier” other than a court to initiate a domain takedown process. Once again, an .onion domain offers the best protection, but also the least usability for the average Internet user.
  • Privacy protection
    To protect your privacy as a domain registrant, we recommend registering in a countrycode domain that doesn’t provide public access to domain registrant data, or registering a domain through a registrar that provides free privacy proxy services. Failing that, you
    should consider paying for a privacy proxy service, or using a .onion domain, if you are able to operate your website over the less universally-available Tor network. has written in the past about the questionable practices followed by Donuts and Radix and their deals with Motion Picture Association of America (MPAA): Should Donuts or any other domain registry be the internet (copyright) police? Apparently others agree.

You can download the complete whitepaper that includes a very useful table here.


About Konstantinos Zournas

I studied Computer Engineering and Computer Science in London, UK and I am now living in Athens, Greece. I went online in 1995, started coding in 1996 and began buying domain names and creating websites in 2000. I started the blog in 2012.


  1. GTLD’s are on life support right now, new round of renewals coming, better get your Visa’s cleared boys, they are very hard to carry in a portfolio model when playing the premium renewal game.

    Sorry Phil

  2. Yeah the “money grab” model of releasing them with reduced protection and regulation is a problem and huge disincentive. Great for .com and other legacy TLDs though.

  3. This article has so much issues written all over it:

    Current Issues:
    1.) NewTLD aren’t protected?
    2.) Trademark bullies?
    3.) Copyright bullies?
    4.) Registrar/Registry put zero effort on creating policy on etc. domain names activities.

    Article writer/Author; Conclusion: “Do not buy New gTLD domain names; especially from Donuts and Radix”?

    With more than one issues on the table, how can one answer is going to erase those other issues on the table? Not to mention, there are more than one registrar operates new gTLD??

    More work to be done?

  4. The article appears to suggest that registries such as Donuts and Radix blindly accept any “allegations” made by the MPAA and take down domain names. That is entirely incorrect. In reality, and in our case, we always reserve the rights to take action on any domain name that comes from MPAA and others that are ‘trusted notifiers’ who have a formal channel to submit complaints to us. At most times, the complaint needs to be accompanied with a court-order for it to be actionable.

    Most registries, ourselves included, have a very clearly laid out AUP, which defines the types of activities prohibited in the namespace and specifies that all unlawful activities are prohibited. When it comes to abusive activities which cause direct harm to the website visitors through malware, phishing, piracy, etc., which are very easy to discern, are acted upon by us swiftly. Not only does this protect the interest of the internet users at-large, it also allows us to operate clean and trust-worthy name-spaces, which directly serves the interest of our customers. Many TLDs have fallen prey to wide-spread abuse and suffer consequences such us TLD blocks in email SPAM filters.

    So, concluding that one should avoid gTLDs operated by registries who are actively working towards minimizing abusive use of domain names on the Internet is misleading, given that the intention is to protect the interest of the internet users and not the opposite.

    Sandeep Ramchandani,
    Vice President and Business Head

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.