Thirty-seventh in a series on jobs whose pay system is stranger than the salary. This entry runs alongside the other unnamed toll collectors in this batch: the card networks that skim a slice of every swipe, the credit rating agencies that get paid by the very bonds they grade, and the pharmacy benefit managers who sit in the middle of every prescription. The domain registry belongs at the front of that line, because it is the cleanest tollbooth in the whole series. It did not build the internet. It runs one piece of plumbing no one can switch away from, and it charges a fixed fee on every address that passes through. Every figure below is cited to a Verisign SEC filing or the SEC's own data API, and where a number could not be verified at a primary source I say so rather than estimating.
Type a web address that ends in .com and you are paying a toll to a single company in Reston, Virginia.
Not the company that hosts the site. Not the registrar you bought the name from. A third party you have almost certainly never thought about, that most people who own a .com have never heard of, collects a fee on that name every single year for as long as the name exists. The company is Verisign, Inc. It operates the .com registry, and by contract it is the only company allowed to. There are more than 160 million .com and .net names in the ground, and Verisign is paid on each one, every year, forever, or at least through November 30, 2030, which is the same thing at internet speed.
This is the tollbooth with the labor stripped all the way out. Verisign did not invent the web. It does not make the websites, host the sites, or sell you the name. It maintains a database that maps names to numbers, and it holds a government-sanctioned right to be the only company that maintains the .com part of it. The fee it charges is not really a price at all. It is the maximum a contract allows it to charge, which is a very different thing, and it is the tell that you are looking at a toll and not a market.
The fee that is really a cap
The number at the center of this is $10.26.
That is the annual registry-level wholesale fee for each new and renewal .com domain name registration. Effective September 1, 2024, Verisign raised it from $9.59 to $10.26. Every .com name on Earth carries that fee once a year, collected by Verisign at the wholesale level, and it is not a figure Verisign arrived at by competing for your business. It is a ceiling handed to it by contract.
Read how the contract phrases it, because the phrasing is the whole story. The .com Registry Agreement permits Verisign to increase the Maximum Price of .com registrations by up to 7 percent over the previous year, but only in each of the final four years of a six-year period. In the first two years of each term, the price is frozen. Under the agreement Verisign renewed in November 2024, it says plainly that it cannot increase the price of a .com registration during the first two years of the six-year term.
Sit with what that means. A normal company sets its own prices and the market disciplines them. Verisign is told what the maximum is and when it may reach for it. There is no competitor to undercut it, so the constraint on its pricing is not competition. It is a schedule. The first six-year period began on October 26, 2018, and across the four increase-eligible years the wholesale price climbed from the mid-sevens up to $9.59 and then to $10.26. The exact intermediate steps between those endpoints are consistent with 7 percent annual increases but I did not pull each one from a primary Verisign price notice, so I describe the ladder rather than asserting every rung. The endpoints, the 7 percent cap, and the two-year freeze are all straight from the filing.
That is a regulated monopoly's pricing, not a business's. And it is worth naming who agreed to it. For .com specifically, the structure rests on a Cooperative Agreement between Verisign and the U.S. Department of Commerce, last amended by Amendment 35 on October 26, 2018, which restored Verisign's ability to raise .com prices. On November 30, 2024, that Cooperative Agreement automatically renewed on the same terms for a successive six-year term. The federal government is not a bystander to this toll. It is the party that sanctioned it.
The spread that makes it a fortune
A tollbooth is only a good business if the cost of running it is small next to what it collects. Here the gap is almost comic.
For each .com name it charges $10.26 for, Verisign pays ICANN, the nonprofit that coordinates the internet's naming system, just $0.2575 per annual registration, plus a fixed fee of $6,250 each quarter. That is it. Twenty-five and three-quarter cents flows out of the building for every $10.26 that flows in. On .net, Verisign remits ICANN 75 cents per annual registration. The wholesale toll on .com is roughly forty times what Verisign owes ICANN for the right to collect it.
Everything between those two numbers is the spread, and the spread is enormous because the flow is enormous. As of December 31, 2024, there were 169.0 million .com and .net domain name registrations in what Verisign calls the domain name base, down about 2 percent from 172.7 million a year earlier. The 10-K reports that combined figure and does not break out .com alone, so when people say there are more than 160 million .com names, they are leaning on the verified 169.0 million .com-plus-net total; the .com-only count, often reported near 157 million in Verisign's industry briefs, I could not confirm at a primary source this session, so treat any .com-only figure as approximate.
Run the toll across that base and you get the headline. Verisign's total revenue, nearly all of it .com and .net registry fees, was $1,656.6 million in fiscal 2025, $1,557.4 million in 2024, and $1,493.1 million in 2023. That revenue does not come from selling anything most people would recognize as a product. It comes from a per-name fee collected on a database no one can leave.
What a protected toll does to a margin
The clearest proof that this is a toll and not a technology business is the shape of the profit.
Verisign's operating income was $1,121.0 million in fiscal 2025 on $1,656.6 million of revenue, which is an operating margin of 67.7 percent. In 2024 it was $1,058.2 million, a 67.9 percent margin. In 2023 it was $1,000.6 million, a 67.0 percent margin. Those margins I computed from the two primary figures the SEC's own data API reports, revenue and operating income; the division is mine, the inputs are Verisign's.
