Knowledge Base & Support Center
Answers across registry operations, DNS, Web3, and the bridge between them
All Questions
Browse our complete knowledge base or use search to find specific answers
Unregistry is the bridge between Web3 and DNS, an integration platform that connects blockchain name systems with the global domain ecosystem. We provide registry operations, EPP systems, DNS infrastructure, and on-chain record services for registry operators, registries, and registrars. On the Web3 rail, we integrate with established name systems rather than issuing consumer chains of our own.
Registry services manage the authoritative database for TLD domains and operate the infrastructure (DNS, EPP, WHOIS). Registrar services interface with end customers for domain sales and management. Unregistry provides both: we operate registry infrastructure for specific TLDs and provide white-label registrar software/services that others can use to sell domains to end customers.
We integrate Web3 name systems rather than operating a consumer wallet-name registry ourselves. For registries and registrars, that means on-chain anchors for DNS names, smart-contract registry sync, wallet and payment record APIs, and marketplace integrations, the infrastructure that lets a name live on both rails.
Yes, we provide complete white-label registry and registrar software platforms. This includes EPP systems, DNS infrastructure, billing integration, customer management, and dashboard solutions. Organizations can use our technology to operate their own registry or registrar business with their branding, pricing, and customer relationships while leveraging our proven infrastructure.
Our platform supports any EPP-compliant registry, so partners can serve virtually any extension. On the Web3 rail, we integrate with established name systems rather than issuing extensions of our own.
Our registry infrastructure provides enterprise-grade DNS hosting with global anycast, EPP registry systems, WHOIS/RDAP services, DNSSEC support, real-time zone generation, automated escrow, abuse handling, and 24/7 monitoring. We maintain 99.99% uptime SLA and full ICANN compliance for all operated TLDs.
We provide comprehensive REST APIs and EPP interfaces for all services. Integration options include domain operations (check, register, transfer, renew), DNS management, billing integration, and real-time reporting. We offer SDKs for major programming languages, sandbox environments, and detailed documentation. Our APIs support both registrar operations and direct registry functions.
We offer various partnership models: white-label software licensing, managed registry services, registrar platform access, and custom integrations. Requirements vary by partnership type, from simple reseller agreements to full ICANN registrar accreditation support. Contact our partnerships team to discuss your specific needs and market objectives.
Yes, we handle all ICANN compliance requirements for our operated TLDs and provide compliance consulting for partners. This includes registry agreement adherence, reporting obligations, policy implementation, audit support, and ongoing regulatory updates. Our compliance team ensures all operations meet ICANN standards and contractual obligations.
One platform, two rails. On the DNS side: EPP provisioning, DNSSEC-signed zones, and registrar-channel distribution. On the Web3 side: on-chain anchors, smart-contract registry sync, and wallet record APIs. Both are synchronized to a single source of truth, so a name works everywhere, no wallet required to use it, no compromise on verifiability. See The Bridge on the homepage and the web3-dns-bridge category here.
We operate enterprise-grade DNS infrastructure with global anycast networks across 30+ locations. Services include authoritative DNS hosting, recursive DNS, DNSSEC signing and validation, GeoDNS routing, load balancing, DDoS protection, and real-time analytics. Our infrastructure supports both traditional and Web3 domain resolution.
Yes, our comprehensive DNS API allows full record management including A, AAAA, CNAME, MX, TXT, SRV, CAA, and custom records. Features include bulk operations, zone management, DNSSEC automation, real-time updates, and integration webhooks. API access is available for both our managed DNS service and for registry/registrar partners.
We provide automated DNSSEC signing with key management, rotation, and DS record coordination with parent zones, for traditional TLDs and for integrated alternative naming systems. DNSSEC is also the trust anchor for the registrant-directed association model we proposed to ICANN: a record in a signed zone proves who published it.
DNS changes propagate within our infrastructure in under 30 seconds globally due to our anycast network design. External propagation depends on ISP caching, but our optimized TTL settings and global presence ensure faster updates than traditional setups. We provide real-time propagation monitoring and can adjust TTLs for time-sensitive changes.
Yes, we support custom nameserver hostnames for branded DNS services. This includes glue record management, IP assignment coordination, and automated setup. Custom nameservers are available for registry operators and enterprise customers.
We offer multiple DNS hosting tiers: free basic DNS for registry domains, premium managed DNS with advanced features, enterprise DNS with SLA guarantees, and white-label DNS for partners. All plans include global anycast, DNSSEC, API access, and real-time analytics. Custom solutions available for high-volume requirements.
