EnCirca Blog RSS Feed

.POST Domain Registry Announces Trademark Sunrise Period for Businesses Worldwide to Protect their Brand's Online Identity

Tue, 19 Mar 2024 15:26:45 GMT

.POST offers global companies an exclusive opportunity to protect their trademarks.

BOSTON, March 19, 2024 /PRNewswire/ -- .POST, the internet domain name for organizations interested in the secure and trusted delivery of physical goods and services, including supply chain, logistics, payments, and national identity programs, announces the launch of its highly anticipated Trademark Sunrise Period via ICANN Domain Registrar EnCirca.

Scheduled to run to April 15, 2024, this Sunrise period presents a prime opportunity for businesses worldwide to secure their brand identity and protect their trademarks under the .POST domain.

.POST is backed by the Universal Postal Union (UPU), a United Nations specialized agency, and is the only top-level domain sponsored by a UN body," said Lati Matata, Director of the UPU's Postal Technology Centre,".POST can be seen as the hallmark of trust in global supply chains, setting the standard for secure and reliable cross-border commerce and shipping."

The .POST internet Top-Level Domain (TLD) is approved by the Internet Corporation for Assigned Names and Numbers (ICANN) for the global supply-chain and logistics sectors. All .POST applicants must be verified and adhere to strict security protocols to help identify trusted actors in global supply chains.

"The announcement of the Trademark Sunrise Period marks a significant milestone in establishing .POST as the leading global standard for trusted trade and secure supply chains," said Tom Barrett, President of ICANN Registrar EnCirca. "Businesses now have the opportunity to register domain names aligned with their trademarks before .POST expands eligibility in later phases."

Eligibility for the .POST domain extends to both registered and unregistered trademarks from any corner of the world, ensuring comprehensive brand protection and visibility. For more information on how to participate in the Trademark Sunrise Period and secure your brand's online identity, visit https://trust.post.

About .POST:

.POST is the designated internet credential for organizations involved in the secure and trusted delivery of physical goods and services. Sponsored by the Universal Postal Union (UPU), .POST aims to foster trust, transparency, and integrity within the global supply chain.

About the Universal Postal Union (UPU):

The Universal Postal Union is a United Nations specialized agency with its headquarters in the Swiss capital, Berne. Founded in 1874 and celebrating its 150th anniversary in 2024, it is the primary forum for cooperation between postal sector players and helps to ensure a truly universal network of modern postal products and services.

About EnCirca:

EnCirca was founded in 2001 in Boston, Massachusetts. As an ICANN-Accredited Domain Name Registrar, EnCirca has been selected as the exclusive global .POST registrar. EnCirca also provides services for domain portfolio management, cyber-security defenses, website hosting, and blockchain integration.

Media Contact for .POST and EnCirca:

For media inquiries, please contact:
Susana Leiser
374726@email4pr.com

Media Contact for UPU:

For media inquiries, please contact:
Kayla Redstone
Lead Expert, Communication & Outreach Programme
Universal Postal Union (UPU)
Mobile: +41 76 457 36 54
E-mail: 374726@email4pr.com

Price Updates from Registries

Wed, 24 Jan 2024 09:28:06 GMT

Several Domain Name Registries Have Updated Their Pricing

Several Domain Name Registries have alerted EnCirca that they are increasing their pricing for their top level domains. These pricing updates impact not just EnCirca, but every domain name registrar.

EnCirca understands that these updates are less than ideal. So, as the SOC 2 Certified, leading domain name registrar for secure TLDs, EnCirca is committed to constant investments to provide the most current cyber security solutions for their clients. Ensuring that EnCirca clients receive the best value and return on their investment decision to conduct business with EnCirca is our number one priority.

EnCirca recommends renewing your domain names now in order to avoid the higher pricing. Even if your domain names are not due for renewal soon, you can renew your domain names with the current pricing for up to 10 years right now for maximum savings. All renewals will be added to your domain names' current term.

Please view the list of top level domains below to see if this applies to you.


TLD	Date Effective	New Estimated Price

.pro	Immediately	$29.99
.mobi	Immediately	$34.99
.info	Immediately	$29.99
.me	February 1st, 2024	$32.99
.net	February 1st, 2024	$19.99
.tokyo	February 1st, 2024	$19.99
.nagoya	February 1st, 2024	$19.99
.yokohama	February 1st, 2024	$19.99
.icu	February 1st, 2024	$14.99
.bond	February 1st, 2024	$14.99
.cyou	February 1st, 2024	$14.99
.cfd	February 1st, 2024	$14.99
.sbs	February 1st, 2024	$14.99
.art	February 1st, 2024	$29.99
.bank	March 1st, 2024	$1,049.99

Click Here to Renew Now

Please do not hesitate to contact support@encirca.com if you have any questions.

Why Brands Need to Audit Their Domain Portfolio

Wed, 06 Dec 2023 11:53:30 GMT

Choosing the right domain name is critical for a company’s overall success. The most successful domain name strategies prioritize registering multiple Top Level Domains for brand protection and brand visibility. Owning your brand across multiple TLDs has become the industry standard for attracting and retaining clientele.

Brand Protection

Protect your brand against potential impersonation, domain squatting, or brand dilution. This proactive approach ensures that customers are directed to your official online channels, no matter the TLD they use.

Prevent brand impersonation domains that target customers and employees with phishing and spoofing attacks.
Stop domain squatting by malicious actors looking to exploit brand owners
Lower brand dilution where legitimate companies that have similar brand names then you may confuse customers

Brand Visibility

Redirect and Specialized Campaigns: Multiple TLDs offer flexibility. You can redirect them to your primary website, create specialized landing pages, or launch microsites for specific products or services, making it easier for your audience to find what they're looking for.

Generate more incoming traffic with multiple domains redirecting customers to the primary website
Launch specialized campaigns for specific products or services, making it easier for audience to find what they're looking for
Take advantage of top level domains to for email communications to target market demographics

How to Choose the Right Top Level Domains

When choosing which TLDs to add to your portfolio, consider which industries align with your company. Of course, .COM is the most widely recognized TLD today. But, millennials and Gen Zers are more and more appreciative of new TLDs, such as .BANK and .AI.

For example, if you are in the financial services industry, there are a dozen popular TLDs that can attract the next generation of clientele. EnCirca already offers domain name searches for the financial industry here: https://www.encirca.com/finance-options/

The same applies to other industries such as tourism, legal, and technology. Registering your brand name in these industry relevant TLDs positions yourself for immediate and future success.

Managing Your Domain Names

When managing multiple domain names and multiple TLDs, website management can become challenging. Especially when domain names are scattered across multiple registrars. The easy solution is to manage all of those domain names with a single domain registrar that specializes in security.

EnCirca is the largest ICANN accredited registrar for .BANK and .CPA domains, SOC 2 certified, and constantly improving cyber security and customer support.

Contact support@encirca.com for a free consultation on consolidating your domain names with EnCirca.

About EnCirca

EnCirca (www.encirca.com) is an ICANN-accredited domain name registrar renowned for leading the charge in domain name security and technology.

We believe in the protection of intellectual property and pride ourselves as being a Registrar-of-choice for trademark owners.

The team includes experts in trademark research, database development, ecommerce systems, domain name registration systems and portfolio management services.

EnCirca is uniquely qualified to manage multi-TLD portfolios for brand owners and trademark holders.

The Artificial Intelligence Industry Appears to Embrace Amazon’s .BOT TLD

Thu, 02 Nov 2023 19:30:05 GMT

Amazon’s .BOT Top Level Domain, designed for Artificial Intelligence, has more than doubled its zone file size after less than one week in General Availability.

This rapid growth is to be expected. For years, Amazon has restricted .BOT domains to only registrants that undergo a verification process to prove that they are directly involved in the bot industry. Now, without any registrant restrictions, the floodgates are open.

.BOT General Availability provides plenty of beneficial opportunities now that chatbots and artificial technology are infiltrating industries across the board.

EnCirca has already seen hundreds of short, high value domains registered. There are still quite a few remaining 2, 3, and 4-character domain names available for registration.

With .BOT’s reasonable pricing for both standard and premium domains, be sure not to miss out on this opportunity.

Amazon Launches .BOT Domain for Artificial Intelligence Industry

Fri, 27 Oct 2023 07:15:41 GMT

At 16:00 UTC this Monday, October 30th, .BOT will enter General Availability. After several years of experimentation, Amazon is ramping up to service the Artificial Intelligence (AI) industry with their .BOT domain extension.

Pre-Orders for .BOT domain names can be submitted at EnCirca up until 15:45 UTC (11:45am EDT) on Monday morning.

For the past few years, Amazon has limited access to .BOT domains exclusively to registrants directly involved with AI bots. Once .BOT enters General Availability Monday, all registration restrictions will be dropped.

As .BOT’s largest domain registrar, EnCirca is excited to help Amazon introduce .BOT to the global internet. To celebrate this momentous launch, EnCirca is providing Pre-Registrations for .BOT domain names.

.BOT domain names are expected to sell quickly once released this Monday. With Pre-Registration, EnCirca will automatically register your .BOT domain name the exact moment .BOT enters General Availability. Pre-Register now for an advantage over anyone else that may try to register your .BOT domain name before you.

.BOT is designed to be more than an alternative to .COM domain names. .BOT is intended to serve as the authoritative discovery space for all artificial intelligence (AI) applications, also known as bots, linking bot creators with their end-users, as well as providing bot creators with the necessary resources to help them with their own development.

With the full force of Amazon behind .BOT, this domain name is sure to disrupt the industry. Make sure you solidify your web presence for years to come and get your name first.

New Pricing Effective October 4th

Mon, 25 Sep 2023 20:55:17 GMT

New Pricing Effective October 4th

The Domain Name Registry, Digital Identity, has announced that they are increasing their pricing for all 204 of their top level domains on October 4th. This price increase effects all domain name registrars for all 204 top level domain name registrations, renewals, and transfers.

EnCirca recommends renewing your domain names now, before October 4th, in order to avoid the higher pricing. Even if your domain names are not due for renewal soon, you can renew your domain names with the current pricing for up to 10 years right now for maximum savings. All renewals will be added to your domain names' current term.

Please view the list of top level domains below to see if this applies to you.


TLD	Current Price	New Estimated Price
.accountants	$105.00	$112.50
.actor	$39.75	$43.50
.agency	$25.50	$27.00
.airforce	$32.25	$37.50
.apartments	$57.00	$60.00
.archi	$78.75	$90.00
.army	$32.25	$37.50
.associates	$34.50	$39.00
.band	$25.50	$30.00
.bargains	$31.50	$34.50
.bet	$22.50	$25.50
.bike	$34.50	$37.50
.bingo	$53.25	$57.00
.blue	$21.00	$22.50
.broker	$30.00	$33.00
.builders	$34.50	$37.50
.business	$12.00	$13.50
.cafe	$37.50	$42.00
.capital	$57.00	$69.00
.cards	$34.50	$37.50
.care	$34.50	$40.50
.careers	$57.00	$69.00
.casino	$157.50	$165.00
.catering	$34.50	$37.50
.center	$22.50	$25.50
.chat	$34.50	$37.50
.cheap	$31.50	$34.50
.church	$37.50	$42.00
.city	$22.50	$25.50
.claims	$57.00	$69.00
.cleaning	$57.00	$63.00
.clinic	$57.00	$63.00
.coach	$57.00	$63.00
.codes	$57.00	$63.00
.coffee	$34.50	$37.50
.community	$34.50	$37.50
.company	$12.00	$15.00
.computer	$34.50	$37.50
.condos	$52.50	$57.00
.construction	$34.50	$37.50
.consulting	$37.50	$45.00
.cool	$34.50	$37.50
.credit	$105.00	$112.50
.creditcard	$157.50	$187.50
.cruises	$52.50	$57.00
.dance	$25.50	$27.00
.dating	$57.00	$63.00
.deals	$34.50	$37.50
.democrat	$32.25	$34.50
.dental	$60.00	$67.50
.digital	$37.50	$40.50
.direct	$34.50	$37.50
.directory	$22.50	$25.50
.doctor	$105.00	$120.00
.dog	$57.00	$61.50
.domains	$37.50	$42.00
.education	$25.50	$32.25
.email	$27.00	$28.50
.energy	$105.00	$112.50
.engineer	$34.50	$37.50
.engineering	$57.00	$63.00
.enterprises	$34.50	$37.50
.estate	$34.50	$37.50
.events	$34.50	$37.50
.exchange	$34.50	$37.50
.expert	$57.00	$63.00
.express	$34.50	$37.50
.fail	$32.25	$37.50
.family	$30.00	$34.50
.fan	$45.00	$52.50
.farm	$34.50	$37.50
.finance	$57.00	$61.50
.fish	$37.50	$42.00
.fitness	$34.50	$37.50
.flights	$53.25	$57.00
.florist	$32.25	$34.50
.football	$21.00	$25.50
.fund	$57.00	$63.00
.furniture	$57.00	$120.00
.futbol	$12.75	$13.50
.gallery	$22.50	$25.50
.games	$25.50	$30.00
.glass	$57.00	$61.50
.global	$78.75	$87.00
.gmbh	$32.25	$37.50
.gold	$105.00	$112.50
.golf	$57.00	$63.00
.graphics	$22.50	$25.50
.group	$18.00	$21.00
.guide	$34.50	$37.50
.guru	$37.50	$40.50
.healthcare	$57.00	$69.00
.hockey	$53.25	$57.00
.holdings	$57.00	$63.00
.holiday	$57.00	$61.50
.hospital	$57.00	$61.50
.house	$34.50	$42.00
.industries	$34.50	$42.00
.institute	$24.00	$27.00
.insure	$57.00	$61.50
.international	$25.50	$30.00
.investments	$112.50	$120.00
.irish	$15.75	$21.00
.jewelry	$57.00	$63.00
.kaufen	$32.25	$34.50
.kim	$21.00	$22.50
.kitchen	$57.00	$61.50
.land	$34.50	$37.50
.lease	$52.50	$57.00
.legal	$60.00	$67.50
.lgbt	$52.50	$64.50
.life	$34.50	$36.00
.lighting	$22.50	$25.50
.limo	$54.00	$57.00
.live	$30.00	$31.50
.loans	$105.00	$112.50
.ltd	$25.50	$28.50
.maison	$53.25	$57.00
.management	$22.50	$24.00
.market	$37.50	$42.00
.marketing	$34.50	$42.00
.markets	$15.00	$16.50
.mba	$32.25	$37.50
.media	$37.50	$42.00
.money	$34.50	$37.50
.mortgage	$52.50	$60.00
.network	$25.50	$32.25
.news	$30.00	$31.50
.ninja	$24.00	$31.50
.observer	$12.00	$13.50
.partners	$57.00	$69.00
.parts	$34.50	$37.50
.pet	$21.00	$24.00
.photography	$25.50	$34.50
.photos	$22.50	$25.50
.pictures	$11.25	$13.50
.pink	$21.00	$22.50
.pizza	$57.00	$63.00
.place	$18.00	$21.00
.plumbing	$53.25	$57.00
.plus	$34.50	$37.50
.productions	$34.50	$37.50
.promo	$21.00	$24.00
.properties	$34.50	$37.50
.pub	$34.50	$37.50
.realty	$408.00	$420.00
.recipes	$57.00	$63.00
.red	$21.00	$22.50
.rehab	$32.25	$37.50
.rentals	$34.50	$37.50
.repair	$34.50	$37.50
.report	$22.50	$24.00
.republican	$32.25	$37.50
.restaurant	$57.00	$61.50
.reviews	$25.50	$60.00
.rip	$19.50	$22.50
.rocks	$18.00	$19.50
.run	$22.50	$25.50
.sale	$34.50	$37.50
.salon	$57.00	$61.50
.school	$34.50	$37.50
.schule	$21.00	$24.00
.services	$34.50	$37.50
.shoes	$57.00	$61.50
.show	$34.50	$42.00
.singles	$31.50	$34.50
.ski	$57.00	$61.50
.soccer	$21.00	$24.00
.social	$34.50	$37.50
.software	$34.50	$37.50
.solutions	$25.50	$30.00
.studio	$30.00	$36.00
.style	$34.50	$37.50
.supplies	$21.00	$24.00
.supply	$22.50	$24.00
.support	$25.50	$27.00
.systems	$27.00	$31.50
.tax	$57.00	$69.00
.taxi	$57.00	$63.00
.technology	$25.50	$30.00
.tennis	$53.25	$64.50
.theater	$53.25	$61.50
.tienda	$53.25	$61.50
.tips	$27.00	$31.50
.tires	$99.00	$105.00
.today	$25.50	$27.00
.tours	$57.00	$61.50
.toys	$57.00	$61.50
.trading	$18.00	$19.50
.training	$34.50	$37.50
.travel	$127.50	$142.50
.university	$57.00	$60.00
.vacations	$34.50	$37.50
.vet	$37.50	$40.50
.video	$30.00	$37.50
.vin	$57.00	$61.50
.vision	$34.50	$37.50
.vote	$78.75	$90.00
.voto	$75.00	$81.00
.voyage	$53.25	$57.00
.watch	$34.50	$42.00
.works	$34.50	$37.50
.world	$34.50	$37.50
.zone	$34.50	$37.50

Click Here to Renew Now

Please do not hesitate to contact support@encirca.com if you have any questions.

Amazon’s .bot TLD Landrush ending Feb 23

Thu, 23 Feb 2023 17:00:13 GMT

Summary:

Today, Feb 23 is the last chance to register .BOT in Limited Registration Period
Eligibility during LRP requires a published software bot prior to registration
EnCirca provides free automated bot creation for every LRP registration
General Availability starts in June 2023

Today is your last chance to register a .bot domain in its Limited Registration Period (LRP). The TLD will not be accepting new registrations until it enters General Availability in June, 2023.

The recent launch of CHATgpt demonstrates that software bots will soon be pervasive in every business. Software bots are used to automate an incredible array of repetitive tasks. As more of our daily activities move online, the popularity of bots will only continue to boom. From controlling lights in your home, to tracking fitness to chatting with visitors on your ecommerce website, bots can manage all of it.

Eligibility during LRP requires a published software bot prior to registration. EnCirca provides a free automated bot creation process as part of every LRP registration. To get started, go to https://www.encirca.com/bot/

EnCirca’s President will be a panelist today on the USPTO’s Trademarks and NFT Roundtable

Tue, 24 Jan 2023 14:42:46 GMT

Tom Barrett from EnCirca will be making remarks on the virtual Trademark and NFT Roundtable being held today (January 24, 2023) by the US Patent & Trademark Office.

Three panels are scheduled today:

Technologist panel: 10:10am-11:45am
Academic and associations panel: 12:15pm-1:30pm
Brand owners and practitioners panel: 2pm-4:30pm

Barrett will be speaking during the first panel of the day and will be making three points:

The recent cryptocurrency disasters scream for regulation. But Congress should avoid passing legislation that covers both cryptocurrency and NFTs. By all means, regulate cryptocurrencies. But give NFT’s a chance at self-governance
Let history be our guide. The NFT industry will soon have their “Green Paper” moment and start self-governing itself. This includes adopting a universal trademark dispute policy and blocklists to combat trademark abuse and build consumer confidence
The USPTO has historically denied trademark registrations for potential ICANN TLDs. Now, blockchain alternative roots are proliferating but not all agree these are domain names. Instead, they often use other terms, such as usernames, handles, digital identities. Many of these will be applying to the USPTO: not necessarily to apply for a new ICANN TLD but to prevent others from applying via ICANN for colliding strings. The USPTO needs to consider carefully whether to give these applications different treatment than those for ICANN TLDs.

The public can review the agenda and listen in for free by registering here: Roundtable: Trademarks and non-fungible tokens | USPTO

April 26, 2022 DNS Outage

Tue, 26 Apr 2022 21:09:42 GMT

Preliminary Cause and Analysis Report

This morning, EnCirca's DNS Service went down for about 89 minutes. Service was restored at 7:21am EST.

