ICANN's gTLD site (to apply for things like .sex) is a tunnel to a virtual Windows box running the registration app. Over-engineering?