Our DNS platform provides comprehensive analytics including query volumes, geographic distribution, record type breakdown, response times, error rates, and security events. Real-time monitoring with customizable alerts, historical reporting, and API access for data integration. Enterprise customers receive detailed performance and security reports.
Our GeoDNS service routes users to optimal servers based on geographic location, improving performance and enabling content localization. Supports continent, country, state/region, and custom polygon targeting. Includes health monitoring, automatic failover, and load distribution. Ideal for CDN integration and global application deployment.
DNS security features include DDoS protection, query rate limiting, malicious domain blocking, DNS filtering, encrypted DNS (DoH/DoT), response policy zones, and threat intelligence integration. We monitor for DNS abuse, provide security reports, and can implement custom security policies for registry operators.
Zone management for partner registries runs through registry operations tooling and API access, provisioned by arrangement. Features include bulk record operations, zone templates, BIND import/export, automated backups, and change history, for both standard DNS zones and zones carrying Web3 records.
Registrar-grade integration. EPP provisioning, domain lifecycle, DNS management, and webhooks, is provisioned by arrangement for approved registrars. See /api/ for the capability surface and /contact/ to discuss access and the OT&E environment.
Our EPP system follows RFC 5730-5734 standards with extensions for premium domains, DNSSEC, and Web3 features. Integration requires X.509 certificates, IP whitelisting, and ICANN-compliant procedures. We provide OTE (test environment), integration guides, and technical support. EPP access is available for accredited registrars and authorized partners.
We provide official SDKs for Python, Node.js, PHP, Go, Ruby, Java, and .NET. SDKs include full API coverage, error handling, authentication, and examples. All SDKs are open-source on GitHub with community contributions welcome. We also maintain CLI tools and Postman collections for development and testing.
We support multiple authentication methods: API keys for basic access, OAuth 2.0 for delegated access, JWT tokens for service-to-service, and mTLS for EPP connections. All authentication includes rate limiting, IP restrictions, and audit logging. Best practices documentation and security guidelines are provided for all integration types.
Yes, we provide webhook notifications for domain events (registrations, transfers, renewals, expirations), DNS changes, billing events, and security alerts. Webhooks support HMAC signature verification, automatic retries, and custom payloads. Configuration available via API or dashboard with delivery monitoring and replay capabilities.
Rate limits vary by service tier and operation type: Free tier (100 req/hour), Standard (1,000 req/hour), Professional (10,000 req/hour), Enterprise (custom limits). Burst allowances and different limits for read vs write operations. Headers indicate remaining quota, and we provide rate limit increase options for qualified use cases.
We provide comprehensive sandbox environments including OTE for EPP testing, API sandbox with test data, and isolated DNS environments. Sandbox mirrors production functionality without real charges or domain registrations. Perfect for development, integration testing, and training before production deployment.
Bulk operations are supported through dedicated API endpoints and batch processing systems. Operations include bulk registrations, updates, and DNS modifications. Large operations are processed asynchronously with progress tracking and result downloads.
Our APIs return standardized error responses with HTTP status codes, error objects containing codes/messages/details, and unique request IDs for support. We provide detailed error documentation, recommended retry strategies, and examples for common scenarios. Proper error handling ensures reliable integration and better user experience.
We offer comprehensive integration support including technical documentation, example code, integration consultation, dedicated support channels, and professional services for complex integrations. Our team assists with architecture planning, best practices, performance optimization, and troubleshooting throughout the integration process.
Our pricing varies by service type: registry operations (annual fees plus per-domain), registrar software licensing (monthly/annual SaaS), API access (tiered by usage), and custom solutions (negotiated). We offer transparent pricing with no hidden fees, volume discounts for partners, and flexible payment terms for qualified organizations.
We accept major credit cards, wire transfers, ACH payments, and cryptocurrency for select services. Enterprise customers can establish terms with Net 30/60/90 payment options. All payments are processed securely with PCI DSS compliance and detailed invoicing for accounting purposes.
Yes, we provide tiered volume discounts based on annual commitments, domain volumes, and service levels. Discounts start at 1,000 domains annually with increasing benefits at higher tiers. Custom pricing available for significant volumes and strategic partnerships. Contact our sales team for specific volume pricing.
Registry operation costs include setup fees, annual infrastructure costs, per-domain fees, and compliance services. Pricing depends on TLD type, expected volume, and service requirements. We provide detailed cost breakdowns and ROI analysis for potential registry operators. Custom packages available for compound and Web3 TLDs.
Our registrar/registry software is available through SaaS licensing with monthly or annual terms. Licensing includes software access, infrastructure hosting, updates, support, and basic customization. Enterprise licenses include source code access, self-hosting options, and extensive customization capabilities.