The problem appears to have originated from our Anycast network vendor. EnCirca uses the internet’s largest Anycast Network provider, with 242 Points of Presence (PoPs) Internet Exchange Points.

Here is the preliminary response from our vendor about the outage: "Today we had an incident with our config manager due the logical flow error, which triggered a process that emptied out the zone configs for our auto-provisioned zones. We have fixed the config generation error and added multiple checks to avoid any similar future incidents."

We are awaiting more detailed assessment and mitigation details from our vendor regarding this outage. EnCirca will be sending another report once we have more information along with our own mitigation plan and recommendation to avoid a recurrence in the future.

.SPA is Open for General Availability

Wed, 13 Oct 2021 00:00:00 GMT

If you are in the spa and wellness industry, a .spa name is as clear as you can get in explaining and promoting your business! It instantly establishes you as a serious and professional entity and boost consumer confidence.

Not restricted to just business names, individual professionals such as spa therapists, aromatherapists, trainers etc should get a .spa name for their social media account and email.n the home

.SPA is open to everyone, not just for the spa industry!

Registration is only $30 per year

Click Here to Register

Join EnCirca for Today's Discussion on Blockchain

Fri, 24 Sep 2021 00:00:00 GMT

Today is the last day of NamesCon Online. Join EnCirca's CEO, Thomas Barrett, for today's Blockchain Panel with some of the leading alternative DNS pioneers such as Ethereum Naming Service, Butterfly Naming Service, and Polkadot Naming Service.

Blockchain Panel

Friday, 24th Sep 2021 at 09:45 AM - 10:25 AM PDT

The pace of new blockchain-only top-level domains is accelerating. Attend this panel session moderated by Thomas Barrett, Chair of the Blockchain Committee of the International Trademark Association and President of EnCirca.

Blockchain domains involve alternatives to the traditional DNS managed by ICANN. These alternative DNS frameworks include: Ethereum Naming Service, Handshake Naming Service, Butterfly Naming Service, Polkadot Naming Service and many more. Some of these strive to be complementary to the traditional DNS and some are directly competing with it.

Visit EnCirca’s virtual booth to say hello and learn more!

Join EnCirca for Today's Discussion on Handshake Domains

Thu, 23 Sep 2021 00:00:00 GMT

Today is the second day of NamesCon Online. Join EnCirca's CEO, Thomas Barrett, for today's discussion on Handshake domains.

War Stories: Handshake Pioneers Share SLD Sales and Lessons Learned for TLD Owners

Thursday, 23rd Sep 2021 at 03:50 PM - 04:20 PM PDT

As Handshake domain name registrar options increase, get ready to meet the originals! Hear how Handshake has evolved from a registrar’s perspective, and how you can capitalize on its future.

Blockchain Panel

Friday, 24th Sep 2021 at 09:45 AM - 10:25 AM PDT

Blockchain domains involve alternatives to the traditional DNS managed by ICANN. These alternative DNS frameworks include: Ethereum Naming Service, Handshake Naming Service, Butterfly Naming Service, Polkadot Naming service and many more. Some of these strive to be complementary to the traditional DNS and some are directly competing with it.

Visit EnCirca’s virtual booth to say hello and learn more!

EnCirca is at NamesCon Online

Wed, 22 Sep 2021 00:00:00 GMT

NamesCon Online is now underway. With over 1,500 domain professionals from over 60 countries, NamesCon Online is the dominant domain name conference of the year. EnCirca’s CEO, Thomas Barrett, will be hosting three seminars throughout the week starting with the first one today!

The Risks and Impacts of Name Collisions

Wednesday, 22nd Sep 2021 at 02:25 PM - 02:55 PM PDT

War Stories: Handshake Pioneers Share SLD Sales and Lessons Learned for TLD Owners

Thursday, 23rd Sep 2021 at 03:50 PM - 04:20 PM PDT

Blockchain Panel

Friday, 24th Sep 2021 at 09:45 AM - 10:25 AM PDT

Visit EnCirca’s virtual booth to say hello and learn more!

EnCirca Continues Claim Process for Bulk Transfers from MMX, Funpeas, Pheenix Registrars

Thu, 02 Sep 2021 00:00:00 GMT

Domain Owners Should File Claims Now

EnCirca has been chosen to handle the bulk transfers for Funpeas, MMX and Pheenix domain registrars.

The losing registrar data escrow files contain both public WHOIS email contacts and, if a WHOIS proxy service is in use, a matching underlying set of email contacts. However, in previous transfers, EnCirca discovered that escrow domain ownership information was missing for many of the domains. EnCirca has encountered similar data escrow issues for these latest transfers.

To mitigate this issue and to help ensure domains are released to their rightful owners, EnCirca has created a special claims process for affected domain name owners at https://www.encirca.com/transfer-claims/. Pheenix registrants can use this form to upload proof of domain ownership, such as credit card statements and Pheenix order confirmations.

What to expect if you have domains at MMX, Funpeas or Pheeniz.

If an EnCirca account does not already exist for the registrant email address, EnCirca will create a new customer account and populate it with the domains listed for the email address. Once the different registries complete the bulk transfers to EnCirca, we will send out “Welcome” emails so that you can access your transferred domains. You can always verify the transfer status to EnCirca by checking the ICANN WHOIS at https://lookup.icann.org/

We anticipate that many domains will remain unclaimed due to bounced emails or inoperable proxy services. Locating rightful owners will be problematic since the data escrow is often devoid of any identifying ownership information.

If ownership data is not evident from the data escrow file, we will rely on claims submitted via https://www.encirca.com/transfer-claims/ to allocate the unclaimed domains. To guard against fraudulent claims and other bad behavior, payment for a renewal or restore may be required to claim the domain names.

Expect to Renew Your Domains at EnCirca.

Bulk transfers do not normally involve a renewal or change of the expiration date. However, due to unpaid registry fees, registries may be processing forced renewals of the domains after the bulk transfer. Because of this, domain name owners may be required to pay for a renewal or a restore for their names. Some suspended domains may require more than one year of payment to be claimed.

Domain Owners Should Act Quickly to Claim Their Names.

The Pheenix claims period has ended for unclaimed domains. Some Funpeas and MMX domain owners may have a limited time window to claim their names as some domains are already in the post-expiration processing cycle and may be deleted within 30 days after expiration. Following deletion, names then enter the 30-day Redemption Grace Period before being dropped and released by the registry for re-registration.

In addition, the forced registry renewals may trigger post-expiration processing described above.

To start the claims process, visit https://www.encirca.com/transfer-claims/

.forever Enters One Week Sunrise Period For Trademark Owners

Mon, 26 Jul 2021 00:00:00 GMT

Blockchain's First Truly Decentralized Top-Level-Domain

BOSTON, July 26, 2021 -- EnCirca announced today that they are accepting registrations for the one-week Trademark Sunrise Period for the .forever blockchain-based Top-Level-Domain (TLD). EnCirca is the exclusive Sunrise registrar for the .forever TLD. Trademark owners have one week to submit registrations at www.encirca.com/forever before the .forever Land Rush begins on August 2. Registrations are permanent with a one-time fee and the names do not expire.

".forever overcomes several flaws that exist with other so-called decentralized TLDs such as .eth and .crypto," says Mike Carson, from Impervious, Inc., who are leading the launch of the .forever TLD. ".forever domains are the blockchain's first truly unstoppable decentralized domain names."

"EnCirca is honored to be selected as the exclusive brand protection registrar for the .forever Sunrise Period," says Tom Barrett of EnCirca. "Although the Sunrise period is only one week, the eligibility rules have been designed to ensure most trademarks are eligible to protect their brands. Both registered and unregistered trademarks are eligible, and the ICANN Trademark Clearinghouse is not involved"

All .forever Sunrise registrations will be first-come, first served. EnCirca is also accepting pre-registrations for the August 2 Land Rush, which will have other supporting resellers. Registrations are permanent and immutable with a one-time fee and do not expire.

The .forever top-level domain extension is not regulated by ICANN and thus has none of the typical benefits afforded to trademark owners, such as: UDRP and anti-cybersquatting laws.

The .forever TLD is part of the Handshake decentralized root zone, with second-level domain registrations managed via a fork of Ethereum's ENS. Since they are blockchain-based, .forever domains do not expire and cannot be deleted.

The .forever represents a significant breakthrough for achieving truly decentralized domain names.

.forever is a truly autonomous blockchain TLD

.forever's Smart Contract is not controlled by a venture-backed startup or a small group of developers.

To be a truly decentralized TLD, control of the TLD's Smart Contract needs to be provably removed, otherwise the owner of the contract could update it and pull the rug out from second-level domain owners by removing control of their domains. The .forever developers have transferred ownership of the ENS registry contract to a burn address as proof that no one owns the registry. In this way, owners of second level .forever domains do not need to trust the registry or any other third parties, because no one controls the TLD. The .forever TLD is completely out of anyone's control-it has a life of its own from now on and never expires.

.forever eliminates TLD silos by leveraging the Handshake decentralized root zone

Other so-called decentralized TLD's are considered "orphans", since they are not anchored in any root zone system.

The .forever TLD is on the Handshake decentralized root zone, an open-source movement backed by a passionate community of developers and investors. The Handshake root zone has exploded in growth with over 1,500,000 delegated TLDs. In contrast, the ICANN root zone has delegated just 0.1% of this, or 1,500 TLDs.

Another advantage of Handshake is that it removes the need to trust Certificate Authorities (CAs). Currently when you visit an https website, you must trust the issuer of the digital certificate. With Handshake, you can set up DANE, so that internet traffic to the domain can be encrypted using only DNS.

.forever is compatible with ICANN's DNS

The Handshake zone system supports the same DNS records as traditional DNS, so you can use .forever domains for websites or email. Other blockchain TLDs do not have integrations for traditional DNS records, so you can't view them in a browser, or with https.

.forever domains do not expire.

.forever registrants pay a one-time registration fee and never need to pay a renewal fee. With an existing Handshake zone file of 1.5 million (and growing) TLDs, .forever registrants can be assured that their domain will last a lifetime and longer.

So, you truly own your .forever domain, completely and forever. You can get your family name, such as McIntosh.forever and pass it down from generation to generation.

Trademark Owners Should Apply Now

The .forever Trademark Sunrise Period runs from July 26, 13:00 UTC to August 2, 13:00 UTC. EnCirca will also accept pre-registrations for the Land Rush commencing August 2, 15:00 UTC. To learn more and apply today, please visit www.encirca.com/forever.

EnCirca Tapped to Handle Bulk Transfers for Last Pheenix Registrar

Thu, 15 Jul 2021 00:00:00 GMT

Domain Owners Should File Claims Now

(Boston, MA) EnCirca announced today that it has been tapped by ICANN to handle the bulk transfers for the terminated Pheenix.com registrar. Pheenix was terminated by ICANN on May 20, 2021 for noncompliance of its ICANN contract described here: https://www.icann.org/uploads/compliance_notice/attachment/1161/hedlund-to-tran-20may21.pdf.

The Pheenix registrar data escrow file contains both public WHOIS email contacts and, if a WHOIS proxy service is in use, a matching underlying set of email contacts, In 2018, EnCirca previously handled bulk transfers of 49 other Pheenix-affiliated registrars. Back then, EnCirca discovered that Pheenix failed to properly escrow domain ownership information for many of the domains utilizing WHOIS proxy services. EnCirca has encountered similar data escrow issues for the latest Pheenix.com registrar as well.

To mitigate this issue and to help ensure domains are released to their rightful owners, EnCirca has created a special claims process for affected domain name owners at https://www.encirca.com/pheenix-claims/. Pheenix registrants can use this form to upload proof of domain ownership, such as credit card statements and Pheenix order confirmations.

What to expect if you have domains at Pheenix.

Based on the data escrow file from Iron Mountain, if an EnCirca account does not already exist for the registrant email address, EnCirca will create a new customer account and populate it with the domains listed for the email address. Once the different registries complete the bulk transfers to EnCirca, we will send out “Welcome” emails so that you can access your transferred domains. You can always verify the transfer status to EnCirca by checking the ICANN WHOIS at https://lookup.icann.org/

If ownership data is not evident from the data escrow file, we will rely on claims submitted via https://www.encirca.com/pheenix-claims/ to allocate the unclaimed domains. To guard against fraudulent claims and other bad behavior, payment for a renewal or restore may be required to claim the domain names.

Expect to Renew Your Domains at EnCirca.

Bulk transfers do not normally involve a renewal or change of the expiration date. However, due to unpaid registry fees by Pheenix, registries may be processing forced renewals of the domains after the bulk transfer. Because of this, domain name owners may be required to pay for a renewal or a restore for their names. Some suspended domains may require more than one year of payment to be claimed.

Domain Owners Should Act Quickly to Claim Their Names.

Some domain owners may have a limited time window to claim their names as some domains are already in the post-expiration processing cycle and may be deleted within 30 days after expiration. Following deletion, names then enter the 30-day Redemption Grace Period before being dropped and released by the registry for re-registration.

In addition, the forced registry renewals may trigger post-expiration processing described above.

To start the claims process, visit https://www.encirca.com/pheenix-claims/

.BOND Flash Sale until April 15th

Mon, 05 Apr 2021 00:00:00 GMT

Special Pricing: Just $8 per year

Register at https://www.encirca.com/bond/ today!

Offer for 1st year, new registrations only.
Multiple years and renewals are at regular price of $75.

.BOND – where the financial and online worlds meet.

This premium domain extension is ideal for financial service providers, advisers and investors. .BOND links clients to the experts they are looking for, reinforcing a trusted and stable financial solution. .BOND can also be used to highlight a brand’s bond to their customers, or a family’s bond to each other.

Your Guide to Handshake Crypto

Thu, 25 Mar 2021 00:00:00 GMT

Handshake takes decentralized networks and protocols to another level. With the new Handshake domains that offer outright ownership of a Handshake TLD (top-level domain), you can participate in the open naming platform with Handshake crypto. Learn about the value of Handshake coin (HNS) and how the combination of cryptocurrency and peer-to-peer root DNS management is embracing a decentralized internet.

What is Handshake?

Handshake is the latest in top-level domain naming. With Handshake TLD you’re able to own a customizable domain name with more security and no central authority. This uses a peer-to-peer system where the network participants validate domain naming and ownership, as opposed to using a CA (Central or Certificate Authority) that exists as a trusted third party.

Many internet users are realizing that CA’s can’t always be trusted due to hacking, phishing scams, and not having full ownership of TLDs. This is why influencers, brands, and other domain users can benefit from the security and full management with Handshake. You also get all of these unique features with Handshake that differs from traditional DNS (Domain Name System):

You must install or use a gateway to resolve Handshake domains
Unique naming and characters can be used in domain names
Outright ownership of names with cryptocurrency bidding
HNS - the handshake coin used for name registration
No annual TLD fees
No CAs (Certificate Authorities) that you may not trust
More security with blockchain-based protocols

When you register a Handshake domain you’re not required to include personal data, so you get respect for your privacy. You also get more security with public-key cryptography that determines the ownership of names with a blockchain protocol. This means there’s no third party who has control over your Handshake domains and you can easily verify name owners by signing messages with a private key.

By running on blockchain technology, Handshake domains resolve with blockchain browser plug-ins. The blockchain protocol includes a digital record of every web transaction that can never be erased, and this ensures tamper-proof activity. To understand blockchain a little better, it’s useful to understand it’s biggest supporter —cryptocurrency.

Handshake Crypto

Handshake utilizes blockchain for its decentralized DNS naming system and for name registration purchases. Handshake doubles down on its blockchain usage with HNS — the Handshake coin and cryptocurrency used for registering your unique TLD. To fully grasp HNS and the benefits of Handshake crypto, you should first understand the origins of cryptocurrency.

Cryptocurrency History and The Blockchain

Cryptocurrency is becoming a household name with its rise in popularity since Bitcoin’s launch in 2009. The foundation of cryptocurrency is the blockchain, which is a digital ledger of any participant’s records (blocks) and are linked using cryptography. The cryptography includes public-key encryption that validates transactions.

The blockchain was created by an unknown alias and Bitcoin creator, Satoshi Nakamoto. It originally served to provide an alternative to traditional financing by offering a decentralized digital currency. This paved the way for more cryptocurrencies to be created and other decentralized platforms, including Handshake.

Handshake mining is also similar to crypto mining. Cryptocurrency mining involves miners completing “blocks” (verified transactions) that are added to the blockchain, and these miners are rewarded with cryptocurrency. Handshake crypto mining works the same way for the person behind the computer involved in validating Handshake coin transactions.

The Purpose of Decentralized Currency

The benefit of a decentralized digital currency is that users don’t have to rely on a third party for transactions. With traditional financing, we trust banks to have some ownership of our money and handle all transactions. Satoshi identified issues with this including security risks, long processing times, errors, banking fees, and no outright ownership of your own finances.

With the goal of having a simple peer-to-peer network validating transactions, it’s just the sender and receiver of crypto that are involved in the transaction. The blockchain does the rest for you by keeping a digital record of every transaction that exists permanently and forever. The “proof-of-work” that cryptocurrency relies on enables smart contracts with participants and makes it very difficult for any aspect of the blockchain to be altered.

Blockchain technology has proven to add more security to transactions and ownership of a crypto wallet. You can now own a crypto wallet that holds different cryptocurrencies on your computer, with the crypto company itself, or with crypto wallet platforms such as Coinbase. This process can also decrease transfer costs that can typically add up with banks and other financial institutions.

Purchasing a Handshake TLD with Crypto

Now, other industries and services outside of finance are using the blockchain protocol to offer more security, usability, and other direct peer-to-peer benefits. Having cryptocurrency as the main source of obtaining a Handshake domain means that you don’t have any third party involved with the process. The Handshake protocol uses the basis of the blockchain protocol in crypto, which reduces the need for CA’s and banks.

It’s important to note that if you don’t want to get involved with cryptocurrency, you can still utilize traditional banking and payments for Handshake. Using HNS for registering domain names is perfect for those who want full control and decentralization. On the other hand, it can be more convenient and less of a learning curve if you would rather take advantage of a registrar.

HNS

The cryptocurrency used to purchase and register a Handshake domain name is called HNS. This mirrors how normal currency and cryptocurrency’s coins are 3-letter names, such as Bitcoin’s BTC or the United States’ USD. The Handshake coin price fluctuates like other currencies, and you can follow the Handshake CoinMarketCap to stay up to date on the Handshake value and Handshake crypto price.

Handshake participants use HNS to bid on domain names, which allows the community to initiate auctions. This process also prevents a sole person from owning all of the internet names. This provides the ultimate decentralized agreement of names and transactions.

You can spend and accept Handshake coins with a Handshake wallet, where you can store all of your HNS. The value of Handshake and HNS is accumulated through its network of users. By considering Metcalfe’s law, the network can take advantage of more benefits and value with an increase in the number of users in the network.

Bidding

Handshake uses the same proof-of-work layer that cryptocurrency has to enable smart contracts between participants bidding on a Handshake domain name. Once you own a Handshake TLD you’re able to sell it or trade for other TLDs. You’re able to trade HNS with a Handshake wallet or utilize a registrar to help with bidding on a domain name.

This also allows you to bid on Handshake domain names that you want but someone else already owns. Once you bid or accept an offer for buying or trading your Handshake TLD, the public-key cryptography verifies the ownership and quickly authorizes the transaction. The participants then sign a message with a unique private signature to time-stamp and verify.

You can move handshake tokens around to register for any domain name. This involves a Vickrey-style auction process where you bid without knowing the other participant’s bids. The highest bidder obtains the domain but only has to pay the amount of the second-highest bid, meaning you don’t spend more HNS than needed.

