remove nyc.mn

[wdhdev]

See #2112 for more information.

Reasons for removal:

• Subdomains are not registrable.
• There are less than 10 SSLs created across the domain in its lifetime, and less than 3 that are currently active: https://crt.sh/?q=nyc.mn
• No subdomains were found when attempting to scan the domain using https://subdomainfinder.c99.nl/
• Only the registry site is found when searching site:nyc.mn on Google.

As per what @groundcat said in the issue, I too believe the best course of action would be emailing the entry submitter (mattbrown@nyc.mn) to see if this domain is required on the PSL as the domain's MX records do seem to be active.

[awsjulian]

Hello, the NYC.mn service is alive and has been open for registration since last week, and our website has been migrated to https://dot.nyc.mn/ and most community sites are listed here https://dot.nyc.mn/members/

If you like, we can add a '_psl' record to this issue after I hear from the administrator tomorrow.

The domain and Registry operation has actually changed hands in early August, consequently the admin will submit a PR to update email shortly. Please let us know if you have any questions. Thanks.

[simon-friedberger]

@awsjulian The system is currently not working. Please let us know when you have it back up and running.

To clarify, taking jochwang as an example from your member page:

1. The link goes to https://dot.nyc.mn/user/jochwang/ which does not need a PSL entry
2. https://dot.nyc.mn/user/jochwang/ does not actually work it just ends up at a Cloudflare login page
3. jochwang.nyc.mn also shows a Cloudflare error page

[wdhdev]

I have received the following email from info@nyc.mn:

Hi William,

Hope this message finds you well.
Just reaching out about the pull
request you made here:
https://github.com/publicsuffix/list/pull/2114

Our new users brought it to my attention, so I’m writing jus to
confirm that the nyc.mn subdomain service is active. We started building
the system since Aug 9 and opened registration on Aug 29, all after the
domain transferred to me on Aug 5 so yes it is indeed a new
service after many years of MIA, so you might not find many subdomains
through google site:nyc.mn but there should be a few, but still not
mcuh, if you check on bing.com

after opening registration, we got a tsunami of new user signups and as
of yesterday, we had over 1100 new reg domains (all of them are listed
on our website if you want to take a look) in 3 days. Because of this,
we are actually considering pausing registration to prevent misuse,
as some of the sign-ups seem suspicious and we suspended 64 of them.

I’m traveling this week and away from a computer for some days so I
can’t make any changes on git right now, yet We DO need to update the
outdated contact email since Matt is no longer managing the service.
Apologies for the delay or if I’ve reached out in the wrong way!

Thanks!
Aaron

[awsjulian]

@simon-friedberger @wdhdev Thank you very much for your assessments; I appreciate your review.

The link goes to https://dot.nyc.mn/user/jochwang/ which does not need a PSL entry

While you are correct that the profile pages themselves do not need PSL entries, the subdomains do require PSL entries for cookie security.

Our users receive:

1. a subdomain (needs PSL support)
2. a profile page in our member directory (does not need PSL support)

Our objective is not only to provide yet another subdomain registration service but also to create an online community where users (subdomain holders) can showcase their websites and their use cases for the nyc.mn subdomains.

https://dot.nyc.mn/user/jochwang/ does not actually work it just ends up at a Cloudflare login page

The "Cloudflare" you encountered is actually the Cloudflare Turnstile captcha, similar to Google Recaptcha, required for logging in, as profiles are not made public and can only be viewed by registered users.

jochwang. nyc.mn also shows a Cloudflare error page

Regarding jochwang .nyc.mn showing a Cloudflare error page, the domain holder is responsible for how the subdomain is used, including DNS settings. In this case, they chose to use Cloudflare, and there is no A record.

Our service requires all domain registrants to have active websites after registering a subdomain to prevent squatting. Users who do not set up a website (i.e., do not use the domain) for a long time may have their registration deleted.

The system is currently not working.

For your concern about system functionality, https://dot.nyc.mn is operating normally, with no reported downtime. If you are referring to the sign-up page, it may be geo restricted, as we have geo-limited sign-ups to users from New York State, US, to limit suspicious activity.

Our current status:

• Approved: 1892
• Pending review: 596
• Rejected: 64

We have 1892 users who have registered subdomains. We conducted a random selection and checked for exposed ports (80 or 443). Here is an incomprehensive list of subdomains that are possibly hosting individual websites, available for review:

https://gist.github.com/awsjulian/6da06395c46ff23ad394344e7199b5f1#file-random-nyc-sites-md

To verify our identity, we have added a _psl TXT record = URL to this issue.

[wdhdev]

That all sounds fine to me. I have checked a few random subdomains in that gist you have provided and they do infact have websites. What's left now is you need to update your contact details for your PSL entry.

I'll close this as you guys do seem to have evidence of usage and inclusion in the PSL.