Setup costs vary by service complexity: basic API integration (minimal), registrar platform setup ($5K-15K), custom registry operations ($25K-100K+). Costs include technical integration, testing, training, and initial configuration. Many services offer reduced or waived setup fees for qualified long-term commitments.
Yes, we provide revenue sharing options for qualified partners, particularly for integration partnerships and significant market development initiatives. Terms depend on partnership scope, market development commitments, and mutual value creation.
Contract terms vary by service: software licensing (1-3 years), registry operations (3-10 years), API access (month-to-month or annual). All contracts include SLA guarantees, support provisions, and clear termination procedures. We accommodate various business needs with flexible terms for qualified organizations.
We maintain full cost transparency with detailed pricing documentation, no hidden fees, and clear service boundaries. All costs are outlined upfront including setup, ongoing services, overage charges, and optional add-ons. We provide cost calculators and detailed proposals for complex deployments.
Payment terms range from monthly credit card payments to annual prepayment discounts to Net 30/60/90 terms for qualified enterprises. We accommodate various business models including prepaid credits, consumption-based billing, and custom arrangements for strategic partnerships.
Web3 domains are blockchain-based domain names offering decentralized ownership and control. Our .u domains bridge traditional DNS and Web3, providing permanent ownership, censorship resistance, wallet address simplification, decentralized website hosting via IPFS, and portable identity across Web3 applications. They work in both traditional browsers and Web3 environments.
The .u names are part of the wider Web3 naming ecosystem that Unregistry integrates with, we don't operate the .u consumer registry. What we provide is the bridge work: publishing Web3 names into global DNS, anchoring DNS names on-chain, and keeping both records synchronized so one name works everywhere.
@u handles belong to the broader u.cash Web3 ecosystem, not a service Unregistry operates. Our role is bridge infrastructure: resolution integrations, on-chain record APIs, and the registry-side plumbing that lets handles and names work across both the Web3 and DNS worlds.
Our Web3 infrastructure supports Ethereum, Polygon, BNB Chain, Avalanche, and Solana with additional chains planned. We provide cross-chain compatibility through bridge services and unified APIs. Domain ownership and transactions can occur on multiple chains while maintaining consistent identity and functionality.
Our Web3 domains are minted as NFTs providing true ownership - they exist in your wallet and can be transferred peer-to-peer. Unlike traditional domains, there are no renewal fees or risk of expiration. The NFT contains metadata linking to domain configuration and can be traded on compatible marketplaces.
We provide IPFS integration for decentralized website hosting. Users can upload content to IPFS, and we automatically configure DNS and blockchain records for seamless access. This enables censorship-resistant hosting while maintaining compatibility with traditional browsers through our gateway services.
Our domains support wallet address mapping for 100+ cryptocurrencies, enabling payments to human-readable names instead of long addresses. Integration includes ENS compatibility, FIO Protocol support, and direct wallet connectivity. Users can receive payments, sign transactions, and interact with DApps using their domain identity.
Yes, our .u domains work in all browsers through our DNS gateway service. We maintain traditional DNS records alongside blockchain ownership, ensuring universal accessibility. Users don't need special browser extensions or Web3 tools to visit .u websites, making them truly hybrid domains.
We provide comprehensive APIs for Web3 domain management including minting, transfers, metadata updates, wallet address management, IPFS pinning, and resolution services. APIs support both traditional REST and Web3-native interfaces with support for popular Web3 libraries and frameworks.
Yes, as NFTs, our Web3 domains can be traded on compatible marketplaces including OpenSea, Foundation, and others. We provide marketplace integration tools, valuation services, and transfer mechanisms. Domain trading includes automatic ownership updates and configuration transfer to new owners.
The bridge is the integration layer that connects blockchain name systems with the global DNS. Unregistry synchronizes the two so a single name works everywhere, resolvable in every browser and mail client through DNS, and verifiable on-chain by wallets and Web3 apps. Registry service providers, registries, registrars, businesses, and end users all work from one platform instead of two disconnected worlds.
EPP transactions and smart-contract events are synchronized to a single source of truth. When a name is registered, renewed, or transferred on one rail, the change is published to the other. DNS zones and on-chain registries never drift apart. Registrars integrate once through EPP + REST and get both rails.
Yes. Web3 names are published into worldwide DNS, so they resolve in every browser, mail client, and API with no wallet, plugin, or browser extension required. The same name simultaneously serves as a website address, a wallet handle, and a verified login.
An on-chain anchor is a cryptographic record of a DNS domain written to a blockchain. It proves who owns the name at any point in time, enables programmable transfers, and makes the domain's records readable by any Web3 application, while the name keeps working normally in DNS.