Integrating Handshake

Understanding cryptocurrency gives you a leg up when taking advantage of the functionality of Handshake DNS. Handshake crypto gives you a fully decentralized platform to create unique TLD’s with full ownership and the ability to buy and sell names. Blockchain technology is the key to achieving security with HNS and the Handshake protocol.You can still use USD and also don’t have to be tech-savvy to take advantage of Handshake. Encirca will help you register Handshake domains and provide resources on how to take full advantage of Handshake. Explore endless domain possibilities and security by registering a Handshake TLD with Encirca.

URL Availability: The Ultimate Guide to Buying a Domain

Tue, 16 Feb 2021 00:00:00 GMT

The right domain name amplifies your brand and is the most important thing you can do for your website. The URL establishes your credibility and defines your purpose.

What is a URL

URL availability depends on competition and popularity, and it’s crucial to first understand what a URL is. You should recognize that a domain is not the same as a URL — a domain is only part of the URL. A URL is the entire string of characters that identifies a web page, and it creates a map for your computer to take you where you want to go online.

A URL encompasses both an SLD (second-level domain) and a TLD (top-level domain). The SLD is in between the “www.” and “.com” TLD. For example, “google” is the SLD for the domain name www.google.com. When finding available URLs, you should mainly focus on the SLD and TLD in a domain name.

cultofweb.com

The most valuable URL will contain a strong TLD. The .com TLD is widely popular, and it’s often very affordable too. However, some businesses may want to take advantage of one of the numerous other TLD’s available. For example, a nonprofit would want to use a .org TLD and a government agency would want to use a .gov TLD.

The Importance of a Valuable URL with a Strong TLD

The TLD quickly establishes what kind of business you’re in, and sheds a light on your credibility. Most internet users would trust a .edu or .science TLD if they’re looking for qualified research topics. Customers would also rather trust a new .bank TLD knowing that it confirms a financial institution and offers high security.

The SLD portion of the domain identifies your brand. This is a great opportunity to clearly state your business name, service, and influence. It’s important to make an SLD concise and catchy, and you really don’t want it to be overly complicated.

The SLD and TLD should work hand in hand. If you’re able to purchase the most valuable SLD AND TLD, then you’re on the right track for developing a large audience and staying relevant. The domain name www.usa.gov is the clear choice compared to ww.therealusgovernment.com, providing an official government organization TLD and short and sweet SLD.

Selecting the best SLD can be extremely beneficial if a valuable TLD you wanted is taken, and vice versa. For example, you may be a toymaker with an e-commerce site that already has several competitors. It’s good to have your brand name as the SLD and ff the .com TLD is taken, then you may want to see if the .toys TLD is available. If you’re deadset on a certain TLD, then you may have to pluralize your SLD name or abbreviate. Domain name availability is not always a sure thing, but you can certainly get creative and use numerous combinations to check to see if domain name is available.

Find URL Availability

It can often feel like a chore making sure that your brand is properly represented online. The Encirca Domain Management Tool makes it easy to search for available TLD’s and get the domain name you want. If you’re still wondering how to check if a URL is available or need assistance buying a URL that is already taken, you also have access to a helpful Domain Agent.

How to see if a domain name is available:

Enter your desired domain name in the search bar on our home page to see if it’s available
Our domain search tool will quickly show you what’s available and suggest valuable alternatives
Add your chosen domain name to your cart and checkout
During checkout, you can select the duration of your domain ownership
Sign up or log in for access to the Domain Manager tool
Use the Domain Manager to manage your portfolio and domains

If you’re stuck on domain name availability because the name you want is taken, then a Domain Agent can help. You may be dedicated to this URL because it offers value to your brand, so a domain agent will contact the present domain owner and negotiate a deal. There’s a good chance you can still end up with the URL you want after all.

Buying a URL

To gain access to URL availability and purchase a domain name, an accredited domain name registrar supports your goals. Before committing to a full domain name you can discover transparent prices for TLDs that you’re interested in. You can easily compare TLD prices and find the best value for your brand.

The domain pricing tool lists every possible TLD alongside four important costs:

Regular
Renew
Transfer
Restore

If SLD importance was on the top of your list, then you probably already used our domain search tool on the Encirca home page. Once you’ve checked the URL availability and found the right domain name for your needs, you can buy a URL in a snap. Just add the domain name to your cart and check out.

Get the URL You Want Today

A valuable URL is a powerful tool for your brand that establishes relevance and credibility. It’s comforting to know that Domain Agents are dedicated to getting you the domain that’s best for your website, and there are a ton of transparent resources and costs for you to discover. Once you explore URL availability and land that high-value domain name, you’ll be seeing a massive amount of visitors and conversions in no time.

Ready to take advantage of the benefits of a domain name registrar? Contact us to find URL availability and domain support.[/et_pb_row][/et_pb_section]

Prevent Phishing Attacks Before Your Organization is on the Line

Wed, 10 Feb 2021 00:00:00 GMT

Phishing remains one of the most prevalent cyber attacks directed at both companies and individuals today, but many organizations do not have effective strategies in place to identify or prevent such attacks. And prevention is increasingly critical as more and more employees shift to remote-working arrangements in response to COVID-19.

The biggest problem is the fact that many employees today still do not understand what a phishing attack looks like, or how to properly handle one they do identify. Accordingly, successful corporate cybersecurity programs must include targeted training for employees.

Fortunately, a wide variety of anti-phishing strategies are available to help organizations and their employees protect against phishing attacks. That’s what we’re going to discuss today.

Phishing is getting more sophisticated

Industry sources attribute as many as 93% of cyber attacks to various types of phishing

Phishing has been a popular hacker tool for nearly thirty years, and hackers have continually improved their phishing methods while also skillfully avoiding detection.

The vast majority of phishing attacks still rely on email, but increasingly phishing occurs via telephone (vishing), text messages (smishing) and social media. Regardless of the medium, phishing attacks all share common features: namely, they attempt to cause a user to engage with harmful content, such as a malicious link or attachment.

A new trend of some concern is that teaching others to phish has now become a lucrative business. Phishing kits, which provide a would-be hacker with the tools they need to launch attacks, have become widely available and contributed to increasing the number of both attackers and attacks. Hackers are also now using artificial intelligence and machine learning to refine their methods allowing attackers to more closely tailor their attacks to an individual, increasing their chances of success.

One thing is certain: hackers will use every tool available to them. To prevail, organizations must do the same.

Train employees to recognize phishing attacks

What are some of the key indicators that your organization is the subject of a phishing attack? This is a question that every employee should be able to easily answer.

Among some of the most common indicators of phishing are:

Impersonal greetings in emails (e.g. “Dear customer”)
Masked or spoofed email addresses
Compressed (zipped) email attachments
Noticeable errors in spelling or grammar
Unusual or gaudy formatting
Threats of actions such as collection

While none of these factors alone indicates a phishing attack, employees should view such emails with a higher degree of care. For example, employees can be trained to check the sender’s actual email address rather than simply what they see at first glance.

Successful training needs be neither costly nor overly time-consuming, since the benefits of effective training will far outweigh any costs.

Keeping phishing attacks from reaching your employees

The list of available tools for stopping phishing attacks is extensive. At a minimum, prudent organizations will consider the following:

Continuously update your software

Always ensure that the code for any applications or software your employees use are continuously updated with continuous integration and delivery (CI/CD) practices. As discussed in detail by Cloud Defense, this includes implementing automated security tools, changing coding configuration, and fixing bugs that hackers can exploit.

CI/CD has long been implemented as a means to not only address business requirements, but also as a means to implement new security features and guard against phishing schemes, malware, and DDoS attacks.

Employ spam filters

Email is still the primary vehicle for phishing attacks, so one of the first lines of defense is to prevent harmful emails from reaching end users. Spam filters scan email for indications of unreliability to minimize the amount of problematic email that reaches an end user, but they are often ineffective because they are poorly implemented.

Worse yet, employee access to spam filters allows employees to click on dangerous links or open suspect attachments. To avoid this, companies often use multiple layers of filters or supplement existing spam filters with additional filtering software. A well-implemented spam filter is a good first-line defense against phishing.

Authenticate email senders

Many phishing attacks are successful because they appear to come from known sources as a result of email spoofing. A cybersecurity strategy that includes implementation of a

Domain-based Message Authentication, Reporting and Conformance (DMARC) protocol can limit the ability of hackers to spoof email addresses.

Essentially DMARC tells an email recipient that the sender’s domain is protected and asks the client to authenticate using a specific authentication protocol. If the authentication process fails, the email is rejected.

Use phishing filters for internet activity

Users can also unwittingly spawn phishing attacks by opening links that allow malicious software to infiltrate their systems. Internet phishing filters prevent attacks by analyzing links for indications of unreliability or checking links against site blacklists to prevent users from accessing malicious sites.

Run phishing simulations

Simulating phishing attacks can be effective to both identify vulnerabilities and train employees to recognize potential threats. In a phishing simulation, employees are sent emails designed to check their tendency to click on harmful links or open questionable attachments. The emails and the results of the simulations can then be used to design training programs for employees.

But be careful! Poor simulation design can negatively impact employee morale - just as happened when one company offered fake holiday bonuses for clicking on an email link.

Use virtual private networks

While a virtual private network (VPN) will not help eliminate phishing emails, it provides a desirable added layer of security, especially for remote workers. By encrypting data and routing traffic through protected private servers, VPNs help prevent hackers from accessing the connection between remote workers and sensitive corporate systems and data.

Not all VPNs are created equal, however. According to Toronto-based cybersecurity analyst Ludovic Rembert of Privacy Canada, some VPNs will actively work to collect and then sell your data to third parties.

As Rembert explains in his analysis of inexpensive VPNs available on the market, “Be very careful when choosing your VPN. There are lots who are working with Chinese-owned companies, in order to sell-off your data. Others install malware, in order to actually steal your private information.”

The good news is that there are a wide array of effective and yet inexpensive VPN solutions available in the marketplace that are highly reputable. Requiring all remote employees to utilize a VPN service when accessing company data or using a public network is a good idea, so long as you are strategic about the specific VPN that you use.

Secure your domain names

Remote employees also create substantial opportunities for hackers to infiltrate company websites and hijack or misuse company domains. A hacker who is able to change the owner of a domain can cause substantial damage. An effective cybersecurity program will therefore also include protections against domain name hijacking.

Keep up to date with prevention efforts

Some of the most promising developments in the identification and prevention of phishing attacks come from the use of artificial intelligence (AI) and machine learning. Many spam and phishing filters now use AI to train malware identification algorithms. Any effective cybersecurity strategy will evolve as the available technology advances.

These are only a few of the available methods in the fight against phishing. A prudent organization will select the methods (among these or others) that are most well-adapted to their particular systems and structures.

Conclusion

While phishing remains a significant security threat to organizations today, there is much that can be done to minimize the risk of an attack. Successful phishing prevention requires implementing a comprehensive, multi-faceted cybersecurity program that includes frequent auditing and testing.

Substantial employee engagement and training will further enhance an organization’s efforts to thwart cyber attacks. With diligence and focus (and a little help from cybersecurity experts), your organization can ensure that a hacker can phish all day long without catching anything.

To learn more, visit www.encirca.com or contact support@encirca.com

About the Author:

Samuel Bocetta

Samuel Bocetta is a former security analyst for the DoD, having spent 30-plus years bolstering cyber defenses for the Navy. He is now semi-retired and educates the public about security and privacy technology. Much of his work involved penetration testing Navy ballistic systems. He analyzed networks looking for entry points, then created security-vulnerability assessments based on findings. He also helped plan, manage and execute sophisticated “ethical” hacking exercises to identify vulnerabilities and reduce the risk posture of enterprise systems.[/et_pb_row][/et_pb_section]

How to Own Your Domain Name Forever

Thu, 04 Feb 2021 00:00:00 GMT

Choosing a domain is one of the most important business decisions you can make as an entrepreneur.

This is not something that you can skimp on. To give your business the best possible chance of success, you need a domain that encompases your brand, that’s easy to both spell and remember, and that tells your audience everything they need to know about who you are and what you do in a single word or phrase.

Your domain is essentially real estate. It’s your four acres in the great landscape of the internet. It’s a raised flag that says “look out world, I’m here, and this is who I am.”

In the same way that a person’s home is their castle, your domain is the home and resting place of your business.

So it makes sense that you’d want to keep your domain forever, right?

Turns out, it’s unfortunately not as simple as all that. While we all like to think we own our domains, the truth is actually much more complicated.

We’ll take a look at what a domain name is, what happens when you register a domain name, and who actually owns your domain. Read to the end, and you’ll learn how you can own the domain name of your choice forever.

What is a Domain Name?

In the same way that no two people are alike, computers each have their own identity. The internet is essentially a giant network of computers linked together. Your computer’s identity in that network is encapsulated in its IP address.

When you register a website and make it available for public use, your IP address is tied to a domain name: your websites' signifier as an individual in that network.

You typically get a domain name by buying it from a registrar. You can also use a web hosting service that will provide you with a domain name, along with a suite of tools to make your website usable and secure.

However, you can’t just buy any domain name. It needs to be currently available - not taken or currently in use by anyone else.

A Brief History of the Domain Name System

To understand the concept of modern domain name ownership, it might be helpful to first understand where the naming system for websites came from in the first place.

Before the internet as we know it today existed, we had something called ARPANET in the 1960's. This was the first attempt at computer networking, and was the precursor to the Internet.

ARPANET was celebrated as a big technological achievement that helped rival the launch of the Sputnik 1 satelite by the Soviet Union, but came with severe limitations. In the days of ARPANET, you had to memorize the IP address of every computer you wanted to message or send files to.

This was not a sustainable system. As computer networking became widespread throughout North America, Europe, Asia and South America, both computer ownership and computer networking grew to the point where the current naming-system was no longer a feasible option. Another solution had to be put in place.

That’s when computer scientists Jon Postel, Paul Mockapetris and Craig Partrige came together to create what we know today as the DNS system in 1983. The DNS nomenclature made use of names “IBM, EnCrica, Softonic etc.” and categories which identify a domain’s purpose e.g. .com.

The DNS system translates the names of websites into a matching computer IP address and then locates the matching address. Essentially, it’s a giant phonebook of everything on the internet. Without it, you would have to memorize individual IP addresses like you did in the days of ARPANET.

The first .com registration was filed in 1985 by Symbolics Inc. From 1995 onward, domain names were no longer free, and domains started at $100 for a two-year registration.

This led to the privitazation of the DNS system in 1998. Prior to that, domain name registration was regulated by the US Government. President Bill Clinton called for the internet to be privatized to encourage competition and incentivize international participation in the internet.

The US Department of Commerce published a document called The Green Paper, which proposed ways to privatize the management of internet names. This document later led to the creation of ICANN to facilitate this proposal. ICANN monitors the DNS to this day.

The modern DNS was a creative solution to a problem and a vast improvement on what came before, and for that it's a huge achievement in the history of the modern internet. However it’s by no means perfect. When you account for what the internet is like today and some of the flaws of the DNS system, you begin to see that it’s deeply flawed and needs to be updated with something else.

For one thing, when Mockapetris and company created the DNS nomenclature, he accounted for the creation of maybe 50 million domains. He didn’t foresee that the internet would grow to its current size and scale of 330.6 million domains as of today.

Not only that, the DNS is also prone to security vulnerabilities such as Denial of Service Attacks and spoofing.

The traditional DNS system is outdated and needs to be replaced with a better system. But we’ll get more into that later.

How Much Does a Domain Name Cost, and How Long do I Own it For?

Domains are generally inexpensive. A domain will generally run you between $2 to $20 per year - and they scale in price the more recently they’re brought to market.

You can register domains on a yearly basis. Many domain registrars will allow you to buy domains for up to 10 years at a time.

Once your domain name expires, it’s set up for auction on the registrar where it can be bought by someone else. It can also be taken by cybersquatters - bad actors who wait for domains to expire, purchase them the moment they do, and flip them at a profit.

That’s why it’s important that you keep your domain name registry up to date so that you don’t set yourself up to be hurt.

There are some ways you can extend your domain name ownership without risking losing your domain, if you know how.

Can I Own a Domain Outright?

The short answer is no.

The longer answer is no - at least, not until recently.

The current Domain Name System is centralized and maintained by one of a number of domain name registrars contracted by ICANN, the International Corporation for Assigned Names and numbers.

The price of your domain is artificially regulated. There are a number of stated reasons why domain name ownership and regulation is centralized.

The cost of a domain increases with a company's growth. As the company and its website grows, the operational costs of maintaining a domain increase - making sure that the website on the domain is stable and secure enough for people to visit it without crashing or being hacked.

A registry needs to account for the growth of a domain by increasing the cost of a registry fee. Essentially, the current domain name registration system regulates the ownership of domains in the same way that the Federal Reserve regulates the flow of money in and out of the national economy to prevent recessions and economic crashes.

That’s all well and good. But the upshot of all that is that you don’t truly own your domain name. You just rent it from the registrar.

It’s similar to renting an apartment. Rather than owning your apartment, you lease it for a month or number of months at a time from your landlord.

While there are good reasons why that might be the case, the downside is that registrars and the organizations that manage them such as ICANN can delete or take away your domain name at will, for any reason.

Uncertainty is never a good place for your business to be in. What if your website were to be taken away? You would lose a good chunk of your revenue and your audience. If your business is all virtual and has no brick-and-mortar storefront, such an event could ruin you.

There are a couple of ways you can continue to keep ownership of your domain indefinitely while working through the traditional DNS system. We’ll outline a couple of them below:

Method 1 - Renew Your Domain Name Continuously

Step 1: Purchase your domain name from a domain name registrar such as EnCirca

Step 2: Write down the exact date you purchased your domain. Rather than writing it down on a piece of paper where it could get lost or thrown in the trash on accident, it may be better to write it down on an electronic calendar or reminder system such as Google Calendar, Google Keep or ToDoist.

Step 3: Your domain expires exactly one year after you purchase it. Wait until your domain is about a month away from expiring. Once that happens, login to your domain manager with the username and password you made when you bought your domain.

Step 4: Renew your domain within your domain manager tool. Many domain name registrars let you set up recurring payments for your domain name registration - so that the cost of your registration is deducted from your credit card every year.

That’s the old way of holding onto your domain name for as long as you want. However, as of now, there is a way you can own your domain name forever, without going through the traditional DNS system.

Introducing Handshake Domains - Own Your Domain Forever

The current system of domain name ownership is deeply flawed. It’s rooted in anti-consumer practice and its prohibitive for small businesses and websites trying to establish themselves.

That’s why EnCirca is now introducing Handshake domains: a domain you can buy, keep, and own forever - with no tricks or caveats.

A handshake domain is a decentralized domain name system that’s powered by blockchain technology. Similar to how Bitcoins are valued in money, Handshake coins are valued in domain name ownership.

Using the traditional domain name system, you can only rent domains for a pre-set amount of time. Handshake domains, meanwhile, provide true ownership because they’re decentralized and not regulated by organizations like ICANN. Once you own a Handshake domain, you can keep it for life. You own your Handshake domains forever.

It’s important to note that Handshake domains are new and in the experimental phase. They don’t resolve on the DNS and won’t render on the client-side browser without a special plugin.

Benefits of Handshake Domains

True Ownership

Your website’s domain is actually controlled by centralized organizations such as ICANN who can take them back at will. The decentralized nature of handshake domains means that you get to keep them for life, free of ICANN or other gatekeepers who would merely lend them to you.

There are numerous other benefits to Handshake domains now that relate to its decentralized nature. For example, the fact that you have true ownership means that you have no yearly rental fees.

Normally you’d have to submit a biennial mining fee to keep the domain active, but the handshake protocol does this for you.

Endless Top Level Domains

The entire root domain system where Top-Level Domain ownership is stored is controlled by a single entity - ICANN. The root zone is where all information regarding Top-Level Domain ownership is recorded. This artificially restricts the availability of domains for website owners.

