Check the Company Name on Your Domains Before August 21

Starting August 21, domain ownership is about to get more precise (or more problematic) depending on how carefully you or your clients have set up domain contact information.

Under a new ICANN Registration Data Policy, any entry in the “Organization” or “Company Name” field of a domain’s registrant contact will be considered the official legal owner of the domain. This means that if a domain is registered with both an individual name and a company name, the company will be the Registered Name Holder in the eyes of ICANN, not the person.

Registrars have started alerting users in the last two weeks since the change has practical implications. For example, if a former employee registered a domain using their own name but listed the company in the Organization field, the company now will now be the legal registrant, not the individual. That’s a good thing.

Agencies should use this moment as an opportunity to review the domains they manage — especially if they’ve registered domains on behalf of clients. Double-check that the Organization field is accurate and that whoever is listed there is truly meant to own the domain. If the domain is for personal use, registrars recommend removing any company name entirely to ensure the individual remains the owner.

There are still a few weeks before the ICANN policy goes into effect. But it’s better to make the changes sooner rather than later since edits to the Organization field could trigger ICANN’s formal change-of-ownership process.

This is a small task with big implications. Helping your clients get it right reinforces your value as a trusted partner, and could help avoid costly confusion later.

ChatGPT Agent Can Bypass Cloudflare Turnstile

• Data scientist Max Woolfe has demonstrated that ChatGPT can bypass simple CAPTCHA checks with no outside assistance.
• Woolfe’s agent displayed the in-task narration: “The link is inserted, so now I’ll click the ‘Verify you are human’ checkbox to complete the verification on Cloudflare. This step is necessary to prove l’m not a bot and proceed with the action.”
• This capability marks a departure from earlier AI agents, which often relied on human taskers or deceptive prompts to bypass CAPTCHA systems.
• The agent completed the task using ordinary web interactions—no hacking, image recognition, or puzzle-solving needed.
• Previously, AI agents like AutoGPT used services like TaskRabbit to trick humans into solving CAPTCHAs, sometimes by pretending to be visually impaired.
• By eliminating the need for third-party help, this advancement could make AI-powered automation of online tasks more difficult to detect (creating a boon for bad actors).
• It’s also a bit of egg on the face of Cloudflare, which has positioned itself recently as the protector of websites against unauthorized AI bots.

Google Opal Wants to Be Your Vibe Coding Sidekick

• Google has quietly launched Opal, a no-code AI app builder aimed at helping users create small, task-specific apps through natural language prompts.
• Like other vibe coding assistants, Opal is designed to turn ideas into functional apps without requiring any traditional programming knowledge. The experience is closer to collaboration than coding.
• Opal invites users to “build your ideas into real, usable things,” such as tools for self-reflection, habit tracking, journaling, or organizing workflows.
• Rather than focusing on building polished, full-featured products, Opal supports users in crafting lightweight and personal tools that match their current “vibe” or need.
• Check out this Opal overview video. You can start experimenting now by signing in with a Google account.

Worth a Look

• Patchstack’s mid-year vulnerability report shows a significant uptick in the volume and severity of WordPress vulnerabilities.
• How empathy closes clients – an excellent take from Jennifer Moss on the Admin Bar blog.
• Piccia Neri explains the simplest way to accessible design.
• Figma is going public in an attempt to raise $1 Billion with an expected price per share of $25-$28.
• Cloudflare says 2/3 of DDoS attacks come from competitors.
• Claude Code gives an AI powerup to your terminal or IDE.
• Why AI visibility starts with ops – not marketing, an interesting read.