Trust runs on both rails. DNSSEC signs the DNS side of a name; on-chain signatures sign the Web3 side. Unregistry aligns the two so resolvers, registrars, and registries can verify integrity end-to-end, one name, independently verifiable in both worlds.
No. One integration covers both shelves. Registrars connect through a single EPP + REST interface and can sell traditional TLDs and Web3 names from the same catalog, with provisioning, transfers, and renewals handled uniformly across both rails.
Yes. Unregistry provides white-label bridge infrastructure, registry service providers can bolt Web3 resolution and on-chain records onto their existing registry stack without building blockchain tooling in-house. Your brand, our bridge.
Registration, renewal, and transfer flows can be driven by APIs and smart contracts, automation-ready for registrars and registries. The same lifecycle actions you perform over EPP can be triggered programmatically on-chain, so business logic and naming stay in lockstep.
A proven association is a machine-readable claim, published by the registrant in their own DNS zone, that a DNS domain and a Web3 name are controlled by the same party, and it carries a reciprocal control-proof: a challenge-response signature or on-chain verification proving the registrant actually holds the Web3 name. A declared association is the registrant's published pointer without that proof, useful, but presented as a choice rather than a fact. Keeping the two visibly distinct is what prevents the mechanism from becoming an impersonation vector. A verified association answers "is example on this network the same party as example.com?" with a mechanical yes.
DNSSEC is the trust anchor. A record in a DNSSEC-signed zone proves the registrant published it and that it was not altered in flight, anyone can verify that independently. An association in an unsigned zone cannot prove its origin, so verifiers should treat it as unauthenticated: fail-safe, the same way a name whose states cannot be reconciled should stop resolving rather than resolve differently in different places. Most major DNS operators support zone signing today, so this is configuration, not new machinery.
That is one of the main use cases. A proven association between a DNS domain and a Web3 name gives payment apps a verified mapping: send 100 USDC to a verified example.com and the wallet resolves the domain to the on-chain name its registrant provably controls, with the DNS accountability stack (registrant data, dispute processes) standing behind it. Merchants get a name their customers already know how to type; users get a counterparty they can verify. This is the bridge between Web3 payments and ordinary domains.
We offer various partnership models: technology licensing for registrar/registry software, white-label platform solutions, managed service partnerships, revenue sharing for TLD development, system integration partnerships, and custom solution development. Each partnership is structured to create mutual value and market success.
We provide complete registrar platform solutions including software licensing, ICANN accreditation support, technical infrastructure, billing systems, and operational guidance. Partners can launch registrar services quickly using our proven technology while maintaining their brand and customer relationships.
Yes, we provide complete registry operations as a service including technical infrastructure, ICANN compliance, EPP systems, DNS hosting, escrow services, and 24/7 monitoring. This allows TLD operators to focus on business development while we handle technical operations and compliance.
Registry service providers can offer both rails under their own brand. EPP-based domain operations, DNS hosting, on-chain record services, and integration APIs. Scope and components are provisioned by arrangement; talk to us about the platform surface that fits your business.
Yes, we offer professional integration services including custom API development, system integration, data migration, training, and ongoing support. Our team works with partners to ensure smooth integration with existing business processes and maximum value realization.
Partners receive comprehensive support including dedicated account management, technical support, business development assistance, marketing resources, training programs, and priority access to new features. Support levels vary by partnership tier with enhanced services for strategic partners.
Partnership requirements vary by program but generally include technical capability, market presence, financial stability, and alignment with our business objectives. We evaluate partners based on their ability to successfully deliver services and contribute to mutual growth.
We offer flexible revenue models including software licensing fees, transaction-based pricing, revenue sharing arrangements, managed service fees, and custom pricing for strategic partnerships. Models are designed to align incentives and ensure profitable growth for all parties.
Partner onboarding includes business planning, technical integration, system configuration, testing, training, and launch support. The process typically takes 4-12 weeks depending on complexity. We provide dedicated onboarding teams and project management to ensure successful launches.
Yes, we actively pursue strategic partnerships with technology companies, service providers, and industry leaders. Strategic partnerships may involve joint product development, market expansion, technology integration, or new business model creation. We welcome discussions with potential strategic partners.
We operate enterprise-grade infrastructure including global DNS networks, redundant data centers, high-availability systems, automated monitoring, and security services. Our infrastructure supports millions of queries daily with 99.99% uptime SLA and provides the foundation for all registry and registrar services.
Our security infrastructure includes DDoS protection, encrypted communications, multi-factor authentication, automated threat detection, regular security audits, and compliance with industry standards. We maintain SOC 2 certification and implement defense-in-depth security strategies.