Not so with Handshake domains, which allow you to make your domain name literally anything. That includes domain names made from Chinese or Cyrillic characters.

EnCirca supports a number of Handshake domains including .CONSULTANCY, .ECONOMY, .HIRE and .STARTUP. Get creative. Find a TLD and domain name combination that works best for you and your business.

Private and Secure

Another pitfall of the centralized nature of the DNS is that it compromises your website’s security, as well as the privacy of your own personal browsing behavior. A centralized internet means that governments can censor websites through DNS filtering, as indeed is currently the case in the United States, Russia and China.

It’s not just governments at play either. Bad actors can spy on your browsing activity this way - even those posing as legitimate institutions. Certificate authorities often compromise the security of SSL certificates - a signal to Google that your website is safe to use and free from cyberattacks or phishing schemes - by issuing bad certificates and cooperating with governments to spy on your website’s traffic.

Not so with Handshake. The Handshake domain system respects your privacy by not requiring personal data during encryption. There is no annual fee to keep your information private, which means people can’t find your personal information with a WHOIS lookup.

Conclusion

The modern DNS system was a necessary solution for a problem it solved in its time, but it no longer rThe domain name you put your heart and soul into renting and maintaining could be taken from you in one of a number of ways. It’s in your best interests as a business owner to have a domain you can keep indefinitely.

The future of the internet is decentralized. Handshake domains allow you to own your domain outright with no yearly fees. Register a handshake domain with EnCirca and be a part of the next iteration of the internet.[/et_pb_row][/et_pb_section]

How To Protect Your Organization From Hackers Creating Look Alike Domain Registrations

Fri, 04 Dec 2020 00:00:00 GMT

Domain spoofing is an increasingly popular way for hackers to steal money or sensitive data. Look-alike domain registrations aim to divert online traffic to your website and redirect unsuspecting consumers to websites that contain malware, or prompt users to provide personal identifying information (PII).

Spoofed domains are commonly used in email spear-phishing campaigns. Cyber criminals, disguised as reputable businesses, can then target people with emails that prompt the recipient to click a link or respond with sensitive information. These tactics are increasing and show no signs of going away. Each year, nearly $3 billion are lost due to phishing attacks and network intrusions.

In this article, we will discuss the prevalence of look-alike domain registrations, how they are used to engage in cyber crimes, and how these hackers avoid detection.

We’ll also discuss how you can proactively protect your company from these harmful incidents, and touch upon how using AI and a cyber aware workforce can give you an extra touch of protection.

1 - How domain dupers can ruin your brand’s reputation

If you think your clients will be able to easily detect a copycat website or spear-phishing email, you’re most likely wrong. Even highly established corporations have fallen prey to these common tactics. Late last year hackers were easily able to steal $1 million from a Chinese venture capital firm by using domain spoofing and spear-phishing.

They achieved this by registering a domain that was identical to that of the firm, except with an additional “s” at the end. They then did the same thing for an Israeli startup the firm was looking to invest in by sending spear-phishing emails from both spoofed accounts. They were able to hijack the entire conversation and adjust the bank details for the financial transaction to ensure the funds landed in their own bank account.

To make matters worse, companies are increasingly being held accountable simply for neglecting to prioritize domain spoofing as a security concern. For example, in late 2018 British Airways was fined $230 million after cyber criminals diverted hundreds of thousands of customers to a fake website and used this to steal personal information.

2 - How to protect yourself from hackers creating look-alike domain registrations

It’s not always easy for even the most experienced cyber security expert to quickly detect and mitigate copycat domain registrations. Spoofed domains are increasingly looking more legitimate through using SSL certificates. For this reason, TLS certificates are often preferred by internet users, although granted they are far from being foolproof.

The total number of new domain name registrations grew to 370 million in 2020, so it’s not always possible to keep track of those that might be looking to spoof your own website. For this reason, many cybersecurity teams rely on automated features or tools that utilize artificial intelligence.

With 78% of business owners agreeing that artificial intelligence will have the greatest impact on the security of data in the future, it’s important to make sure that you can utilize this to your benefit. With emerging online brand protection tools that leverage AI, programs can parse through troves of data online to identify and take action when possible threats are perceived.

Because of the variety of ways in which hackers can create spoofed domains and wreak havoc, many cyber security experts recommend defensive domains as the best protective measure against hacking. This term refers to the practice of purchasing domain names similar to your website’s URL address to proactively prevent hackers who want to mislead your customers.

Your cyber security expert should also know that TLD (Top Level Domain) zone files contain a list of each domain registered for that exact TLD. Through the use of queries, your team can search for websites with similar names or keywords to determine if any are trying to spoof your company.

Furthermore, if the domain you have was purchased from a third party or intermediary who dealt with the ICANN on your behalf, this additional surface area can actually make your domain more likely to fall victim to cyber crime. Instead, see accreditation with the ICANN directly.

3 - Prevent email spear-phishing attacks through the proper tools

There are several measures that you can take to shield your organization from possible spear phishing attacks. The most important thing to do is to automate your security whenever possible. Just like your cyber security team may use automated testing for written code, there are programs such as Dynamic Application Security Testing tools that your company can use to automate the process of scanning for vulnerabilities while your various applications are running.

It’s also recommended that companies use DMARC, or Domain-based Message Authentication, Reporting and Conformance. This is an authentication protocol that prevents domains from being utilized to launch a phishing campaign.

This can be highly valuable, especially when you take into consideration that many email attacks are now launched from close-cousin domains. DMARC’s use is still quite limited as it only protects from spear-phishing email campaigns. It will do little to nothing to stop domain-spoofing incidents not involving email.

It’s also vital for your company or organization to ensure that all employees and contractors are cyber aware, as they can be the weakest links in terms of cyber security. Business email compromise attacks (BEC) entice people to reveal PII or click links in spear-phishing attacks. Hold regular training for all employees that remind them to always check the email address before opening an email.

Finally, employees should be mindful that a frequent contact will be recognized by name in your email system rather than displaying their full email address in the message, which can be a red flag. The best practice to avoid this is to install a virtual private network (VPN) to encrypt your internet connection.

Doing so will mask your IP address and conceal any data you store or transfer online. Just make sure that any VPN you use comes with L2TP or IKEv2 encryption protocols, which are far more effective than PPTP protocols. In addition to preventing phishing attacks, VPNs with these kinds of strong encryption measures can stop other common email threats such as typo-squatting or ransomware.

Conclusion

With the large amount of potential damage that can be done with copycat domain names, it’s important for businesses to stay on top of these schemes if they want to protect revenue and reputation.

The good news is that with a little bit of vigilance, a cyber aware workforce and the help of some AI or automated cyber security tools, your company can stay on top of the fakes. That way, you can focus on what really matters: building your business.

To learn more, visit www.encirca.com or contact support@encirca.com

About the Author:

Samuel Bocetta

Credit Union Website Hosting: How to Make it Work For You

Sun, 22 Nov 2020 00:00:00 GMT

When someone opens an account with a financial institution, they’re essentially putting their future and financial safety in their hands.

During the 2008 recession, people’s trust in banks were permanently damaged when they lost their life savings and retirement funds overnight. Banks are now fighting an uphill battle to regain the trust of the American people.

So then, what’s the alternative? Stuff your money under your mattress? Instead, many people have turned to credit unions as an alternative place to store their hard-earned money. Credit unions are growing at five times the rate of population growth year-over-year in the United States.

How can your credit union capitalize on that growth? A good way to start is with your web presence. It’s highly likely that anyone wishing to join your credit union will be searching for you online before opening an account to read reviews and compare you to your competitors.

Opening an account with an institution is a decision that requires a fair amount of trust. When they open an account, your members are entrusting that you won’t misuse their hard earned savings.

Hosting your credit union website on a .creditunion domain is a good way to stand out from the crowd and indicate to any potential members that they can trust you as a bona fide credit union.

What is a credit union?

A credit is a non-profit financial institution. They offer many of the same financial services as banks such as loans and checking and savings accounts, but they differ on an important principle. Credit unions are owned by their members, unlike commercial banks which are owned by their stakeholders.

Credit unions are cooperatives that operate on the principle of “people helping people.”

Credit unions are cooperatives. They work according to the principles of volunteerism, mutual aid, and democracy. Each member has an equal say in how the credit union is run based on the Seven Cooperative Principles:

Voluntary and open membership
Democratic member control
Member economic participation
Autonomy and independence
Financial education, training, and information
Cooperation among cooperatives
Concern for the community

What is a .creditunion domain?

.creditunion is a specialized generic top-level domain (gTLD). It’s reserved strictly for credit unions, and the businesses or organizations which support them. It’s one of a number of domains that support a secure environment for financial institution web hosting, such as widely popular .bank domain name.

The .creditunion domain is a recently-created TLD under the new gTLD program made by the Internet Corporation for Assigned Names and Numbers (ICANN). It’s one of 1,507 TLDs in the Internet’s domain name system (DNS). It was created in 2015 and made available for use in 2017.

The process to become a .creditunion domain name registrar requires an emphasized level of security. There are only sixteen certified .creditunion domain registrars in the world, of which EnCirca is one.

The .creditunion domain is financially supported by the CUNA Mutual Group and Co-Op Financial Services.

CUNA is the main trade organization serving America’s credit unions. It provides products and services to 7,300 state and federally chartered credit unions nationwide.

The benefits of hosting your credit union website on a .creditunion domain?

Hosting your credit union website on a .com or a .org is what most people would generally expect. However, having a .creditunion domain gives your credit union several noteworthy advantages.

Branding: Anyone considering opening an account at your credit union can look at your website and instantly identify you as such. It signals that you uphold the values of a credit union, and that you serve your members, not corporate stakeholders.
Security: Because of the rigid eligibility requirements for .creditunion domains, your website is granted an extra layer of security as a defense against cyber attacks, phishing scams. Your members will be reassured that your credit union website is secure.
Legitimacy: Credit unions, or affiliations of credit unions, are the only entities allowed to use the .creditunion domain. People who are searching for your credit union will know that they can trust the website they’re visiting.

Can my credit union website be hosted on a .creditunion domain?

Only select forms of institutions are eligible for a .creditunion domain, but thankfully the actual verification process is relatively straightforward.

To register for a .creditunion domain, you have to prove that your institution is a credit union with a physical office in the United States. You also have to maintain your status as a credit union throughout the time you have a .creditunion domain registered.[/et_pb_row](https://www.cuna.org/registry/). You then have to provide:

The legal name of your credit union
Your name
Your address
Your email address
Your phone number
Your CUID or charter number

Register your .CREDITUNION domain at EnCirca

EnCirca is one of the select few domain name registrars worldwide that is certified to handle .creditunion domains. When you host your credit union website on EnCirca, you solidify your credit union’s online brand and will have access to a suite of credit union web design and security tools. Your members can do business with confidence that their savings are safe and secure.

Credit union domains at EnCirca are open for registration on a first-come, first-serve basis. You can register or renew your .creditunion website for $150 per year.

Your credit union also has access to a number of secure web hosting solutions. EnCirca’s hosting solutions have been customized to support the needs of high security institutions and their domains such as .creditunion, .bank and .insurance TLDs.

Host your credit union website with EnCirca today, and give your credit union the best chance of success.

Handshake DNS vs Traditional DNS

Wed, 18 Nov 2020 00:00:00 GMT

The world of top-level domains is changing, and Handshake is shaping this world into a decentralized territory. If you’ve been seeking more security and personal control over your web pages, then Handshake is about to shake things up.

The New Handshake TLD

Traditional DNS has been the single trust root for securing the internet. Now with Handshake, there’s an alternative to traditional DNS for a more collaborative decentralized network. Anyone who wants the ultimate freedom for domain extensions, outright ownership of a TLD (top-level domain), and the removal of a Certificate Authority system should look into getting a Handshake TLD.

DNS Hierarchy

The rightmost part of a domain name is the Top Level Domain (TLD), such as .com or .org. TLDs on a DNS server exist as these commonly known letters, and creating your own unique TLD with DNS is a long and expensive process. With a Handshake TLD, you’re able to potentially create any name you can imagine.

For example, some Handshake TLDs that you can use with Encirca include:

.INFLUENCER
.ECONOMY
.TECH
.HIRE
.STARTUP

Handshake was created with this freedom in mind. Handshake began as a piece of software that serves to have a decentralized base layer of the internet, compared to DNS that has become more centralized since the 1990’s. With the Handshake software comes the Handshake TLD — the naming system powered by users and Handshake crypto.

How Handshake DNS Differs From Traditional DNS

DNS is what we’ve come to know when it comes to communication between domain names and numerical IP addresses, allowing for a seamless translation for computers to understand. Traditional DNS takes advantage of communication protocols for the world wide web’s user-friendly navigation as well as email connection. The internet simply relies on DNS services for hosting information and validating communication.[/et_pb_row]*Here’s what makes Handshake DNS different:*

More security with blockchain-based protocols
No CAs (Certificate Authorities) that you may not trust
No annual TLD fees
HNS - the handshake coin used for name registration
Outright ownership of names with cryptocurrency bidding
Unique naming and characters can be used in domain names
You must install or use a gateway to resolve Handshake domains

[/et_pb_row](images/blockchain-privacy-1024x575.png)

Handshake Has Privacy Built In

Handshake is an experimental peer-to-peer root DNS. It’s also a blockchain protocol, which means it uses a digital record of web transactions to log tamper-proof activity. Blockchains are also used for recording the transactions that are made with cryptocurrencies, and Handshake takes advantage of crypto for seamless and secure domain naming distribution.

With traditional DNS, we trust CAs (Certificate Authorities) which are third parties that verify and authenticate websites. CAs are used to prevent MITM (Man in the Middle) attacks that can inspect or modify secure data. Websites are HTTPS registered with a private key and public key that verifies signatures, and this is verified by CAs.

The main differentiating features of Handshake compared to traditional DNS is its ability to use similar cryptocurrency blockchain protocols rather than trusting CAs. This is what ultimately makes Handshake more secure and decentralized. Data stored with blockchains are unchanging and verified by all parties, and Bitcoin is a popular example that runs on blockchain technology.

Handshake Crypto

Another primary function of Handshake is having people agree on names and cryptographic keys in a decentralized manner. This is done by preventing single parties from owning all the internet names under one account. HNS (handshake coin) is the coin system that participants use to bid on names, and therefore uses the community to initiate auctions and an incentive design.

When thinking of cryptocurrency like Bitcoin, the benefit is it’s extravagant store of value. Handshake on the other hand accumulates value from the network of users, relying on concepts of Metcalfe’s law to initiate more use for more benefits for all. Similar to bitcoin you have a Handshake wallet that lets you spend and accept coins, and you can also find the HNS value under Handshake CoinMarketCap (price-tracking for cryptoassets).

Unique Naming

After you use HNS to bid on a name or obtain one with a registrar, you have full ownership that no other entity can take away from you. This also means no annual payments to keep a TLD. Rather than renting a limited number of extension TLDs, you can just renew Handshake names biannually.

Handshake also allows trademark holders to gain early access during the “sunrise period” to claim their own trademarked names. You can even use special characters and virtually any name you think of when registering an internet name. This is unheard of with traditional DNS where domain naming is much more limited, and now you can create unlimited domain names under your Handshake TLD.

Accessing Handshake Manually

If you try to type in a known Handshake domain name on a traditional DNS server, you’re not going to have much luck. Until browsers implement Handshake into their software, you must use a plugin to access Handshake websites. Resolving Handshake domains can include web add-ons, extensions, and DNS settings.

Setting up and installing everything you need to access Handshake manually typically involves an understanding of blockchains and plenty of technical jargon. While setting up Handshake with cryptographic blockchains is rather complicated for some people, Encirca makes it easy without using fancy blockchain interfaces. When obtaining a Handshake TLD with Encirca, you can access your Handshake domain names for free with NextDNS.

Owning A Handshake Domain

By owning the name via Handshake, you own the TLD along with the SLD (second-level domain), which is the text right before the TLD. This gives you full distribution of your own registered name for others to create SLD’s with it. You have more freedom with this ability combined with the Handshake blockchain protocol.

Blockchain technology reduces the need for banks as the middleman since the protocol has proven to be highly secure and decreases the cost of transfers. The PoW (proof-of-work) that the blockchain utilizes is similar to Bitcoin’s naming capabilities. The proof-of-work protocol is the layer that enables smart contracts for the Handshake domain name auction system.

The ownership of Handshake names is determined with public-key cryptography. This makes it simple to verify owners of names by having them sign a message along with their private key. This is ultimately how a traditional DNS centralized system becomes obsolete, or at least how the third-party controlled root zone file of DNS is replaced.

An Attainable Handshake With Encirca

Handshake is an ambitious plan to reinvent the wheel and make website naming a decentralized peer-to-peer system. The domains under a Handshake DNS rather than a traditional DNS can benefit from full ownership, better security, and a blockchain protocol. Modern and limitless digital capabilities are at your fingertips by implementing Handshake.

Gain respect for your privacy and get easy access to Handshake by registering a Handshake TLD with Encirca. Encirca also allows you to take advantage of Handshake TLDs without paying with crypto-currency and using blockchain interfaces. You’ll be ahead of the game for the future of DNS and the internet.[/et_pb_row][/et_pb_section]

How to Register a .BANK Domain? All You Need to Know

Thu, 29 Oct 2020 00:00:00 GMT

With cybercrime and data breaches on the rise, a top-level .BANK domain can give your financial institution an edge in online security. Offering superior protection against phishing attacks and spoofing, the .BANK domain is now the gold standard for online banking — helping financial institutions to differentiate their services and inspire greater consumer trust.

Moving to a .BANK domain may seem daunting at first, but as many banks have discovered, the enhanced security benefits and consumer confidence can outweigh the nominal costs of registering and migration.

To help decide if a .BANK domain is right for your organization, here’s a closer look at the security features of a .BANK domain, and how to get started with a .BANK domain registration.

What is a .BANK domain?

A .BANK domain is like other top-level domains (such as .com, .net, or .gov) but only for the banking industry. Created in 2014 and operated by fTLD Registry Services, LLC, .BANK offers extra security to assist banks in creating a safer and easily recognizable space on the web. Besides being more secure, a .BANK domain is a unique marketing opportunity for banks looking to differentiate their offerings.

In order to to be eligible for a .BANK domain registration, your organization must be one of the following registered entities:

Retail bank
Savings association
National bank
Bank holding or parent company

While credit unions and credit associations cannot register a .BANK domain, they can offer their customers a secure online experience with a .CREDITUNION domain. And, for businesses that operate as cooperatives, registering a .COOP domain can help raise their online profile.

What are the advantages of registering a .BANK domain?

Online financial services is one of the biggest targets for cybercriminals. It’s far too easy for these criminals to get .com and .net domains to create lookalike websites where they can launch phishing and spoofing attacks against customers. In an age where data breaches are costly both financially and reputation-wise, .BANK gives you security advantages that no other domain can.

The three key security advantages of registering a .BANK domain:

**A .**BANK domain prevents spoofing. Unlike .com or .net, a .BANK domain is a verified location for your bank’s online services. The industry-regulated process required to register a .BANK domain makes it virtually impossible for an impostor to get a .BANK address and spoof a website.
**A .**BANK domain prevents phishing. Communications sent from .BANK domain have built-in security features to prevent phishing and spoofing. This means you can communicate with your customers with the guarantee that messages are authentically from your bank.
**A .**BANK domain instills greater trust. The .BANK symbol is an instantly recognizable and visually reassuring “online stamp of trust.” Any time a customer visits a .BANK website, they know they’re communicating and transacting with a verified bank website, and not a scammer.

As more banks come to adopt the .BANK standard for their websites, consumers will come to expect the .BANK TLD when engaging and transacting with financial websites. Taking the steps to register a .BANK domain signals to consumers that online security is a priority for your bank.

How is a .BANK domain better than a .com domain?