Net income tells the same story one level down. Verisign kept $825.7 million of net income in fiscal 2025, which is 49.8 percent of revenue. In 2024 it was $785.7 million, or 50.4 percent. In 2023 it was $817.6 million, or 54.8 percent. Roughly half of every dollar that enters the tollbooth falls all the way to the bottom line. Again, the net margins are my arithmetic off the primary net-income and revenue figures.
There is almost no business on Earth that keeps half of every dollar. Software companies at the top of their game aspire to it. Verisign reaches it running a name-to-number lookup service that has no legal competitor. The margin is not a reward for a better product. It is what a toll looks like when the road has only one lane and the state has promised to keep it that way.
The tell: almost nobody works there
If the money came from labor, you would expect a lot of laborers. There are not.
Verisign had 932 employees as of December 31, 2024, of whom 929 were full-time, and about 93 percent of them were based in the United States. That is the entire headcount behind more than $1.6 billion of revenue. Verisign, Inc. trades on the Nasdaq under the ticker VRSN, was incorporated in Delaware on April 12, 1995, keeps its principal offices at 12061 Bluemont Way in Reston, Virginia, and had about 94.6 million shares outstanding in early February 2025. Fewer than a thousand people run a tollbooth that touches the majority of global e-commerce.
Compare that to the beer distributor two entries over, whose warehouses hold tens of thousands of drivers and supervisors earning ordinary wages while the franchise captures the toll. Verisign has dispensed with even that. There is barely a warehouse to staff. The value does not live in the work of 932 people. It lives in one sentence in a contract that says Verisign will remain the sole registry operator for .com through November 30, 2030. That sentence, not the workforce, is the asset.
Who pays the toll without seeing it
The reason almost no one notices this toll is that they never see the $10.26.
Verisign sells at wholesale, to registrars. When you buy a domain name from GoDaddy, Namecheap, or any of the hundreds of other registrars, that registrar pays Verisign the $10.26 registry fee and then charges you whatever it wants on top. As the filing puts it, retail pricing for these registrations is established by registrars, not by Verisign. So the price you see, twelve dollars, twenty dollars, a first-year discount and a fatter renewal, is the registrar's number. The registry toll is buried inside it, undifferentiated, invisible.
This is the same trick every good tollbooth in this series runs. The card network's interchange fee is baked into the shelf price so the shopper never sees it. The title insurer's premium is one line in a stack of closing costs. The domain registry does it one better: it sells to an intermediary who marks it up, so even the line item vanishes. The person who ultimately pays the $10.26, times however many names they own, times every year they renew, is the small-business owner or the hobbyist or the enterprise with a portfolio of defensive registrations. They pay the toll. They just pay it to a registrar who pays it onward, and they never learn the collector's name.
And here is the part that separates this toll from a mere pricing quirk. The .com and .net registries support the majority of global e-commerce, and Verisign is the Root Zone Maintainer, operating two of the thirteen global internet root servers. The monopoly is bolted to genuinely critical infrastructure. That is precisely why it is defensible and precisely why it is so profitable. You cannot route around it. A business whose customers depend on being reachable at a .com address cannot decide to stop paying the .com toll any more than a trucker can decide to stop crossing the only bridge into town.
What a salaried reader should take from this
A price you cannot negotiate is not a price, it is a toll. Verisign does not compete for the $10.26. It is handed a maximum by contract and told which years it may raise it. When you see a fee that moves on a fixed schedule rather than in response to a competitor, you are not looking at a market clearing. You are looking at a rule being administered. The tell is always the same: ask who Verisign's competitor is for .com, and the answer, written into the agreement, is that there isn't one through November 30, 2030.
The margin reveals the moat. No ordinary business keeps 68 cents of operating profit and roughly 50 cents of net profit out of every revenue dollar. When a margin is that fat and that stable, the first question is never how good the product is. It is who has been legally prevented from undercutting it. For Verisign the answer is everyone, by contract, backed by a federal Cooperative Agreement. The same shape shows up under the credit rating agencies and the card networks: unusually durable profit is almost always a fence somebody else is forced to honor.
The best toll is the one nobody can see. Verisign sells wholesale to registrars who mark the fee up and hide it inside a retail price. You pay it every year and never learn where it goes. Opacity is not an accident of the arrangement, it is the feature that keeps it uncontroversial. Whenever an intermediary sells through another intermediary, the final payer loses the ability to even name the party being paid, which is exactly how a toll on more than 160 million names attracts so little notice.
Attach a toll to essential plumbing and it becomes close to permanent. The reason this monopoly renews and renews is that .com underpins the majority of global commerce and Verisign helps run the internet's root. You cannot boycott the thing you depend on to be reachable. That is the deepest lesson of the whole series in one company: the most durable pay is not attached to the best work, it is attached to the flow no one can leave, and the party collecting it is usually the one you were never told to look at.