Our systems provide sub-100ms API response times, 99.99% DNS uptime, global CDN performance, and automatic scaling capabilities. We maintain performance monitoring and provide SLA guarantees with regular performance reporting and optimization.
We maintain comprehensive backup systems including real-time replication, automated daily backups, geographic distribution, and tested recovery procedures. Our disaster recovery plan ensures minimal downtime and data protection with regular testing and updates.
We operate 24/7 monitoring with automated alerting, performance tracking, security monitoring, and proactive issue detection. Our NOC team provides continuous oversight with escalation procedures and detailed reporting on system health and performance metrics.
Our infrastructure uses cloud-native technologies with automatic scaling, load balancing, and global distribution. We can handle traffic spikes, volume growth, and geographic expansion without service disruption. Scalability planning includes capacity forecasting and proactive resource allocation.
We maintain compliance with ICANN requirements, SOC 2 certification, GDPR requirements, and industry security standards. Regular audits ensure ongoing compliance, and we provide compliance reporting and documentation for partner requirements.
Our platform supports REST APIs, EPP protocols, webhook integrations, SAML/SSO, database synchronization, and custom integrations. We provide comprehensive documentation, SDKs, and professional services to ensure successful integration with partner systems.
Data protection includes encryption at rest and in transit, access controls, audit logging, retention policies, and privacy compliance. We implement data minimization principles, provide data portability options, and maintain strict access controls with regular security training.
Technical support includes 24/7 system monitoring, dedicated support teams, escalation procedures, documentation resources, and professional services. Support levels vary by service tier with enhanced support for enterprise customers and critical system issues.
We maintain full ICANN compliance through dedicated compliance teams, automated monitoring, regular audits, and policy implementation. This includes registry agreement adherence, reporting requirements, data accuracy obligations, and ongoing policy updates. We provide compliance consulting for partners.
We comply with GDPR, CCPA, and other data protection regulations through privacy-by-design principles, consent management, data minimization, breach notification procedures, and individual rights support. We provide tools and guidance to help partners maintain compliance.
We support standard dispute resolution procedures including UDRP, URS, and other ICANN-approved mechanisms. Our systems integrate with dispute providers, automate process workflows, and ensure compliance with resolution decisions. We provide guidance on dispute procedures and best practices.
We operate comprehensive abuse handling systems including automated detection, investigation procedures, takedown processes, and law enforcement cooperation. Our abuse team works 24/7 to address security threats, malicious use, and policy violations while protecting legitimate users.
We have established procedures for handling legal requests including court orders, subpoenas, and law enforcement requests. We verify legitimacy, protect user rights where appropriate, and provide required information in compliance with applicable laws and jurisdictions.
Our services are governed by comprehensive terms of service, privacy policies, acceptable use policies, and service-specific agreements. Policies are regularly updated to reflect legal requirements and industry best practices. We provide clear documentation and notification of policy changes.
We implement intellectual property protection through trademark verification systems, sunrise periods for new TLDs, claims services, blocking mechanisms, and rapid response procedures. We work with rights holders to prevent infringement while supporting legitimate use.
We monitor regulatory developments globally and implement changes through our compliance team, policy updates, system modifications, and partner communication. We provide advance notice of changes and assistance with compliance requirements for new regulations.
We provide comprehensive audit trails, compliance reporting, performance metrics, and custom reporting capabilities. Regular audits ensure system integrity and compliance. Partners receive relevant reports and have access to audit information for their own compliance needs.
We maintain appropriate insurance coverage, implement risk management procedures, and provide contractual liability limitations. Our services include indemnification provisions where appropriate, and we work to minimize liability exposure for partners and users while maintaining service quality.
We provide multiple support channels including online documentation, email support, chat support, phone support for enterprise customers, community forums, and professional services. Support availability varies by service tier with 24/7 options for critical services.
Comprehensive documentation includes API references, integration guides, best practices, video tutorials, and knowledge base articles. We maintain up-to-date documentation with examples, use cases, and troubleshooting guides. All documentation is searchable and regularly updated.
We provide various training programs including onboarding sessions, technical training, certification programs, webinars, and custom training for partners. Training covers platform usage, best practices, integration techniques, and industry knowledge.
Yes, we maintain community forums, user groups, and partner networks for knowledge sharing, collaboration, and peer support. Community resources include discussion forums, user-contributed content, and regular community events.
Professional services include consulting, custom development, integration services, migration assistance, training, and ongoing support. Our experienced team helps partners maximize value from our platform and achieve their business objectives.