Unlike .com websites, .BANK websites must meet rigorous security standards and practices, and only verified members of the banking industry can register a .BANK domain. This alone prevents cybercriminals from creating lookalike domains and launching phishing and spoofing attacks.

Additionally, these security technologies are required for a fully compliant .BANK domain:

Secure DNS Service. Helps to prevent Distributed Denial of Service (DDOS) attacks, along with security tools to help fight phishing and other email-related fraud.
SSL Digital Certificates. With a .BANK domain you can choose the right SSL certificate for your needs, including Standard SSL Certificates, Extended Validated (EV) Certificates, Wildcard Certificates, or SAN Certificates.
DMARC Email Security. DMARC provides another layer of protection, helping to ensure a message is legitimately from the sender, and what to do if it isn’t.

These features and more make .BANK a protected and trusted space on the Internet, giving banks superior online security along with greater opportunities for promoting and branding their services.

Can you transfer from a .com to .BANK?

Yes. Transferring a .com domain to a .BANK domain is a straightforward process. To perform a transfer, you’ll need to contact your current registrar to unlock your domain and create an authorization code. After this is done, you may initiate your transfer with your new registrar who will walk you through the process.

Can you redirect an existing domain to a .BANK domain?

Yes. You can redirect traffic and emails from your .com (or other TLDs) to your .BANK domain name. This enables you to keep existing traffic and educate customers about the benefits of .BANK domain while you redirect them. To learn more about EnCirca’s streamlined process for migrating to a secure .BANK website, please see our RAMP program page.

How difficult is it to set up a .BANK domain?

To set up a .BANK domain, the bank’s systems must be able to support the technical security requirements of the domain. This includes support for secure DNS, SSL digital certificates, email authentication, Transport Layer Security (TLS) 1.2 and up, as well as third-party support. For more information, please see our FAQ page or contact EnCirca directly.

What to consider when buying a .BANK domain

When it comes to buying a .BANK domain, it’s important to choose a registrar with the track record and experience to make your transition a smooth one. To make sure you’re choosing the right registar for your bank, here are some of the top considerations when choosing a registrar for your new .BANK domain.

Reputation of registrar. How long has the registrar been in business and what is their reputation? Note that all registrars must be fTLD registry services approved and adhere to all fTLD Security Requirements.
SOC 2 certification. Is the registrar SOC 2 certified? SOC 2 certification ensures that the registrar is engaging in best practices to secure your domain name against malicious activity such as hijacking.
Post-purchase support. Does the registrar offer support for transferring from your existing domain and with redirection? Do they offer on-going customer and technical support?
Partner support. Does the registrar have the know-how and teams to dive down into specialized solutions for vertical marketplaces?

For 20 years, EnCirca has been helping businesses with their hosting, registration, and cybersecurity needs. See our customer success stories to learn how several organizations successfully launched their .BANK domain with EnCirca.

Where can I register my .BANK domain name?

You can register a .BANK domain using EnCirca’s fTLD registry services. EnCirca is an ICANN-Accredited Domain Name Registrar, supporting nearly every top-level-domain extension.

Ready to take advantage of the security benefits of a .BANK domain?

Please visit Encirca to register your own .BANK domain or to learn more about EnCirca’s cybersecurity, domain portfolio management, DNS and website hosting services.

[/et_pb_text]\

How BIMI can boost your brand & build consumer trust effortlessly

Wed, 14 Oct 2020 00:00:00 GMT

Cybercrime is big business. During 2018, the US economy alone lost over 2.7 billion U.S. dollars due to phishing and network intrusions.

If you are a business owner, it might be time for a cybersecurity revamp to catch up with hundreds of other large corporations, big brands and SMEs in researching and pursuing new strategies. This can minimize the threat of cyber hijacking and other outside cyber-attacks.

We’re already seeing banks making the move into the area of unique domain names with the .BANK extension that brings very strict and mandatory eligibility and security requirements to the fore.

Consider technologies that assist your B2B and B2C marketers while protecting your brand, too. A trending technology that is gaining a lot of traction, and is being labeled as the future of email is BIMI or Brand Indicators for Message Identification.

Already being used by CNN, Groupon, and Aetna to name but a few, BIMI is a tool designed to authenticate your business emails by means of sender verification. It possesses similarities to DKIM (Domain Keys Identified Mail), DMARC (Domain-based Message Authentication, Reporting & Conformance) and SPF (Sender Policy Framework).

How does BIMI work?

BIMI is, in essence, a text record.

It authenticates your business or brand emails by displaying your logo next to your sent message. While this may sound nonsensical, it is an effective safety measure as your hosting provider needs to have the exact location of the logo (which is almost impossible to imitate).

Just as new cloud storage solutions have been praised for their numerous security benefits, the benefits of implementing BIMI are immense and the tech giants seem to agree. Going forward, it’s looking to become an industry standard. Yahoo! Mail is already testing out BIMI while Google has committed to a 2020 pilot program.

The benefits of BIMI

BIMI is the first email identification method that can be seen by your end-users. It is ultimately one of the best security practices for email marketing.

The AuthIndicatator’s Working Group introduced the tool to the world in March 2018. This vendor-neutral committee of companies aims to create a valuable, trustworthy email experience for email users globally. All the while establishing better authentication methods to reduce email fraud.

According to a study by Forrester, the DMARC email authentication protocol that forms its basis already stops millions of phishing attacks every year. In addition to making your brand’s reputation management easier and more effective, it is also protecting your brand against fraud.

BIMI is also proving its worth in email performance. The DMARC protocol boosts email deliverability by ensuring that emails aren’t blocked by receiving servers on suspicions of fraud. This leads to an overall increase in email open rates and higher rates of conversion. By using only the most secure email service providers and making use of a small visual cue to confirm the authenticity of your emails, the BIMI-delivered logo leads to further advantages above your competitors.

BIMI is the first email identification method, that is visible to your end-users (Link to image)

How can I implement the BIMI Standard?

The BIMI text record depends on your sending server and follows a specific format that is very similar to other email authentication formats such as DMARC, DKIM, and SPF. This effectively stops spam and phishing filters in its tracks. Once your recipient receives an email from you, their email service identifies the BIMI SVG file and its location and verifies the email.

After the verification process has been completed, the BIMI file points the recipient’s email service to the SVG file or brand logo and their service pulls it into their inbox. BIMI implementation is fairly straightforward, but there are some important steps you should take in order to ensure seamless implementation.

Ensure all your email authentication standards are set up

The BIMI email standard should be set up after all your other email authentication standards have been put in place. These include:

SPF: The SPF or The Sender Policy Framework certifies that the sender’s mail IP address is on the domain’s whitelist.
DKIM: The DomainKeys Identified Mail (DKIM) validates email messages.
DMARC: The Domain-based Message Authentication, Reporting & Conformance (DMARC) will check the ‘From’ field of emails authenticated by SPF and DKIM and makes sure that ‘From’ is visible on the user’s end.
ARC: ARC or the Authenticated Received Chain helps to improve how DKIM and SPF results are passed between mail servers, even if an email has been forwarded multiple times.

Ensure a good sender reputation

Even if you’ve implemented the BIMI standard correctly, your logo may not show up next to your emails right away. Your emails need to have a solid IP reputation, a domain on an ICANN-approved registrar, and exceptional engagement rates -which includes your open and click-through rates. If you know that you are lacking in that area, creating new content, and revising your marketing strategies can help ensure that your emails get opened and read.

Choose a square logo with the correct resolution

You can choose one logo for each of your domains. Each logo should be square and properly aligned. The format has to be .SVG or it will not be verified and displayed. Also make sure that there is no tagline or any form of text on the logo file.

Acquire a Verified Mark Certificate (VMC)

A VMC or Mark Verifying Authority issues a Verified Mark Certificate that validates your brand logo attached to your specific domain. This is not one of the compulsory prerequisites, but it has been rumored that it might become a requirement sometime during 2020.

Publish your BIMI

Once you have finalized your set up of your BIMI record with an appropriate logo and the VMC, the BIMI record will be published into your Domain Name Service or DNS.

It is a fact that authenticity leads to trust. Implementing a BIMI standard will help your brand to gain the trust of your consumers and sustain their loyalty. While the BIMI standard is not the industry standard yet, we believe mass adoption will occur during 2020 as Google and other tech giants start executing their BIMI programs.

Visit https://www.encirca.com/bimi or contact support@encirca.com to get started today.

About the Author:

Samuel Bocetta

New Handshake TLDs live at EnCirca

Fri, 09 Oct 2020 00:00:00 GMT

New Handshake domains supported by EnCirca include:

EnCirca has partnered with NameBase to enable registration of these new Handshake TLDs without using complicated Blockchain interfaces or paying with crypto-currency.

You can search for and purchase these domains easily at www.encirca.com/handshake.

Note, there is a 30-day trademark Sunrise Period for the Start-up phase of these Handshake TLDs. First-come, first-served registrations during these Sunrise Periods must be an exact match of a registered trademark.

For specific info on each TLD, click on the links above, or visit EnCirca’s handshake page at www.encirca.com/handshake. Registration cost varies per TLD, and some names are premium cost.

Handshake is an experimental peer-to-peer root DNS with privacy built in.

Handshake users can launch any domain extension you can think of, including ones with Chinese characters, Russian characters, and even emojis! Since these domains are based on Blockchain technologies, these domains resolve using special blockchain browser plug-ins.Handshake ensures DNS records can only be modified by a domain’s owner. This ensures Handshake domains can’t be censored or maliciously redirected. Registering a Handshake domain respects the privacy of the owner by requiring no personal data during registration. Ownership of names are determined by public-key cryptography, so it’s easy to verify name owners by having them sign a message with their private key.

Since Handshake domains are considered experimental and are not regulated by ICANN, brand owners should carefully consider if brand protection makes sense in these new alternative TLDs.

About EnCirca

Founded in Boston in 2001, EnCirca is the industry leader in new top-level domains, including all of the ICANN TLD’s and country-code TLDs. EnCirca also provides brand protection services in new alternative TLDs based on Blockchain technologies such as Ethereum, Zilliqa and now Handshake. To learn more, visit www.encirca.com.

.CONTACT for Trademark Holders and Preregistration at EnCirca

Tue, 29 Sep 2020 00:00:00 GMT

.CONTACT - one of the most anticipated TLDs this year - is now available at EnCirca!

Go to www.encirca.com/contact for more information on costs and phases.

.CONTACT Sunrise runs until November 28, 2020. Sunrise is an end-date application period, which means domains will not be allocated until after November 28th. This first phase is restricted to trademark owners with a trademark in the TMCH, and a valid SMD file.

Don't have an SMD file or want more information about TMCH? Click to find out about our TMCH turnkey service.

EnCirca is also offering pre-registrations for those without a TMCH record. Find out more here.

The Domain Industry Looks to Smaller Companies for Innovation

Wed, 23 Sep 2020 00:00:00 GMT

Success comes with its own pitfalls. Or, to put it another way, once a company secures a significant share of a particular market, there can be a tendency for them to stop innovating, and instead rest on their laurels. At the moment, it's strikingly clear in the domain name market, larger companies are doing just that.

Success comes in many forms, though, and not cannot be measured merely by market share. The most exciting companies in the domain industry today are considerably less capitalized than the industry “leaders,” but are also very important for the transformation of the industry.

A good example of this is the way that smaller companies are working with TLDs like Amazon’s .bot. Though relatively new, .bot is one of the most heavily capitalized TLDs, because of the level of investment that Amazon has poured into it. The .AI country-code domain from Anguilla is its primary competitor and has a head-start. But Amazon is determined to dominate the artificial intelligence space and is willing to invest in the new discovery tools required to own the market. But under ICANN rules, they need to work with accredited registrars. This is where companies such as EnCirca step in to consult with these new gTLDs registries, giving them a path towards differentiation in the market.

In this article, we'll take a look at the state of the domain industry, and give well-deserved credit to a few of the smaller, more exciting players in this market today.

The State of the Art

Take a look at the state of the domain name industry today, and it's immediately clear that one company sucks up all the oxygen: GoDaddy, currently dominates the domain name market, and that is not going to change anytime soon. Even their closest competitor – Tucows – is in a distant second in terms of market share.

This is not necessarily a problem. In combination, these two companies have centralized the domain name marketplace. That means that if you want to buy or sell a domain, you know exactly where you need to go. That's also why both companies take 20% of the sales of your domain names: they believe this is a fair cut for bringing you buyers, and they are probably right.

On the other hand, if you examine the UI of either GoDaddy or Tucows, and you'll see that they might have gotten a little lazy. Both are in desperate need of updating. Whether that's a priority for either company, given their ongoing success, is another question.

Agility and Innovation

It would be a little unfair to criticize either GoDaddy or Tucows for a lack of innovation. They know their business, they are conducting it in the way it's always been done, and they are doing very well from that. But that means that to find the most exciting things happening in the domain market today, you have to look at smaller companies.

These innovations can be broken into three main categories. The first set consists of companies that are taking a fresh look at domain financing and payments. DAN.com, for instance, has started to sell domains on payment plans, after which ownership automatically returns to the seller. This is great news for the seller, because most people who buy domains on plans end up making all of the payments. Those that don’t tie up the domains for a short while, sure, but in that case the domain seller gets to keep the cash and the domain.

A second type of innovation is in marketing domains for sale. In this area, SquadHelp is making waves. By building a data-driven engine behind their landers, the company is able to target its outreach much more tightly. This brings domain marketing in line with other industries, and specifically a parallel shift that happened in the consumer cybersecurity software market a few years ago and pushed a handful of industry leaders from relatively unknown status to generally high name recognition. Squadhelp’s advances in this include remarketing to landing page visitors, and 24/7 chat/phone support on landers. The data analysis which sits behind these capabilities is explained by CEO Darpan Munjal in a recent podcast.

Last but definitely not least, there is Encirca. A small, agile company that prides itself on being at the forefront of the new technologies that are gently revolutionizing the domain industry. The company has been heavily involved with the rollout of restricted new gTLDs, blockchain, and crypto top level domains. Even more exciting is the way that they are working with the new handshake dns, which brings a level of security to consumer-level domains that has only previously been seen on large, customized corporate networks.

The Future

It's also likely that these innovative features will start to have an impact on the giants of the industry over the next few years. GoDaddy and Tucows didn't gain such a huge market share, after all, by ignoring what was happening around them. As is the typical model today, it's likely that the new features that are being pushed forward by smaller companies will eventually be adopted by these two dominant marketplaces.

A major focus of the next few years is going to be added security. With the risks of cyberattack always on the increase, domain registrars are (perhaps somewhat lately) beginning to take the security of their back-end systems more seriously. For that reason, if one were to pick the most exciting of the companies mentioned above, and the one that is most likely to have an impact on the industry as a whole, it would be Encirca.

This is because Encirca takes cybersecurity for domain management extremely seriously. The threat of cyber hijacking has been a major "growth area" for cybercrime in the last few years, and Encirca has taken direct action to address this. By providing customers with the ability to employ two-factor authentication in order to access their domain control panel, and by offering secure DNS and email authentication, the company is seeing great success with reducing the vulnerabilities their customers face. Their major registry partners include .BANK, .BOT, .PHARMACY and .CPA.

EnCirca is also the most active ICANN registrar helping companies protect their brands on alternative TLDs running on the Blockchain, including support for Handshake, .ETH and .Crypto TLDs.

So next time you are looking to buy or sell a domain, give the smaller companies a chance. You might be surprised by the extra features they offer.

About the Author:

Brian Skewes is a technologist into deconstruction. Over two decades of self-employment, he has accumulated a wealth of inadvertent real-world lessons related to building, running, and preserving a small company.

.gay available at EnCirca today

Wed, 16 Sep 2020 00:00:00 GMT

**Register your .gay domain name at EnCirca today!
**Just $37.50 for regular registrations.
Some names are premium or reserved.

For LGBTQ individuals, organizations, businesses and their allies, .gay serves as a virtual Pride flag and inclusive badge of honor. A .gay domain helps everyone, whether small business, global organization or individual ally, express their support and celebration of LGBTQ communities.

.gay proudly signals support of LGBTQ people, causes, and businesses. It represents a historic step forward, increases visibility, and its launch results in more LGBTQ-friendly space. Not only does the .gay Registry donate 20% of every new domain registered to LGBTQ organizations, it also creates safer spaces online. Their “.gay Rights Protection” policy means that they will accept reports of any content that is harmful or harassing of LGBTQ people and be able to act against them by working to remove the content or suspending the site itself. It also means that hate groups are banned from using .gay.

**Register your .gay domain name at EnCirca today!
**

Credit Union Websites: Facts About Specialized TLDs

Wed, 09 Sep 2020 00:00:00 GMT

Every business knows they need a web presence for the convenience of their customers. If you are a financial institution, this means having loan calculators and other online banking tools easily accessible so customers can take care of their banking business any time of the day or night. But a credit union website must balance providing customers the convenience of doing their banking online with helping to protect against online fraud.

It doesn’t matter what type of banking services a credit union member is seeking, if they are sharing personal details, they want to know the website is legitimate and reputable.

That’s where the top level domain (TLD) type becomes important.

Your TLD identifies what type of website you have. Most people are familiar with the generic TLDs and the types of organizations they represent:

.com — This means for commercial. It was the first TLD released for common use and is the most popular type of TLD extension. Anyone can obtain this TLD.
.gov —This is restricted to U.S. states, cities, towns, counties, governmental agencies, government programs, and native American tribes.
.edu —This is specifically for colleges, universities and other schools located in the United States.
.org — This was created for non-profit organizations. There is no verification to use it so communities, schools, non-profit, and for-profits all use this TLD.

As you can see, anyone can register to have a .org TLD. At first, that was the only option. Now with more TLD options available, many credit union websites are starting to wonder if .org is still the best option.

Should you change your credit union’s TLD?

There are numerous things to consider before you change your credit union domain. Think about other credit unions in your community. Do any have a similar name to yours? If yes, switching to a credit union domain or a cooperative domain differentiates you from the others who use a .org domain. Or, maybe customers sometimes confuse you with being a bank. Here is one important fact to consider:

A unique TLD makes you memorable. The best credit unions understand the important role branding plays in their success.

It doesn’t matter why your members want to find your website—they could be looking for information on mortgages, or perhaps they want to use your credit union web tools—whatever the reason, you should make it as easy as possible to be found online.

Let’s answer the three most common questions regarding if you should transfer to a specialized TLD.

Why is .COOP or .bank or .creditunion better than a .com or .org?
There were a little over 20 million domain names registered with .org .com and .net domain registrations in 2019. Unlike .com, .net and .org, you must go through a verification process before you can use a .COOP, .bank and .creditunion extensions. Since this verification process is in place for specialty TLDs, people who are searching for a credit union website know instantly that they can trust the website if they see .COOP or .creditunion. This adds legitimacy and credibility to the information on your credit union website.
Are credit unions eligible for a .COOP domain?
According to Co-OpLaw.org, “a credit union is a cooperative bank that is owned and managed by its members, all of whom have accounts in the bank”.
This means a credit union would be eligible for a .COOP domain.
Credit unions that want to stress the fact that they are nonprofit and owned by their members, as opposed to being profitable corporations like conventional banks, can use a .COOP as a way to emphasize this operational difference.
What are the ICANN requirements for using a .COOP domain?
The Internet Corporation for Assigned Names and Numbers (ICANN) created criteria to determine what organizations are eligible for .COOP domains:Members of the National Cooperative Business Association (NCBA)
- Member of the International Cooperative Alliance (ICA)
- Organizations formed as and/or considered cooperatives under applicable local law
- Associations comprised of cooperatives
- Organizations that are committed to the seven cooperative principles
- Organizations that are majority controlled by cooperatives
- Entities whose operations are principally dedicated to serving cooperatives; and entities whose use of a .COOP domain name would, in the option of the DCLLC Board, advance the interests of the cooperative sector in general or would assist in the development of cooperatives worldwide.