Related reading
- How card networks are paid: a slice of every swipe, baked into the shelf price so the shopper never sees the toll.
- How credit rating agencies are paid: paid by the issuers whose bonds they grade, another fee protected by structure rather than competition.
- How pharmacy benefit managers are paid: the unnamed middleman standing between you and every prescription.
- How taxi medallion owners are paid: a government-capped license whose value was the scarcity, until the government erased it.
- How alcohol distributors are paid: a state-enforced franchise where the license, not the labor, captures the toll.
Fact-check notes and sources
Nearly every figure here comes from Verisign's own filings with the SEC: the FY2024 Form 10-K for the contract terms, fees, and monopoly language, and the SEC's XBRL company-concept data API for the audited financials. Where a figure is computed, secondary, or could not be verified at a primary source, it is flagged in the text and here. A reproducibility note follows on how these were retrieved.
- The monopoly structure (Verisign operates the .com, .net, and .name gTLDs under registry agreements with ICANN, and for .com under a Cooperative Agreement with the U.S. Department of Commerce), the sole-operator language ("we will remain the sole registry operator for the .com registry through November 30, 2030," with the term to be renewed or extended by that date, renewed November 25, 2024), the $10.26 wholesale fee (raised from $9.59 effective September 1, 2024), the 7 percent cap in the final four years of each six-year period beginning October 26, 2018, the two-year price freeze under the renewed agreement, the ICANN fees ($0.2575 per annual .com registration plus a fixed $6,250 quarterly fee, and $0.75 per annual .net registration), the domain name base (169.0 million .com and .net registrations as of December 31, 2024, down from 172.7 million a year earlier), the Cooperative Agreement history (Amendment 35 on October 26, 2018, automatic renewal on the same terms for a successive six-year term on November 30, 2024), the infrastructure role (.com and .net supporting the majority of global e-commerce; Root Zone Maintainer operating two of the thirteen global internet root servers), the registrar-sets-retail-price point, and the corporate details (incorporated in Delaware April 12, 1995; principal offices at 12061 Bluemont Way, Reston, Virginia; 932 employees, 929 full-time, about 93 percent U.S.-based, as of December 31, 2024) are all from Verisign, Inc. Form 10-K for fiscal year 2024, via SEC EDGAR. The exact intermediate steps in the wholesale price ladder between the mid-sevens and $9.59 were not each pulled from a primary Verisign price notice; only the endpoints, the 7 percent cap, and the two-year freeze are primary-verified. The .com-only registration count (often reported near 157 million) is not broken out in the 10-K, which reports only the combined 169.0 million .com-plus-net base, so any .com-only figure is treated as approximate.
- Total revenue ($1,656.6 million in fiscal 2025; $1,557.4 million in 2024; $1,493.1 million in 2023) is from the SEC XBRL company-concept API, us-gaap:Revenues, Verisign CIK 0001014473, a primary source.
- Operating income ($1,121.0 million in 2025; $1,058.2 million in 2024; $1,000.6 million in 2023) is from the SEC XBRL company-concept API, us-gaap:OperatingIncomeLoss, Verisign CIK 0001014473. The operating margins of 67.7 percent, 67.9 percent, and 67.0 percent are my own arithmetic, operating income divided by revenue, off these primary figures.
- Net income ($825.7 million in 2025; $785.7 million in 2024; $817.6 million in 2023) is from the SEC XBRL company-concept API, us-gaap:NetIncomeLoss, Verisign CIK 0001014473. The net margins of 49.8 percent, 50.4 percent, and 54.8 percent are my own arithmetic, net income divided by revenue, off these primary figures.
- Shares outstanding (about 94.6 million as of February 7, 2025) and the corporate metadata are corroborated by SEC submissions metadata, Verisign CIK 0001014473, a primary source.
- Reproducibility and access note: www.sec.gov/Archives and browse-edgar block automated fetches, so the FY2024 10-K text was read through a Wayback Machine snapshot, while the FY2025, FY2024, and FY2023 dollar figures came from the data.sec.gov XBRL API, which is not blocked. The canonical SEC URLs are cited above. The ICANN .com Registry Agreement and the NTIA-hosted Cooperative Agreement and Amendment 35 documents were not retrieved directly this session (icann.org and the NTIA document paths blocked or 404'd automated fetches). All ICANN-agreement and Cooperative-Agreement terms cited here come from Verisign's 10-K description of those instruments, which is primary for Verisign's own obligations but is a paraphrase of ICANN's and DOC's underlying contract language; pull those instruments directly before quoting their clauses verbatim. The year-end 2025 domain name base was not captured because the FY2025 10-K was behind the automated-tool block with no snapshot available, so the December 31, 2024 base of 169.0 million is used.
This post is informational and journalistic, not career, legal, or financial advice, and nothing here is a recommendation to buy or sell any security. It describes a company's own SEC filings and the SEC's public data API. Contract terms, fees, registration counts, and financial figures change year to year, and several details are flagged above as approximate or retrieved through archived or API paths, so verify current data before relying on any of them. Mentions of Verisign, ICANN, the Department of Commerce, and specific registrars are nominative fair use, and no affiliation is implied.