We provide comprehensive SLA guarantees covering uptime (99.99%), response times, resolution times, and performance metrics. SLA terms vary by service level with credits available for missed targets. Regular SLA reporting ensures transparency and accountability.
Yes, we provide 24/7 emergency support for critical issues affecting system availability or security. Emergency support includes immediate response, escalation procedures, and priority resolution. Contact information and procedures are provided to all enterprise customers.
We welcome feedback through multiple channels including support tickets, surveys, community forums, and direct contact with account managers. Feedback is reviewed regularly and influences product development, service improvements, and policy updates.
System status is available through our status page, API endpoints, email notifications, and webhook alerts. Real-time status information includes service availability, performance metrics, and planned maintenance. Customers can subscribe to status updates and configure custom alerts.
Yes, we offer comprehensive migration assistance including planning, data transfer, system integration, testing, and cutover support. Our migration team has experience with various platforms and provides guidance to minimize disruption and ensure successful transitions.
Registry Services & Operations
Our registry services, compound TLD operations, and domain management solutions
Unregistry is the bridge between Web3 and DNS, an integration platform that connects blockchain name systems with the global domain ecosystem. We provide registry operations, EPP systems, DNS infrastructure, and on-chain record services for registry operators, registries, and registrars. On the Web3 rail, we integrate with established name systems rather than issuing consumer chains of our own.
Registry services manage the authoritative database for TLD domains and operate the infrastructure (DNS, EPP, WHOIS). Registrar services interface with end customers for domain sales and management. Unregistry provides both: we operate registry infrastructure for specific TLDs and provide white-label registrar software/services that others can use to sell domains to end customers.
We integrate Web3 name systems rather than operating a consumer wallet-name registry ourselves. For registries and registrars, that means on-chain anchors for DNS names, smart-contract registry sync, wallet and payment record APIs, and marketplace integrations, the infrastructure that lets a name live on both rails.
Yes, we provide complete white-label registry and registrar software platforms. This includes EPP systems, DNS infrastructure, billing integration, customer management, and dashboard solutions. Organizations can use our technology to operate their own registry or registrar business with their branding, pricing, and customer relationships while leveraging our proven infrastructure.
Our platform supports any EPP-compliant registry, so partners can serve virtually any extension. On the Web3 rail, we integrate with established name systems rather than issuing extensions of our own.
Our registry infrastructure provides enterprise-grade DNS hosting with global anycast, EPP registry systems, WHOIS/RDAP services, DNSSEC support, real-time zone generation, automated escrow, abuse handling, and 24/7 monitoring. We maintain 99.99% uptime SLA and full ICANN compliance for all operated TLDs.
We provide comprehensive REST APIs and EPP interfaces for all services. Integration options include domain operations (check, register, transfer, renew), DNS management, billing integration, and real-time reporting. We offer SDKs for major programming languages, sandbox environments, and detailed documentation. Our APIs support both registrar operations and direct registry functions.
We offer various partnership models: white-label software licensing, managed registry services, registrar platform access, and custom integrations. Requirements vary by partnership type, from simple reseller agreements to full ICANN registrar accreditation support. Contact our partnerships team to discuss your specific needs and market objectives.
Yes, we handle all ICANN compliance requirements for our operated TLDs and provide compliance consulting for partners. This includes registry agreement adherence, reporting obligations, policy implementation, audit support, and ongoing regulatory updates. Our compliance team ensures all operations meet ICANN standards and contractual obligations.
One platform, two rails. On the DNS side: EPP provisioning, DNSSEC-signed zones, and registrar-channel distribution. On the Web3 side: on-chain anchors, smart-contract registry sync, and wallet record APIs. Both are synchronized to a single source of truth, so a name works everywhere, no wallet required to use it, no compromise on verifiability. See The Bridge on the homepage and the web3-dns-bridge category here.
DNS Infrastructure & Management
DNS hosting, DNSSEC, and infrastructure services
We operate enterprise-grade DNS infrastructure with global anycast networks across 30+ locations. Services include authoritative DNS hosting, recursive DNS, DNSSEC signing and validation, GeoDNS routing, load balancing, DDoS protection, and real-time analytics. Our infrastructure supports both traditional and Web3 domain resolution.
Yes, our comprehensive DNS API allows full record management including A, AAAA, CNAME, MX, TXT, SRV, CAA, and custom records. Features include bulk operations, zone management, DNSSEC automation, real-time updates, and integration webhooks. API access is available for both our managed DNS service and for registry/registrar partners.
We provide automated DNSSEC signing with key management, rotation, and DS record coordination with parent zones, for traditional TLDs and for integrated alternative naming systems. DNSSEC is also the trust anchor for the registrant-directed association model we proposed to ICANN: a record in a signed zone proves who published it.