What are the benefits to credit unions for having a .COOP domain?

All credit unions are required to follow the Seven Cooperative Principles/COOP values that guide all cooperatives, which are:

Voluntary membership
Democratic member control
Members’ economic participation
Autonomy and independence
Education, training and information
Cooperation among cooperatives
Concern for community

Every time a member visits your credit union website with your .COOP domain name, they are reminded of your values. It’s these values that increase your members’ loyalty. And, since your official branded email addresses will end in a specialized TLD, you will have automatic branding built in already to set you apart from traditional .org credit unions.

What is the verification process for a .COOP or .credit union?

The verification process is simple. Eligible credit unions can visit the Credit Union National Association (CUNA) website to complete the verification form proving that they are a U.S. credit union. To register for a .COOP TLD, follow the verification policy explained here.

Having to prove you are indeed a cooperative or a credit union makes it harder to obtain a specialized TLD, which makes the distinction more exclusive.

How does EnCirca compare to other domain registrars?

With over 900 domain registrars in the world, you need to do your homework to find one that meets all your needs. When you are looking for a credit union domain registrar, it’s essential that you select one that checks all of these boxes:

ICANN-accredited registrar: This will ensure that the registrar is legitimate.
Technical support: Ideally, you should be able to call or do a live chat with the support team to deal with any problems.
DSN configuration tools: Make sure they are easy to access now before a problem happens.
Single price package availability: This will eliminate the hassles of getting separate bills for domain registration, e-mail hosting, web hosting, and SSL certificate services.
Hosting solutions: It’s so much easier if your domain registrar can handle email hosting and web hosting for you.
Website builder availability: You should look for templates, drag and drop features, and a responsive design so you can quickly update your website.

EnCirca offers all the features mentioned above plus a la carte security data services such as multi-factor-authentication, secure DNS, DMARC email authentication, TLS/SSL digital certificates, secure forwarding, and secure web hosting.

A credit union website interested in obtaining a .COOP domain needs to consider one last detail: cybersecurity. EnCirca is proud to be SOC2 certified. This certification shows EnCirca follows the necessary procedures to keep data secure.

3 Steps to register your .COOP domain.

EnCirca makes it easy to obtain a .COOP domain name for your credit union. Follow these three steps:

Enter the .COOP domain name into the search box on the .COOP info page.
If the name is available, add the .COOP domain name to your shopping cart and check out. If the name is not available, try another variation.
After your purchase is complete, you will receive an email to verify your cooperative status.

As soon as the verification process is complete, the .COOP domain is yours. It’s that simple.

.CPA Launches for Certified Public Accountants

Wed, 02 Sep 2020 00:00:00 GMT

The American Institute of Certified Public Accountants, via its CPA.com affiliate, has launched the .CPA top-level-domain extension for Certified Public Accountants. .CPA is a restricted Internet domain that allows CPAs to connect with clients and the general public with greater trust, security and verification.

“The digital presence of firms has never been more important.,” said Erik Asgeirsson, president and CEO of CPA.com. “The .CPA domain will reduce risks associated with phishing and spoofing attacks and the growing number of online bad actors. Just as importantly, it will give clients and the public-at-large greater peace of mind they’re dealing with legitimate CPA firms.”

The .CPA domain is restricted to licensed CPA’s. There are over 650,000 active CPA’s in the USA. Many other countries also issue CPA licenses, including: Canada, Australia and China.

CPA.com has planned a phased roll-out of the .CPA domain extension for Trademark owners, firms and individuals. Initially, applicants will be limited to the USA. The goal of the initial period, which runs through Oct. 31, is to help firms acquire domains that are most consistent with their current digital branding. To apply, firms must be licensed and agree to use the domain they acquire. Licensed firms that apply during the early registration phase will be able to register their existing .com domain using .cpa. Firms will be notified of the outcome of their domain applications no later than early November.

Here are the launch phases for .CPA:

Sunrise Period: September 1 – October 31, 2020
During this end-date Sunrise phase, licensed CPA firms with a record in the Trademark Clearinghouse (TMCH) may apply for exact matches of the trademark listed in their SMD file.

Trademark Holders: September 1 – October 31, 2020
During this end-date phase applications from licensed CPA Firms that have active trademarks registered with the U.S. Patent Trademark Office with registration dates earlier than February 1, 2020 will be accepted. During the Trademark Holders Registration Period, domain names or variants of domain names that correspond to registrant trademarks, trade names or service marks will be available for registration.

Early Application Period: September 1 – October 31, 2020
During this end-date phase Registry Operator will accept applications from applications from licensed CPA Firms who commit to usage requirements. Domains will be allocated at the end of the phase after allocations for the Sunrise and Trademark Holder’s Period.

Limited Registration Period: November 5 – January 14, 2021
During this phase Registry Operator will accept applications on a First-come First-served basis from qualified registrants who commit to usage requirements. Only firms may apply for this phase.

General Availability: January 15, 2021
During this phase Registry Operator will accept applications on a First-come First-served basis from qualified registrants who commit to usage requirements. Both firms and individual CPA licensees may apply on a first-come, first-served basis.

For more information, go to https://www.encirca.com/cpa/

How A .BANK Domain Will Enhance Your Bank’s Security

Wed, 26 Aug 2020 00:00:00 GMT

Boost Your Security With A Bank TLD

There are many factors to consider when switching to a new top level domain. This includes financial institutions who are transitioning to the .BANK TLD, and for good reason. Banks have been taking advantage of the popular .COM TLD, as most commercial entities have since 1985. With the verified .BANK domain, banks receive a more secure online banking solution, trusted communication, and heightened credibility. While there are many considerations for a bank to make the switch, the value of online security for banks is undeniable.

What is a TLD

A TLD, or top-level domain, includes the letters at the end of a website address. These letters typically tell you the industry, geographical area, or a purpose that’s associated with a domain name. For example, a .org is specified for non-profit organizations and a .ca is reserved for Canada. It’s a simple process to purchase a domain through a registrar, and existing domains can easily switch to a different TLD. Most domain registrations for new TLDs are open to the public, however, some such as .gov are exclusive to certain agencies like the government. This exclusivity is now a huge benefit for the banking industry with the .BANK TLD.

Eligibility For .BANK

To purchase a .BANK TLD, you must be a bank, specific trade organization, savings association, service provider, or government regulator. fTLD, the .BANK Registry has put an extensive vetting process in place so that only legitimate banking institutions can utilize .BANK. Banks also must re-verify the domain every two years. Credit unions and associations do not have access to the .BANK domain - they have .CREDITUNION or .COOP TLDs available to purchase. You can view further eligibility requirements with the registry.

Secure Reasons To Switch From COM To BANK

Security is extremely important for all aspects of the banking industry, so your bank’s online presence shouldn’t lack this feature. The .BANK TLD is significantly more secure for both banks and customers. Here are some ways the .BANK TLD will enhance your bank’s security.

More Credibility

Anyone can have a .COM TLD, meaning banks still existing in this common domain space are failing to set themselves apart as a trusted banking source with the far more secure .BANK TLD. Less legitimate companies advertising themselves as a bank have full access to the .COM domain, therefore customers have to do more research to find out if the company is credible enough to handle their money and personal information. The verification application that banking institutions have to adhere to in order to take advantage of the .BANK URL does that credibility research for you. The stringent process that is required for a bank to register and keep the bank TLD certifies its legitimacy, leaving no questions as to whether or not the institution is credible or not.

Protection From Fraud

With the .BANK tied to emails and other customer communication, you can expect less phishing scams. Since anyone can purchase a .COM domain, banks who still use the common TLD will experience issues with imposter domains. For example, the legitimate bankofamerica.com allows scammers to create domains under thebankofamerica.com or banksofamerica.com. This means there is more opportunity for a customer to mistakenly go to the wrong web address and give their personal information to a scammer, or for a well disguised email encouraging a customer to fall for a phishing scam to be successful. The exclusivity of the .BANK means customers will learn to expect the bank TLD to be associated with their bank’s website and communication, weeding out the fraudulent domains.

Assurance For Customers

Customers don’t have to be left wondering if online banking is secure or not with a .BANK domain. Financial institutions who have already made the switch were able to successfully communicate the technical and security measures that were being put into place, allowing customers to have the assurance they need. It’s a smart idea to reach out to customers well in advance of the public launch and let them know about the benefits of a new .BANK domain. Customers will feel rest assured that your institution is taking extra measures for security. Customers should feel confident that their livelihood and personal information are protected, and the .BANK domain improves that security significantly.

Added Security For The Online World

With more customers using mobile and online banking, it has never been more important to implement secure tools for modern technology. Evolving means meeting your customer’s expectations, and the .BANK TLD utilizes extra regulations and innovative tools that will impress those customers. The DotBANK domain extension includes enhanced security requirements that exceeds existing TLDs. Regulated entities provide the foundation to limit cybersecurity risks and add more protection to authenticated .BANK users. This means less hacking and compromised accounts, allowing for peace of mind with online banking.

Purchasing A .BANK Domain

So you have familiarized yourself with the benefits and security features of using a .BANK domain, the next step is implementation. You can set up a brand new website on your domain name, or if you already have an existing domain name with another TLD, you are able to redirect the traffic and correspondence you have to a new .BANK TLD. To take advantage of .BANK and register a bank TLD, you’ll need to go to the official fTLD .BANK registry and review your eligibility. Once you know you’re eligible, you can find a reliable registrar like EnCirca. You can register a domain name that hasn’t already been submitted with the fTLD .BANK registry and EnCirca can go through the vetting process for you, or you can go ahead and apply with fTLD’s registry services yourself beforehand and submit your allocation token to EnCirca.

You can secure your domain with SecureDNS and obtain an SSL certificate. DNS, SSL, and other added features are necessary to protect your domain and implement the new .BANK domain seamlessly. Handling migration yourself to set up the security requirements is an option, or you can outsource the migration to benefit from your new bank domain as soon as possible. Luckily, EnCirca uses a RAMP (Registrant Assistant Migration Package) that provides an all-inclusive implementation process to get you started with a .BANK domain quickly, easily, and effectively.

Steps To Secure Your Domain:

Review the bank domain requirements and eligibility to confirm that you qualify for a .BANK domain.
Bank domain name registration. Check the availability of the domain name(s) by using the “Select My .BANK Domain” feature and complete the verification application with fTLD registry services.
Check your email for your registration token, and submit the token to the registrar to complete the registration process.
The bank domain registrar will submit the domain registration request.
The fTLD .BANK registry will review and approve your registration.

fTLD

Costs Of Switching to .BANK

fTLD charges registrars like EnCirca the same base price for .BANK domains, and premium domains have a separate base price. This covers the verification and operating costs that come with purchasing the domain, as well as the specific security requirements. Additional security costs for compliance can vary, while the .bank domain cost with EnCirca is $849. While other .BANK registrars will list prices online and then add hidden fees during the final process, EnCirca’s cost is their true cost. These costs remain competitive with approval from the registry.

Jumpstart Your Way To More Secure Banking

Solve the cybersecurity problem, implement improved digital banking, and protect your bank and customers with a .BANK TLD. In an industry where security is extremely valuable, switching to a .BANK domain will enhance the security features for your website and communication tools. You’ll retain customers who feel more protected than ever, and attract new customers who easily understand your credibility.

Everything You Need To Know About TLS Certificates

Wed, 19 Aug 2020 00:00:00 GMT

Transport Layer Security (TLS) is a security protocol used to prevent hackers from being able to steal the data you enter into websites. In short, TLS ensures that when you log in to your bank account, your password is protected from uninvited eyes.

Whether you know it or not, you’ve likely encountered TLS at some point during your adventures on the web. For example, anytime you see a lock icon show up in your address bar next to the URL you’re visiting, you’re using a TLS certificate.

But while almost everyone has used TLS at some point, few truly understand their inner workings — or even know that they’ve been using them.

In this article, we’re going to dissect TLS. Here, we’re going to give you a short history of how TLS came to be, how TLS certificates work, what their use cases are, and their pros and cons. By the end, you’ll be one step closer to browsing the web and transmitting data safely.

A short history of TLS

In the early days of the internet, secure transmission of data was practically non-existent. Unfortunately, this lack of security made online activities and services that we now take for granted, such as ecommerce, online banking, and email borderline impossible without being exposed to cybercriminals.

The good news now is that business security has come a long way, including the security measures of SSL and TLS that we will discuss now. Since the average cost of a cyberattack on small-to-medium sized business is over $2 million, this is not something that can be ignored.

In 1994, the tech industry had come to fully realize the importance of a secure data transfer protocol, and Netscape unveiled Secure Sockets Layer (SSL) 1.0 to fulfill this need. While the first iteration was never officially released due to security flaws, the internet community quickly appreciated the need for such encryption. SSL 2.0 was released in 1995, then followed up by SSL 3.0, the current version, in 1996.

Just three years later in 1999, TLS was released as an upgrade to SSL 3.0, but flew somewhat under the radar until 2011, until the Internet Engineering Task Force (IETF) released a document saying that SSL 2.0 was no longer safe. A few years later, they extended this warning to SSL 3.0, effectively ending SSL’s usage for many applications and ushering in the new era of TLS.

TLS was eventually adopted as the preferred security protocol, and in essence it can be thought of as an evolved version of SSL that provides improved security. In fact, TLS was originally named SSL 3.1, but the name didn’t stick. The current version of TLS is TLS 1.3, which was released in August 2018.

What is TLS?

TLS is a security protocol that encrypts the data being transmitted between two parties over the internet. It primarily performs two functions: it protects your data from intrusive eyes, and it verifies who you’re communicating with (that’s where TLS certificates come in).

To provide these services, TLS largely relies on a technology called public key cryptography. It provides two keys to the encrypted data: a public key and a private key. The data can be encrypted using the public key, but it can only be decrypted (i.e., “read”) with the private key. This way, the public key can be distributed publicly so that anyone can send encrypted data, but only the receiver with the private key can decrypt the data.

What is a TLS certificate?

While TLS is the overarching security protocol, TLS certificates are a bit more specific. Essentially, a TLS certificate is a digital certificate that provides proof that you’re communicating with the server, person, or domain that you think you are. You can think of them as IDs: when you navigate to a website that uses TLS, you’ll ask for its ID (i.e., its TLS certificate). You then have to decide yourself whether you trust the site or not. To do this, validate the certificate through getting a self-signed certificate copy and then verify the electronic certificate with the one that you requested.

TLS certificates are issued by an authority called a Certificate Authority, or CA. When you connect to a website, the CA signs the certificate and verifies that it belongs to the domain name that you’re trying to access. Public key cryptography is employed to verify that the CA did in fact sign the certificate. When the TLS certificate is verified and accepted, it’s called a TLS handshake, just like shaking someone’s hand after you’ve seen their ID.

TLS use cases

Although TLS is most commonly used to encrypt the data that’s sent between web servers, that’s not the only way it’s used. TLS is vital to securing many of the services we use each day, such as email and messaging.

Each of the major email providers that focus on security incorporate TLS into their security protocols and require both the sender and receiver to use TLS. If either does not and a secure connection can’t be created, this will send emails over an unsecured connection, leaving them open to hackers.

To ensure that your data is as safe as can be, you’ll need to take further precautions, such as using a virtual private network when connecting to a public wi-fi router. Many of the top VPN providers use TLS as part of their encryption standards, which will make your internet definitely more secure than with unencrypted connections.

Ultimately, even though TLS may not be a totally foolproof technology, it can do much to help boost security overall. There is, however, a risk that utilizing TLS can negatively impact a site’s load times. When TLS is used, more data must be sent back and forth between visitors and the site, which can make it load slower if not configured properly. Both the encryption and handshake processes can cause this issue, but luckily, they can both be optimized to ensure the site loads smoothly.

Conclusion

TLS certificates are an important security technology that has essentially turned into a necessity, and not only for security but also for attracting more visitors to your site or blog. Already major search engines such as Google have announced that they will be rewarding sites that include TLS certifications. As the internet continues to grow, we will likely see new and improved protocols emerge.

About the Author:

Samuel Bocetta

EnCirca Announces Support for Handshake’s Alternative TLDs

Wed, 12 Aug 2020 00:00:00 GMT

Handshake is an experimental peer-to-peer root naming system that allows anyone to create their own top-level domain extension, bypassing ICANN regulation.

The initial Handshake top-level domains supported by EnCirca are: .JS, .TXT, .API, .BASE, .C, .GIN, .MKE and .ZEN.

EnCirca has partnered with NameBase to enable registration of these new Handshake TLDs without using complicated Blockchain interfaces or paying with crypto-currency.

"Namebase is enabling the next generation of new top-level domain extensions using the Handshake peer-to-peer internet infrastructure," says Thomas Barrett, President of EnCirca. "With Namebase, anyone can launch their own branded namespace and community using the Handshake infrastructure ."

Adds Tieshun Roquerre, CEO of Namebase, “Encirca is on the forefront of decentralized naming technologies and their quick integration with Handshake TLDs sets them apart as the most comprehensive partner for protecting brand names across the ever-changing naming landscape.”

You can search for and purchase these domains easily at www.encirca.com/handshake.

Note, there is a 30-day trademark Sunrise Period for the Start-up phase of many of these Handshake TLDs. First-come, first-served registrations during these Sunrise Periods must be an exact match of a registered trademark.

"Brand owners will need to be vigilant in monitoring the launch of these new Handshake-based top-level domains," continues Barrett. "EnCirca is committed to being the first ICANN Registrar to support defensive registrations for the Handshake new TLDs."

For specific info on each TLD, visit EnCirca’s handshake page at www.encirca.com/handshake. Registration cost varies per TLD, and some premium names cost extra.

More Handshake TLDs will be launching in the coming months.

Handshake is an experimental peer-to-peer root DNS with privacy built in.

Since Handshake domains are considered experimental and are not regulated by ICANN, brand owners should carefully consider if brand protection makes sense in these new alternative TLDs.

About EnCirca

Advantages of Having a COOP Domain

Tue, 04 Aug 2020 00:00:00 GMT

The global cooperative movement has expanded exponentially over the past three decades. Over 1 billion people worldwide are members of cooperative organizations, including more than 100 million Americans. Cooperatives play an integral role in local, national and global economies, but many people still don’t fully understand how cooperatives’ value and structure differ from other business types.

Founded in 1895, the International Cooperative Alliance (ICA) has worked to establish and advance a set of universal standards and values that all co-ops must follow. The ICA defines a cooperative (co-op) as an “autonomous association of persons united voluntarily to meet their common economic, social, and cultural needs and aspirations through a jointly-owned and democratically-controlled enterprise.”

Unlike other traditional business models such as sole proprietorships, partnerships, S-corps and C-corps, cooperatives strive to create value that transcends bottom line profit. Cooperatives flatten organizational hierarchies and bring people together in a democratic way -- following the standard “one member, one vote” rule for decision-making.

Instead of focusing predominantly on maximizing profits and expansion, cooperatives have a civic responsibility to stay true to their core set of six community-oriented values established by the ICA: self-help, self-responsibility, democracy, equality, equity, and solidarity. Cooperative members believe in the ethical values of honesty, openness, social responsibility and caring for others. All cooperatives base their key decisions on these fundamentals.

