There seems to be some confusion about NIS-2. Some registrars, like Openprovider, are already implementing Article 28 of the directive even though it hasn't been transposed into member state law.
What is Article 28 again?
Article 28 requires entities that offer domain name registration such as the registries, the registrar (us), and you, to verify and validate domain name registrants.
We will most likely need to confirm whether the registrant's email address is responsive, similar to the ICANN validation and verification process for gTLD domains since 2013.
Article 28 does not differentiate between ccTLDs and gTLDs.
Realtime Register is a …
How to be compliant and prevent cybercrime at the same time?
In the domain registration industry, balancing regulatory compliance with robust security measures is essential. As an ICANN accredited registrar, Realtime Register has implemented a system that meets the ICANN RAA 2013 requirements for verification of registrant data and strengthens defences against cybercrime as required by the NIS-2 at the same time.
ICANN 2013 RAA Email Validation Requirement
The Internet Corporation for Assigned Names and Numbers (ICANN) introduced the 2013 Registrar Accreditation Agreement (RAA), which mandates registrars to validate and verify specific WHOIS data fields, including email addresses. This process …
What is going on?
Since 2020, criminal groups from Vietnam have re-registered domain names and set up forwarding services for such domains to obtain social media credentials and more.
What is the size?
Our conservative estimate is that these criminals re-register around 50.000 domain names each week since 2020.
Why is it a problem?
They mostly use stolen credit cards to pay for these domain names, but we have witnessed other forms of payment fraud.
What is the impact on a reseller or registrar?
We have seen registrars and resellers incur massive financial losses.
Sometimes, we see resellers or registars …
We’re happy to announce the launch of PerfectSSL, our very own white-labeled SSL brand, certified and backed by the robust infrastructure of DigiCert. PerfectSSL is designed to provide you with a cost-effective solution for your customers’ web security needs.
Realtime Register has long been a provider of SSL certificates, partnered with multiple renowned certificate authorities to ensure the highest level of security for websites and online transactions. With the recent price adjustments by Sectigo, we understand the importance of maintaining affordability without compromising on quality.
In light of this, we’ve leveraged our longstanding relationship with DigiCert to bring …
Today we officially launched our Premium DNS service that is designed to elevate the performance, accessibility, and security of your customers' websites. Our cutting-edge solutions utilize Anycast routing methodology with over 40 locations worldwide, and network addressing, where a single destination IP address is shared by multiple servers (PoPorNodes).
With our Premium DNS service, you can ensure that websites remain online even if a DNS server or zone experiences downtime. Our service enhances TTFB (time to first byte) by connecting visitors to the nearest name server location on our network, resulting in lightning-fast response times. Additionally, our solutions …
We are excited to announce our latest feature - Domain Bundling! You can now easily offer free bundled domains to your customers, providing added value and a unique offering.
For every existing domain in your portfolio, as well as any newly registered domains or transfers, you can easily register the equivalent in a promotional extension for free. This means you can offer your customers multiple domains at no extra cost for the first year, with no limit on the number of bundles.
Some of the benefits of domain bundling:
- Increase sales: Offer popular domain extensions as part of a …
Recently we added the ScamAdviser feed to our DNS Abuse Monitoring system. Based on the input and experience from our customers, I thought it would be helpful to cover a few items.
ScamAdviser is a reputation-based feed that differs from the Google Safety Browsing feed. If Google marks a domain name as malicious, it is no longer accessible as many browsers will now warn internet users not to visit the website.
ScamAdviser will inform you if the reputation of the domain name is poor. Of course, a lousy score depends on many factors, and ScamAdviser uses plenty. But a poor …
We have added an option to automatically lock domains created or transferred in with the setting "Auto-add ClientTransferProhibited".
You can enable this in your account details.
Next to that, you can now choose to "hide optional terms" in the contact validation emails sent to your customers. By default all available registry terms are presented. By enabling hide optional terms, only the specific terms for the requested TLD will be shown in the email sent after the create/transfer.
You can enable this in your brand details.
Last month, Realtime Register partnered with the Global Cyber Alliance (GCA) to expand the Realtime Register Insights Domain Abuse Platform capabilities.
At Realtime Register, we have been collecting abuse/intelligence feeds like Pokémon this year. By adding the GCA Domain Trust Feed we are now up to 72 feeds. The information gathered we make available to our resellers, providing them with deep insight into how criminals are using their services.
However, the Domain Trust Feed is not just a feed; it is much more.
Let’s get technical
The GCA uses the Quad9 feed. Quad9 protects users from accessing known malicious websites, …
RiskReact is a service of Realtime Register B.V. with a focus on security threats, cyber intelligence & OSINT.
Last year a registrar employee was the victim of social engineering resulting in an unauthorized transfer of a domain name.
A few months ago, a registrar employee was the victim of a spear-phishing attack, resulting in a DNS hijack.
A possible solution to counter such issues and other risks is a Domain Name Registry Lock.
Domain name registry locks are available for many TLDs. They all cover the same basic level of protection.
- Domain name update lock, preventing unauthorized or accidental updates …