DNS changes propagate within our infrastructure in under 30 seconds globally due to our anycast network design. External propagation depends on ISP caching, but our optimized TTL settings and global presence ensure faster updates than traditional setups. We provide real-time propagation monitoring and can adjust TTLs for time-sensitive changes.
Yes, we support custom nameserver hostnames for branded DNS services. This includes glue record management, IP assignment coordination, and automated setup. Custom nameservers are available for registry operators and enterprise customers.
We offer multiple DNS hosting tiers: free basic DNS for registry domains, premium managed DNS with advanced features, enterprise DNS with SLA guarantees, and white-label DNS for partners. All plans include global anycast, DNSSEC, API access, and real-time analytics. Custom solutions available for high-volume requirements.
Our DNS platform provides comprehensive analytics including query volumes, geographic distribution, record type breakdown, response times, error rates, and security events. Real-time monitoring with customizable alerts, historical reporting, and API access for data integration. Enterprise customers receive detailed performance and security reports.
Our GeoDNS service routes users to optimal servers based on geographic location, improving performance and enabling content localization. Supports continent, country, state/region, and custom polygon targeting. Includes health monitoring, automatic failover, and load distribution. Ideal for CDN integration and global application deployment.
DNS security features include DDoS protection, query rate limiting, malicious domain blocking, DNS filtering, encrypted DNS (DoH/DoT), response policy zones, and threat intelligence integration. We monitor for DNS abuse, provide security reports, and can implement custom security policies for registry operators.
Zone management for partner registries runs through registry operations tooling and API access, provisioned by arrangement. Features include bulk record operations, zone templates, BIND import/export, automated backups, and change history, for both standard DNS zones and zones carrying Web3 records.
Platform Integration & APIs
Technical integration, APIs, and development resources
Registrar-grade integration. EPP provisioning, domain lifecycle, DNS management, and webhooks, is provisioned by arrangement for approved registrars. See /api/ for the capability surface and /contact/ to discuss access and the OT&E environment.
Our EPP system follows RFC 5730-5734 standards with extensions for premium domains, DNSSEC, and Web3 features. Integration requires X.509 certificates, IP whitelisting, and ICANN-compliant procedures. We provide OTE (test environment), integration guides, and technical support. EPP access is available for accredited registrars and authorized partners.
We provide official SDKs for Python, Node.js, PHP, Go, Ruby, Java, and .NET. SDKs include full API coverage, error handling, authentication, and examples. All SDKs are open-source on GitHub with community contributions welcome. We also maintain CLI tools and Postman collections for development and testing.
We support multiple authentication methods: API keys for basic access, OAuth 2.0 for delegated access, JWT tokens for service-to-service, and mTLS for EPP connections. All authentication includes rate limiting, IP restrictions, and audit logging. Best practices documentation and security guidelines are provided for all integration types.
Yes, we provide webhook notifications for domain events (registrations, transfers, renewals, expirations), DNS changes, billing events, and security alerts. Webhooks support HMAC signature verification, automatic retries, and custom payloads. Configuration available via API or dashboard with delivery monitoring and replay capabilities.
Rate limits vary by service tier and operation type: Free tier (100 req/hour), Standard (1,000 req/hour), Professional (10,000 req/hour), Enterprise (custom limits). Burst allowances and different limits for read vs write operations. Headers indicate remaining quota, and we provide rate limit increase options for qualified use cases.
We provide comprehensive sandbox environments including OTE for EPP testing, API sandbox with test data, and isolated DNS environments. Sandbox mirrors production functionality without real charges or domain registrations. Perfect for development, integration testing, and training before production deployment.
Bulk operations are supported through dedicated API endpoints and batch processing systems. Operations include bulk registrations, updates, and DNS modifications. Large operations are processed asynchronously with progress tracking and result downloads.
Our APIs return standardized error responses with HTTP status codes, error objects containing codes/messages/details, and unique request IDs for support. We provide detailed error documentation, recommended retry strategies, and examples for common scenarios. Proper error handling ensures reliable integration and better user experience.
We offer comprehensive integration support including technical documentation, example code, integration consultation, dedicated support channels, and professional services for complex integrations. Our team assists with architecture planning, best practices, performance optimization, and troubleshooting throughout the integration process.
Pricing & Business Models
Pricing structure, billing, and partnership models
Our pricing varies by service type: registry operations (annual fees plus per-domain), registrar software licensing (monthly/annual SaaS), API access (tiered by usage), and custom solutions (negotiated). We offer transparent pricing with no hidden fees, volume discounts for partners, and flexible payment terms for qualified organizations.