Five Types of Cooperatives

Most co-op definitions segment cooperative organizations into five categories based on industry and structure:

1. Worker Co-ops

Worker cooperatives are usually in the retail and service industries. Collectively-run shops and bartender-owned breweries are examples of worker co-ops. For instance, Equal Exchange is a fair trade coffee distributor owned equally by their 130 cooperative workers.
2. Producer Co-ops

Producer co-ops are often made up of a group of agricultural producers who come together to market their products or optimize production processes. Land O’Lakes, Inc. is an agricultural and food producing co-op that is owned by over 7,000 farmer-members.
3. Consumer Co-ops

Consumer co-ops are retailers that are owned by customers who buy goods from the store. REI, one of the most recognizable co-ops in the U.S., offers $20 lifetime memberships which include member only discounts, dividend earning programs and the opportunity to contribute to advancing the organization’s mission and values.
4. Purchasing Co-ops

Purchasing co-ops establish a bond between multiple independent businesses, owners or municipalities that improves their collective purchasing power, competitiveness and quality of service. Ace Hardware, for example, is a purchasing cooperative that enables small, locally-owned hardware stores to purchase merchandise in bulk at the lowest possible price point.
5. Hybrid Co-ops

Hybrid co-ops are a combination of two or more of the above co-op organizational models.
Seven Core Cooperative Principles

Regardless of co-op type, the ICA holds co-ops to higher, more community-oriented standards than non-cooperative businesses. In 1995, the ICA adopted 7 core co-op principles that all cooperatives are expected to embody:
1. Voluntary and Open Membership

Cooperatives are open to all who want to join -- without discrimination based on gender, social status, race, political views or religion. Membership should be voluntary and available to anyone who is willing to accept responsibilities and complete the work that all members are expected to do.
2. Democratic Member Control

Democratic values are central to every cooperative. Primary cooperatives are organized so each member has one vote. Other types of cooperatives are also organized in a democratic fashion, where all members have the opportunity to contribute and shape policy and values. Elected representatives usually lead meetings and are accountable for membership responsibilities.
3. Member Economic Participation

Cooperative capital is controlled democratically and contributed equitably to members. A portion of the cooperative should be common property owned collectively by cooperative members. Excess resources are allocated to advance the cooperative’s mission and goals by: expanding the cooperative, setting up reserves (part of which can be indivisible), benefiting members based on the extent of their involvement with the cooperative, and developing other activities agreed upon by the membership.
4. Independence and Autonomy

Independence, autonomy, and self-help are all key attributes of cooperatives and their members. If cooperatives intend to collaborate with other organizations (including government agencies), or raise capital from outside sources, they must maintain independent democratic status and total cooperative autonomy for their assets.
5. Education, Training, and Information

Education, training, information sharing and professional development are central to cooperative values. Cooperatives must provide education and training for members, elected representatives, and managers. Cooperatives should make a concerted effort to inform the public -- especially younger generations and community influencers -- about the nature and benefits of co-operative structure.
6. Cooperation among Cooperatives

Cooperatives should collaborate with other cooperative associations and community organizations. They should strive to serve all members and strengthen the local, national, and regional international cooperative movement with their efforts.
7. Concern for Community

Sustainability and community development should be integral in all policies approved by cooperative members.

Advantages of having a .COOP domain

Needless to say, cooperatives are held to substantially higher ethical standards than non-cooperative businesses. With the cooperative principles at the forefront of every critical decision, it’s important that cooperatives convey their values to public audiences and emphasize that importance of being a cooperative organization.

One of the easiest ways to demonstrate your cooperative status is to register for a .COOP domain name. Unlike signing up for unregulated top level domains (TLDs), .COOP domains are reserved exclusively for cooperatives and cooperative organizations that meet specific Internet Corporation for Assigned Names and Numbers (ICANN) guidelines.

In January 2002, ICANN activated .COOP as a new top level domain (nTLD) and instilled the requirement that cooperatives prove their “co-operative” status before getting their .COOP domain names officially activated. Here are several reasons why it’s advantageous for co-ops to use .COOP domain names:

Maintain higher cybersecurity standards than unrestricted TLDs

Purchasing a .COOP domain requires going through the .COOP domain registration and approval process through a licensed .COOP domain registrar.

Encirca is the only North American .COOP domain registrar that is SOC2 certified -- undergoing independent SOC2 audits annually to ensure that it meets top cybersecurity, availability and confidentiality standards. As the most secure .COOP registrar on the market, Encirca is also responsible for managing the GET.COOP registration portal.

Using SSL Certificate encryption, Secure DNS, Secure Web Hosting, multi-factor authentication, DMARC email authentication, and registrar locks to ensure maximum security, your co-op can rest easy knowing that the best defense mechanisms are at work protecting your .COOP website.

Differentiate your co-op from non-cooperative businesses

Any person or company can log onto general domain registrars and buy an unrestricted TLD. The most popular TLDs -- .com, .net and .org -- are unrestricted and available to anyone on a first-come-first-serve basis. Unrestricted TLDs are not required to go through any verification processes when the buyer purchases a domain name or at any point after purchase, making it impossible to fully know the intentions of the website operators.

Using a .COOP domain name signals to the broader web browsing world that you are a verified co-op and believe in community-oriented values. While it’s not fair to presume that businesses with .com, .net and .org TLDs are unethical, it’s wise to be cautious and not assume they run perfectly ethical operations either.

Rigorous regulations ensure that only registered co-ops can have .COOP domain names. In a world short on trust, this represents a major advantage and differentiation factor. Your .COOP domain name announces to all web visitors that you’re different from the common business. .COOP states that you have ethical goals and values that extend far beyond merely maximizing profits.

Benefit from cooperative branding

Co-op values can be utilized as key assets when marketing products or services. A company’s domain name is one of the first things people associate with their brand. It’s imperative to select a domain name that distinctly represents your organization and aligns with your collective values. Selecting a catchy, recognizable .COOP domain name will differentiate your co-op from your competitors and allow you to rise above the masses of websites out there.

With a .COOP domain name, you can easily assign .COOP email addresses to co-op members. When reaching out to a stranger with your .COOP email address, you instantly signal that you represent a reputable organization. In today’s time of information overload and constant spam emails, your .COOP email address could be the difference between the recipient reading your email and the start of a productive new relationship, or not.

Beyond email addresses, you can maximize your .COOP domain name on any and all marketing materials that your co-op uses. Business cards, flyers, packaging, souvenirs -- any marketing materials associated with your brand -- can be used to promote your .COOP domain name and co-op values.

You also can choose a valuable .COOP domain that is synonymous with your industry. This is a particularly effective strategy if your co-op is relatively new or looking to grow. Cropp Cooperative, an organic, farmer-owned cooperative, uses the domain name “farmers.coop.” Perhaps some customers won’t remember the name “Cropp Cooperative,” but the vast majority will be able to recall, identify and be impressed by the “farmers.coop” brand.

Point .COOP and .com to the same website

Even if you already have a large scale .com website, purchasing a relevant .COOP domain is still a wise decision. Large organizations often use both .COOP and .com domains to point to their primary website. They can do this by setting up awebpage 301 redirect which points all traffic to their primary website. When you type in “rei.coop” in the search bar, you will be automatically redirected to REI’s consolidated website -- REI.com.

Another pro tip is to buy the rights to domain names similar to yours. You never know who might want to put something on the internet intended to harm your business. This is a common defense practice that businesses across industries employ. Own domain name variants, set up 301 redirects to your primary website and rest easier knowing that you built a formidable defense around your brand.

Direct a particular section of your existing website to a .COOP domain

Migrating your entire website from a .com to a .COOP may not make sense right now -- especially if you already have a recognized brand and website. With that said, it still may be wise to organize particular parts of your website on a .COOP domain.

You may want to showcase your community involvement and philanthropic endeavors on a .COOP domain. This could be integrated as one section of your current .com website that focuses on your cooperative values.

What to consider when buying a .COOP domain

.COOP domain registration security measures

Make sure to do your due diligence on domain registrar cybersecurity measures before buying your .COOP domain. A reputable domain registrar should:

Undergo independently certified SOC2 cybersecurity audits
Use SSL Certificate encryption
Secure domains with Secure DNSSEC
Offer multi-factor authentication to verify your online identity
Use DMARC security solutions for enhanced email security

Reputation of .COOP domain registrar

Just like when you make any important investment, do a thorough background check on the domain registrar. Some questions to consider when analyzing domain registrar reputation:

What security measures do they take to protect your website?
Do they adhere to all ICANN rules and regulations?
How do they verify your co-op status?
Do they respond thoroughly and quickly to support requests?
How comprehensive is their website?
Do they sell all types of domain names or specialize in restricted TLDs?

.COOP domain costs

Shopping around and assessing .COOP domain price ranges and package variations is always wise before making an investment. With that said, be wary of domain prices that seem ridiculously low. The old cliche that goes, “If it looks too good to be true, it probably is” is relevant to cheap domains.

Read the fine print for any .COOP domain name listed for just a few dollars. They may not go through all the necessary steps to register your domain name legally with ICANN. They may have poor customer service. The price may be low for one year and then shoot up exponentially in your second year without you realizing.

For reference, .COOP domains usually start in the ~$75 range and above per year and premium .COOP domains may cost considerably more than this. Understand exactly what you’re getting with your domain name and select a registrar that meets your needs.

Post-purchase support

Buying a .COOP domain is slightly more involved than buying .com or .org domains. Restricted TLDs require verification that the business adheres to co-op principles.

The domain registrar should be able to explain the verification process and answer your questions. The registrar should make this process simple and self-explanatory. You shouldn’t have to search high and low for a phone number, online chat support features or FAQs.

Ready to find your .COOP domain?

Registering your official .COOP domain with EnCirca is easy. Type your desired .COOP domain name in the search box at the top of our .COOP info page to check availability.

If your desired .COOP domain name is available, you can add the .COOP domain name to your shopping cart and check out.

After completing your purchase, you will receive an email from dotCoop to begin verifying your cooperative status.

Once you complete the verification process, the .COOP domain will officially be yours.

Build your site, set up branded .COOP email addresses and showcase your cooperative status to the world!

Cybersecurity Due Diligence: Secure Domain Name Registrars

Mon, 02 Mar 2020 00:00:00 GMT

When conducting cybersecurity due diligence, one of the most important steps is to find a secure domain name registrar. Cyber hijacking is an ongoing online threat that should be considered during the entire cyber due diligence process. It’s not just about protecting access to your web pages. You also need to be concerned about the security of the domain names your company purchases. Domain name registrars are one of the fundamental systems that your business relies on, and their service forms the foundation for everything from your main site to your social media outreach processes.

Choosing the right secure domain name registrar is therefore critical for ensuring the security of your business.

Readily available resources for best practices to avoid hacker mischief fall short. An example is the manual published by the Federal Financial Institutions Examination Council (FFIEC), which includes a chapter on cybersecurity for financial institutions, but it never addresses due diligence in regard to domain name registrars.

This is a fairly large omission.

The bottom line is you could secure domain names through an accredited ICANN registrar yet not have a clue as to what safeguards are in place to protect those names, meaning it's not a secure domain name registrar after all. Here’s why due diligence cybersecurity matters, and what you can do to secure domains and protect your registered domains from becoming a hacker’s playground.

What is ICANN?

ICANN is the Internet Committee for Assigned Names and Numbers. One of the agency’s main tasks is to match domain names with the IP addresses related to them. This directory helps prevent duplications and provides information to ensure that potential buyers know when certain domain names are already held by other entities.

How does this figure into the process of cybersecurity? ICANN issues accreditations to registrars, allowing them to approve and issue new domain names. While there are standards that accredited registrars must meet, they have little to nothing to do with security.

ICANN accredited registrars are much more likely to be secure, but simply being accredited isn't enough to fully protect your domain name. Domain name registrars are critical gatekeepers between your domain name and the rest of the internet. They also hold a vast amount of information on the companies they provide services for, including sensitive data like contact details and banking details. If this information is stolen, it can cause so much damage that both the registrar and the companies it does business with have to close.

Perhaps you assumed that because an ICANN accredited registrar obtained your domain name, that you chose a secure domain name registrar. Secure domain registration alone isn’t enough, however. In fact, that registrar may or may not have sufficient protections to prevent themselves from being hacked or hijacked. In other words, your domain name could be at risk this very moment.

Secure Domain Name Registrars and Third-Party Partners

But that’s not all. There’s another layer of concern. Perhaps your firm isn’t dealing directly with an ICANN registrar. Maybe there’s a third party involved as an intermediary between the firm and the registrar. That adds an additional point of entry for a cyber attack. The more points of entry for a cyber attack, the more vulnerable your domain name and website will become.

This is called “surface area” in the cybersecurity community, and is a crucial factor in how vulnerable you are to cyberattack. The more systems you use, the more likely you are to fall victim to cybercrime.

What if the Intermediary Gets Sloppy with Security?

Several things can happen if the intermediary and/or the registrar don’t practice due diligence in protecting domain names. All a hacker needs is access to the domain name control panel. Once that is established, their fun begins at your expense.

The most likely scenario is that the domain name is pointed toward a different web server. That server may be the host to a copycat site that looks a lot like yours. The users who end up on the copycat site may find themselves infected with malware or some form of virus. There’s also the possibility that the user ends up supplying data that the hacker can use for some other type of scheme, such as login information or credit card details. Whatever the end game, it’s your reputation that suffers.

Additionally, the hacker may take control of what’s known as the administrative email address associated with the domain name. By visiting the original domain and attempting to log in, it’s easy enough to pretend that the current password was forgotten. Instructions to reset the password get sent to the administrative email address, allowing the hacker to make the change.

Your administrator is now locked out and the hacker is free to collect or alter all of the data associated with the site. With financial sites, that means login credentials to customer accounts, data that can be used to steal identities, and whatever other creative malfeasance the hacker can dream up.

Fortunately, there are things that can be done to increase domain security. A number of preventative measures are in the hands of the registrar or third-party partner, but you also have some control. Knowing what you can do to increase domain name security is definitely a topic worth exploring.

How to Investigate the Intermediary’s Due Diligence

The most direct approach to finding out if you have a secure domain name registrar and what sort of security is associated with your domain name is to investigate the protections that the registrar and the third party have in place. One point to focus on is whether or not the party is SOC 2 certified.

What does that mean? The certification affirms that the party complies with standards needed to ensure a measure of safety to clients. Obtaining certification requires successfully completing an audit process. Keeping the certification requires subsequent audits to ensure the party remains in full compliance.

What Can Be Done to Augment Those Efforts? A Cybersecurity Due Diligence Checklist

You can support the security efforts by making the best possible use of resources provided through the registrar and the partner. That might mean employing two-factor authentication that’s offered through the partner, as well as ensuring your firewall provides a second line of defense. This cybersecurity due diligence checklist e shows a few ways to increase security and avoid domain name hijacking. Secure domain registration is just a single part of the process.

Pay Attention to How You Create Your Domain Names: Domain names traditionally should be memorable, but it pays to make them different, while at the same time, sensible and easy to remember. The point here is to come up with a domain name unique enough that a hacker would have trouble incorporating it into pages for a fake site.
Register Using an Email Address That Doesn’t Include the Domain Name: Register with an email address that is unrelated to the domain name. If the name is hacked and the hacker changes the WHOIS data, it’s easier to convince the registrar that you were the original owner and that you were not the one who changed the email information.
Follow Best Practices to Create and Update Passwords: A decade ago, creating passwords was easier, but today’s hacker with modern password-cracking software is too sophisticated for a simple password. Go for a password around 12 characters long, change it every few months, and use multi-factor, or two-factor authentication (MFA or 2FA).Too much for your brain? That explains the growing popularity of encrypted password management software that generates complex passwords, securely stores and supplies them when needed, and reminds you to change them at regular intervals. It’s the best way to stay a step ahead of the bad guys.
Put a Transfer Lock on Your Domain Name: Transfer locks prevent quick transfer of domains away from a registrar as well as a web server. Before the lock can be lifted, it's necessary to provide additional information. Some domain name registrars even require an additional layer of security to transfer your domain name. Such as approval from the original registrant. If you are utilizing tip #2, the hacker would then have to not only obtain access to your domain name management console, but also your email account. Unless the hacker can provide the data and approve the transfer, the lock remains in place.

AI is Your Friend

Artificial Intelligence is changing the way that many things are done in online environments. That includes how to protect domain names. Through a subset of AI known as Machine Learning (ML) that is increasingly built into cybersecurity tools, it’s becoming more feasible to stop attempted breaches. The ML can detect threats as soon as they are underway and take the appropriate countermeasures.

Apply Good ‘Ol Political Pressure to Secure Cybersecurity Due Diligence

Along with the measures that the registrar, the intermediary, and you should take, there’s still the need to put pressure on the FFIEC. Until the Cybersecurity Assessment Tool specifically addresses registrars and their efforts at due diligence, a number of business sectors remain unaware to varying extents of the danger related to lax domain name security. Be polite. Be annoying. Lobby by whatever means necessary for the inclusion of registrars in the manual.

In the meantime, individuals and companies should take steps to ensure that they don’t fall victim to cybercrime via their domain name registrar. You should put in place all the mitigating tools that we’ve mentioned above, but there is only so much you can do to protect a system that is ultimately administered by a third-party company. So you should also ask your domain registrar what they are doing to protect you against attacks, and change providers if you don’t like their answers.

About the Author:

**
**

Samuel Bocetta

EnCirca’s Barrett to Moderate Blockchain Panel at NamesCon

Tue, 28 Jan 2020 00:00:00 GMT

EnCirca’s Tom Barrett will be moderating the Blockchain Panel at NamesCon in Austin, Texas on January 30 at 10am.

The themes of the session include:

How is a blockchain domain different from a traditional DNS domain?
What benefits do blockchain domains bring other than being on a blockchain?
Who controls the blockchain domains. Can anyone take them down?
How do trademark protections work with blockchain domains?
What role does ICANN have to play regarding blockchain domains?

Tom has recruited several Blockchain experts to discuss the opportunities and threats of Blockchain for domaining, including:

Bradley Kam from .CRYPTO’s Unstoppable Domains
Brantly Millegan from Ethereum’s Ethereum Naming Service (ENS)
Tieshun Roquerre from Namebase
Mike Toutonghi from Verus Coin
Christa Taylor from .LUXE’s Minds+Machines

Currently, Tom is the inaugural Chair of the International Trademark Association’s Blockchain Committee with a focus on leveraging Blockchain technology for anti-counterfeiting, global trademark registries, brand identifiers (domain names) and rights protection mechanisms. Tom has been at the cross-section of trademarks and domain names since 1995 when he led the development of a trademark research platform for trademark lawyers.

Tom is the President and Founder of EnCirca, an ICANN-Accredited Registrar formed in 2001 outside of Boston, Massachusetts. EnCirca specializes in partnering with TLD Registries that have restrictive eligibility policies. For example, EnCirca is the leading Registrar for .BANK, .BOT, .PHARMACY and .REALTOR (via its Name Share subsidiary). EnCirca is the only ICANN Registrar that also supports new Blockchain domain names, such as Ethereum’s .ETH and Unstoppable Domains’ .CRYPTO.

In addition to moderating the Blockchain panel, Tom will also be hosting an expert roundtable at NamesCon on Thursday, January 30 at 2pm.

Register valuable, premium .COOP Domains now at EnCirca

Tue, 14 Jan 2020 00:00:00 GMT

The .COOP Registry just released 50+ premium domain names!

Be the first to get these never-before released, valuable generic names.

See the full list of .coop premium names and register today at https://www.encirca.com/coop/

Although these names are generic, the .coop registration rules still apply. .coop is reserved exclusively for co-operatives and cooperative organizations, and the Registry will verify your registration. The registrant will receive an email by dotCoop asking them to provide confirmation or evidence that they are eligible for their .coop registration. The .coop name/s registered by this registrant will be inactive until the registrant has been verified as eligible.

Similar to a .COOP domain for Co-op organizations, a .creditunion domain is a TLD strictly to be used by credit unions.

Credit unions are similar in nature and structure to cooperatives. They are not-for-profit, member-owned financial institutions that accept deposits, make loans, and provide many of the same financial services that a bank does.

However, credit unions are democratically run (as opposed to owned by stakeholders) and return profits back to members with reduced fees, higher savings rates, and lower loan rates. This makes them a safe place to take out loans or keep your savings.

A .creditunion domain is restricted to credit unions (or institutions that serve them) with an office in the U.S. As such, its an instant identifier that your website belongs to your credit union.

Like a .coop domain, registering a .creditunion domain entails a stringent verification process. This gives your website enhanced security, helps your customers quickly and easily confirm that they are communicating with your credit union, and that they are protected from fraud or identity theft.

.creditunion domains are available at EnCirca on a first-come, first-serve basis. For just $150 a year you can register yours today.

.INSURANCE Registry Updates for 12/9/19

Mon, 09 Dec 2019 00:00:00 GMT

fTLD, the Insurance Registry, is currently updating their backend system for the .Insurance TLD.

This update will start today at 1:30 PM EST, and could take up to 6.5 hours to complete. During this time frame, all updates will error out, including Whois and DNS changes.

We recommend that you avoid ANY and ALL updates to your DNS today, especially if you are using third-party DNS providers. Any changes today may result in an error message and/or the changes not applying correctly or at all.

If you have any questions or concerns regarding this issue, please contact support@encirca.com

Discover.bot: An Online Community For Bot Developers

Wed, 20 Nov 2019 00:00:00 GMT

Amazon's Discovery Platform for Artificial Intelligence Applications

Published: November 20, 2019
Author: Samuel Bocetta

The top-level .BOT domain was launched by Amazon in 2018, and has quickly become a success story. The domain is designed to accompany Amazon’s strategy for community-led AI development.

It does this by allowing the developers of bots to publish their creations on a searchable domain. Bots are small, AI-driven pieces of software that allow users to interact with their devices in new and intuitive ways. Some of the most popular bots have been those developed for Amazon’s Alexa personal assistant, which add functionality to the base AI that Amazon provides.

The .BOT domain has gained huge popularity among device skill and bot developers since it gives their bots a defined online identity. Building on this success, Discover.bot is now creating a community space for developers to come together and share their skills.

In this article, we’ll look at the growing community of bot developers, the importance of the .bot domain for them, and how Discover.bot is providing a valuable resource for this community.

Bots and Skills

In our previous look at the .BOT domain, we focused on just one type of bot: those made to work with Amazon’s Alexa. The AI-driven personal assistant, paired with the Echo, has quickly cornered the market for smart speakers. So quickly, in fact, that even Amazon has been surprised by its success.

As we’ve reported, the HOME.BOT site was created to provide a searchable database of Alexa skills, and provides a great way for skills developers to publish their branded bots. The role of bots is not limited to Alexa skills, though. Bots are now being developed that are designed to work with a huge range of other systems, from the productivity suite Slack to video games. Utilizing the .BOT domain will be critical to the success of these bots.

The .BOT Domain

Amazon created the .BOT domain for a very practical reason: the phrase “bot” was the fourth most-registered domain keyword within the .COM domain in 2016. This clearly indicates that there is a growing interest in developing and publishing bots, and suggests that a centralized repository for them would be of critical importance for developers and consumers alike.

The .BOT domain offers a number of key advantages for bot developers. First and foremost, there have been significant concerns over the security of bots developed by third-party developers. These have contributed to broader privacy concerns about Alexa, and to a growing awareness of the problem of spyware in the IoT. Because .BOT domains are limited to verified publishers, this domain provides them with a way of proving that bots are legitimate and safe.

.BOT domains also allow bot developers to give their creations a static Internet identity. Not only does this help developers to brand bots in ways that are appealing to consumers, but also to provide customers with bespoke support. In addition, having a dedicated domain name allows for easier SEO for developers.

In other ways, a .BOT domain works like a standard website domain and comes with all of the security adaptability of a standard website. Owners of .BOT domains can add SSL certification or TLS certification in an identical fashion to other websites, and thereby improve the security of their sites. Setting up and securing a site with SSL is a fairly straightforward process, and every website should be using these protections today. .BOT domains are also compatible with a wide range of Content Management Systems (CMSs) that most people in the industry are already familiar with. All of these factors make the .BOT domain a powerful tool for publishing software.

Building A Community: Discover.BOT

It is in this environment that Discover.BOT has been launched. The site aims to capitalize on the growing interest in bots and the subscription-based software (SaaS) model. Like many other SaaS applications, Discover.BOT is built on Amazon Registry Services, and its concept for the site is ambitious. The site aims to provide a central resource center for professional bot developers and enthusiastic amateurs alike. It has been carefully designed to be platform agnostic, in order to encourage participation from as many community members as possible.

Though the site is still quite new, it has already amassed widespread support from the community. This is not surprising, given the size of the bot development community and the lack (until now) of a dedicated space for them to share resources and skills. At the moment, the site is focusing on publishing articles and guides on bot development, but as it develops it is expected that it will also become a space for developers to share creations. Besides the intention to build a community, the site also acts as a powerful advertisement for the .BOT domain, and stresses that bot developers should take advantage of this domain.

The .BOT Revolution

At the broadest level, Discover.BOT is the clearest indication yet of what Amazon plans to achieve with its AI strategy. The site, in building a community around bot development, is actively encouraging amateur developers to try its hand at designing and testing its own bots.

If this strategy works, it could have huge implications for the way in which AI technologies are used. AI solutions are already disrupting B2B marketing, but to date have been designed and built by tech giants. If Amazon can encourage everyday enthusiasts to create AI tools, we may see an explosion in how common these tools are, and what they are capable of. In this context, Discover.BOT is clear sign of things to come.

We will keep you posted as Amazon continues to develop the .BOT Online Space. To learn more about .BOT, please visit https://www.encirca.com/bot/

About the Author:

Samuel Bocetta

Samuel Bocetta is a former security analyst for the DoD, having spent 30-plus years bolstering cyber defenses for the Navy. He is now semi-retired and educates the public about security and privacy technology. Much of his work involved penetration testing Navy ballistic systems. He analyzed networks looking for entry points, then created security-vulnerability assessments based on findings. He also helped plan, manage and execute sophisticated "ethical" hacking exercises to identify vulnerabilities and reduce the risk posture of enterprise systems.

Amazon starts to reveal plans for .BOT TLD

EnCirca’s launches .BOT Accelerator at NamesCon

Do software developers need .DEV?

.ETH domains make blockchain wallets user friendly

Fri, 15 Nov 2019 00:00:00 GMT

Although blockchain wallets are the next big thing in storing assets, existing wallet names are cumbersome to share and communicate. Luckily, a .ETH domain name can be mapped to a wide variety of assets on the Blockchain, making it easier for customers to find and pay you.

Why .ETH domains?

Want to make it easy for customers to get to your wallet?
Instead of having to type out a long string of up to 35 numbers, you can add a .ETH domain and map it to your wallet. So, instead of remembering a long string of hexadecimal numbers, your customers can go to somename.eth to get to your wallet.

Have a trademark that you want to protect in the blockchain world?
.ETH domain names are decentralized, anonymous and immutable. This means that once a domain name has been added to the Blockchain, there is no way for brand owners to forcibly reclaim the ownership of the domain name. And there is no central authority, such as Registrars, Registries or Law Enforcement to turn to reclaim an infringing domain name.

Register .ETH Today!

EnCirca makes it easy to register a .ETH domain name.

No need to use ether to purchase domains; we accept credit cards, paypal, and bitpay.
Register a .ETH name, and EnCirca will keep it safe in our secure wallet, or transfer it to your wallet.
Names must be 3 characters or more. 3 and 4 character names are premium priced.
Some names may be reserved.

Pre-Reg for .ETH short character domains ends Friday at EnCirca

Mon, 12 Aug 2019 00:00:00 GMT

Pre-registration for 3 - 6 character .ETH domain names has been extended, and EnCirca is accepting applications until Friday. Go to www.encirca.com/eth/ to pre-register your short character domain names today! The updated .ETH schedule is below:

.ETH Prereg Info

During checkout, please provide an existing domain name matching the .ETH domain name you are applying for.
The matching domain must be a DNS second-level domain (2LD) and must have been registered on or before May 4, 2019
Before pre-registration is finalized, you must add a special TXT record to the DNS for your matching domain. More details will be provided after checking out.
More information will be provided about the other phases of .ETH Preregistration soon.
Have a 7-character or longer .ETH domain to register? Go to www.encirca.com/eth/ to register right away.

About .ETH

.ETH initially launched in May, 2017 with domain names limited to seven or more characters in length. Even with this restriction, over 300,000 domains were allocated.

In the summer of 2019, Ethereum is relaxing the length restriction and will be releasing domains that are 3 to 6 characters in length.

.ETH (Ethereum) short name preregs extended until Friday, Aug 16 at EnCirca

Thu, 08 Aug 2019 00:00:00 GMT

.ETH Pre-Registration Timeline has changed!

Pre-registration for 3 - 6 character .ETH domain names has been extended, and EnCirca is accepting applications until August 16th. Go to www.encirca.com/eth/ to pre-register your short character domain names today!

During checkout, please provide an existing domain name matching the .ETH domain name you are applying for. The matching domain must be a DNS second-level domain (2LD) and must have been registered on or before May 4, 2019
Before pre-registration is finalized, you must add a special TXT record to the DNS for your matching domain. More details will be provided after checking out.
More information will be provided about the other phases of .ETH Preregistration soon.
Have a 7-character or longer .ETH domain to register? Go to www.encirca.com/eth/ to register right away.

About .ETH

.ETH initially launched in May, 2017 with domain names limited to seven or more characters in length. Even with this restriction, over 300,000 domains were allocated.

In the summer of 2019, Ethereum is relaxing the length restriction and will be releasing domains that are 3 to 6 characters in length.

Sign up for our Blockchain Domain Name Webinar

Thu, 18 Jul 2019 00:00:00 GMT

What: Understanding Blockchain Domain Names

When: July 24, 2019 @ 2 PM EST & July 31, 2019 @ 2PM EST

Sign up for July 24

Sign up for July 31

You might not understand how crypto-currencies or blockchain wallets work, but Facebook's announcement of their crypto-currency, Libra, is a clear signal that these new technologies will soon become ubiquitous. Facebook's introduction of its own crypto-currency to its 2 billion users means mass adoption of crypto-currencies and digital wallets are on the horizon.

This has implications that trademark owners need to be aware of.

One example is blockchain digital wallets for sending and receiving payments. These are represented as long unreadable strings such as: "1FloatSFTRjhEeobR5637HET76bprJK23T".

These blockchain wallet identifiers are cumbersome to share. What is needed are human-friendly readable names. Essentially, blockchain wallets need domain names.

Blockchain domain names are not regulated like .COM or .ORG domain names. So, the traditional trademark protection mechanisms to prevent cyber-squatting of brand names are nonexistent. Thus, brand owners are advised to defensively protect their trademarks in the .ETH top-level domain as soon as possible.

We've identified over a dozen active blockchain domain extensions, including: .BIT, .COIN, .EMC, .ETH and .ZIL. With these blockchain domain names, sending and receiving crypto-currencies are now as easy as sharing a human-readable wallet such as Shoes.ETH or News.ZIL instead of a long unreadable string. To the end-user, these URLs are as easy to enter into the browser as EnCirca.COM.

Blockchain domain extensions will likely proliferate as more and more companies unveil their blockchain wallets and currencies. Clearly, trademark enforcement for blockchain domains is going to be much harder compared to ICANN regulated domains.

To learn more, sign up for EnCirca’s webinar next Wednesday on July 24 here or Wednesday July 31 here

Announcing OPTUS.BANK!

Wed, 17 Apr 2019 00:00:00 GMT

Another community bank has rebranded to a .BANK domain name.

The .BANK domain extension is one of 1200 new top-level-domain extensions launched a few years ago to provide consumers and businesses greater choices for internet addresses.

What distinguishes .BANK from most of the other extensions is that it has strict eligibility criteria and mandatory security requirements for all active websites. As a result, websites ending in .BANK are considered more secure by consumers than bank websites ending in .COM or .NET.

With 2,800 .BANK registrations, it is estimated that 40% of U.S. community banks have registered .BANK domain names. Many of these domains are more intuitive and shorter than the bank’s existing .COM or .NET domain name.

It is estimated that 400-500 community banks have undergone the re-branding exercise to .BANK. Most of these have been EnCirca clients.

The latest one is the South Carolina Community Bank with a legacy .NET website at www.sccommunitybank.net. Last month, the bank announced their new brand-new website at www.OPTUS.BANK.

To find out more about .BANK domains, visit https://bank.encirca.com/

Amazon starts to reveal plans for .BOT TLD

Thu, 11 Apr 2019 00:00:00 GMT

Amazon has announced a discovery tool for Alexa skills using HOME.BOT.

The .BOT domain extension is part of Amazon’s strategy for the artificial intelligence market. Eligibility is currently limited to owners of published software bots. Amazon intends to utilize .BOT as a discovery tool for artificial intelligence applications.

Alexa has rapidly become the market leader in Smart Speakers. Smart Speakers are the latest sales channel for companies to sell products and services. As of January 2019, there are over 75,000 applications or “Skills” that are currently available on Alexa.

The HOME.BOT tool enables consumers to discover new and interesting Alexa skills that help them complete a task or solve a problem and serves as a new way for customers to discover skills, providing them the ability to browse skills through a rotating selection of Amazon-curated tasks and skills collections. There’s a “Find a recipe” task, for instance, which features skills having to do with cooking and meal planning, and “Get organized”, which contains skills that help with creating to-do lists for tasks such as shopping, groceries and daily chores. Consumers can also discover skills by simply typing what they are looking for within the HOME.BOT chat interface. HOME.BOT can search the entire Alexa skills catalog and surface the skills that can help the consumer, where and when they want it, to create an optimal and seamless discovery experience.

More and more brands are developing “branded” Alexa skills. For example, the “Find a recipe” skill may return a response from the Food Network or Good Housekeeping magazine.

Alexa skills related to domain names are sparse but a few early pioneers are offering Alexa skills for name availability checks.

We will keep you posted as Amazon continues to develop the .BOT Online Space. To learn more about .bot, please visit https://www.encirca.com/bot/

Register over 50,000 released .BABY domains at EnCirca

Tue, 02 Apr 2019 00:00:00 GMT

.BABY has just relaunched! They're celebrating by releasing over 50,000 domains today.

These domains were previously reserved or unavailable to register.

But now they're available at rock-bottom prices on a first-come, first-serve basis. Sweet names like book.baby, showers.baby and 2019.baby can be yours for only $75.

Register your special .baby domain now at https://www.encirca.com/baby/

Some of the names being released include:

book.baby
showers.baby
sweet.baby
alex.baby
bibs.baby
2019.baby
have.baby
host.baby
got.baby
want.baby
cute.baby
2nd.baby
great.baby
business.baby
football.baby
longisland.baby
funny.baby
deals.baby
celebrity.baby
company.baby
big.baby
has.baby
law.baby
top.baby
toy.baby
cool.baby
dance.baby
beautiful.baby
800.baby
military.baby
sport.baby
sleeping.baby
budget.baby
schedule.baby
unique.baby
adored.baby
whose.baby
silly.baby
hopeful.baby
city.baby
winter.baby

See the full list of domain names here.

New .INC Registrants get over $2500 in member benefits

Fri, 29 Mar 2019 00:00:00 GMT

.INC is offering new registrants a long list of great incentives once they register their domains!

All .INC domains will include more than $2,500 free member benefits from industry-leading partners like WeWork, LegalZoom, Square, Intuit, Google Ads, Delta Air Lines, Quickbooks, Yubico, and more.

The term “Inc.” is synonymous with business in nearly every part of the world. In fact, 60 percent of company names on the NYSE and NASDAQ end in “Inc.” Now any business, incorporated or not, can have an .INC domain and gain instant credibility online.

It's easy to get a short, memorable name for your organization. All .INC domains, including one and two characters, are available now on a first-come, first-serve basis. No restrictions, no premium pricing.

Show the world you mean business! .INC is currently in Sunrise for Trademark Owners until April 30th. EnCirca is also offering all other phases, including Pre-Registration. Find out more at https://www.encirca.com/inc/

EnCirca launches .BOT Accelerator at NamesCon

Tue, 29 Jan 2019 00:00:00 GMT

Las Vegas- January 29, 2019 - EnCirca announced a .BOT Accelerator in conjunction with the 2019 NamesCon event in Las Vegas, USA. The .BOT Accelerator allows you to register .BOT domain names before finalizing your bot.

The .BOT extension is part of Amazon’s strategy to become the Internet's discovery platform for verified and trusted artificial intelligence applications. Artificial intelligence applications are becoming ubiquitous. A study last year by Imperva found that bots are responsible for 52% of all web traffic. With rampant growth, there has yet to be a clear path to identifying these bots and their intent. Tech giant, Amazon is stepping in to fulfill this need with the .BOT domain name registry.

To acquire a .BOT domain name, you first must create a software bot. Then each bot is verified by Amazon. After verification, you then proceed to register your desired domain name, receiving placement into Amazon's .BOT database of trusted artificial intelligence applications.

Many businesses and trademark owners simply want to first secure their brand names and industry keywords in .BOT before taking the time to fully develop their bot apps. Waiting until your bot development is completed, risks having someone else grabbing your brand or desired domain name. To address this risk, EnCirca launched the .BOT Accelerator.

The .BOT Accelerator helps you quickly get your bot started and a domain name registered in under five minutes, giving you ample time to develop the bot you want.

To learn more, visit https://www.encirca.com/bot

Do software developers need .DEV?

Thu, 17 Jan 2019 00:00:00 GMT

Well, some developers have been using .dev as a testing platform for years now on local machines.

Historically, .dev has been the realm of programmers who needed a fake domain for programmer testing. The domain never really existed, they just told their computers to pretend it does. But once Google Registry added .dev to their group of TLDs (which include .app and .page) the days of programmers using .dev for testing were numbered. Even as far back as 2015, savvy developers figured out that Google meant business. And in 2017, Google updated Chrome to add HSTS to .dev

Google Registry offers .dev as a secure domain

Starting today, Google is offering .dev as a secure domain for developers and technology. To ensure that .dev is secure, Google just launched .dev and added the whole TLD to the HSTS preload list. This means registrants will have to provision and set up SSL certificates in order for their content to be loaded in modern browsers.

.dev Registration Schedule

Sunrise: Until February 19th, only registrants with trademarks in the TMCH can register .dev.
Early Access: Pay a higher price to secure a desired .dev domain early.
General Availability starts on February 28th. Anyone can register .dev.

For more information on .dev, go to EnCirca's .dev page

.HOMES Registration Sale until April 15th

Tue, 15 Jan 2019 00:00:00 GMT

Special Pricing: Just $9.99 per year

Register at https://www.encirca.com/homes/ today!

Offer for 1st year, new registrations only. Multiple years and renewals are at regular price of $40.

.HOMES – Uniquely Memorable

A .homes domain is the perfect domain for anyone with an interest in the real estate industry. Consumers are more likely to visit websites with information and content relevant to their searches. .Homes domains clearly define the business and industry right in the website address also making it very easy for your customers or prospects to remember and find online. A unique .homes domain helps you stand out in a crowded sea of .coms, creating a memorable connection between you and your audience.

Happy New Year 2019!

Mon, 31 Dec 2018 00:00:00 GMT

Happy New Year from EnCirca.

Wishing you all the joys of the season and happiness throughout the coming year.

It has been a pleasure helping you reach your goals for 2018, and we look forward to contributing to your success next year.

To help you succeed in 2018, EnCirca:

- Launched new TLDs, bringing our total offerings to over 450 domains. New names include: .app, .charity, .fan, .icu, .llc, .luxe, .page, .realestate, .sport
  - Refreshed our website with a brand-new look
Updated our website security to include multifactor and other features

What’s new for 2019?

After two years of development, EnCirca will finally be rolling out its new technical infrastructure in 2019. EnCirca’s new platform will include many new security features to ensure your domain names are safe from hijacking and malicious activities. Stay tuned for more details in the coming months.