We accept major credit cards, wire transfers, ACH payments, and cryptocurrency for select services. Enterprise customers can establish terms with Net 30/60/90 payment options. All payments are processed securely with PCI DSS compliance and detailed invoicing for accounting purposes.
Yes, we provide tiered volume discounts based on annual commitments, domain volumes, and service levels. Discounts start at 1,000 domains annually with increasing benefits at higher tiers. Custom pricing available for significant volumes and strategic partnerships. Contact our sales team for specific volume pricing.
Registry operation costs include setup fees, annual infrastructure costs, per-domain fees, and compliance services. Pricing depends on TLD type, expected volume, and service requirements. We provide detailed cost breakdowns and ROI analysis for potential registry operators. Custom packages available for compound and Web3 TLDs.
Our registrar/registry software is available through SaaS licensing with monthly or annual terms. Licensing includes software access, infrastructure hosting, updates, support, and basic customization. Enterprise licenses include source code access, self-hosting options, and extensive customization capabilities.
Setup costs vary by service complexity: basic API integration (minimal), registrar platform setup ($5K-15K), custom registry operations ($25K-100K+). Costs include technical integration, testing, training, and initial configuration. Many services offer reduced or waived setup fees for qualified long-term commitments.
Yes, we provide revenue sharing options for qualified partners, particularly for integration partnerships and significant market development initiatives. Terms depend on partnership scope, market development commitments, and mutual value creation.
Contract terms vary by service: software licensing (1-3 years), registry operations (3-10 years), API access (month-to-month or annual). All contracts include SLA guarantees, support provisions, and clear termination procedures. We accommodate various business needs with flexible terms for qualified organizations.
We maintain full cost transparency with detailed pricing documentation, no hidden fees, and clear service boundaries. All costs are outlined upfront including setup, ongoing services, overage charges, and optional add-ons. We provide cost calculators and detailed proposals for complex deployments.
Payment terms range from monthly credit card payments to annual prepayment discounts to Net 30/60/90 terms for qualified enterprises. We accommodate various business models including prepaid credits, consumption-based billing, and custom arrangements for strategic partnerships.
Web3 & Blockchain Domains
Web3 domains, blockchain integration, and decentralized services
Web3 domains are blockchain-based domain names offering decentralized ownership and control. Our .u domains bridge traditional DNS and Web3, providing permanent ownership, censorship resistance, wallet address simplification, decentralized website hosting via IPFS, and portable identity across Web3 applications. They work in both traditional browsers and Web3 environments.
The .u names are part of the wider Web3 naming ecosystem that Unregistry integrates with, we don't operate the .u consumer registry. What we provide is the bridge work: publishing Web3 names into global DNS, anchoring DNS names on-chain, and keeping both records synchronized so one name works everywhere.
@u handles belong to the broader u.cash Web3 ecosystem, not a service Unregistry operates. Our role is bridge infrastructure: resolution integrations, on-chain record APIs, and the registry-side plumbing that lets handles and names work across both the Web3 and DNS worlds.
Our Web3 infrastructure supports Ethereum, Polygon, BNB Chain, Avalanche, and Solana with additional chains planned. We provide cross-chain compatibility through bridge services and unified APIs. Domain ownership and transactions can occur on multiple chains while maintaining consistent identity and functionality.
Our Web3 domains are minted as NFTs providing true ownership - they exist in your wallet and can be transferred peer-to-peer. Unlike traditional domains, there are no renewal fees or risk of expiration. The NFT contains metadata linking to domain configuration and can be traded on compatible marketplaces.
We provide IPFS integration for decentralized website hosting. Users can upload content to IPFS, and we automatically configure DNS and blockchain records for seamless access. This enables censorship-resistant hosting while maintaining compatibility with traditional browsers through our gateway services.
Our domains support wallet address mapping for 100+ cryptocurrencies, enabling payments to human-readable names instead of long addresses. Integration includes ENS compatibility, FIO Protocol support, and direct wallet connectivity. Users can receive payments, sign transactions, and interact with DApps using their domain identity.
Yes, our .u domains work in all browsers through our DNS gateway service. We maintain traditional DNS records alongside blockchain ownership, ensuring universal accessibility. Users don't need special browser extensions or Web3 tools to visit .u websites, making them truly hybrid domains.
We provide comprehensive APIs for Web3 domain management including minting, transfers, metadata updates, wallet address management, IPFS pinning, and resolution services. APIs support both traditional REST and Web3-native interfaces with support for popular Web3 libraries and frameworks.
Yes, as NFTs, our Web3 domains can be traded on compatible marketplaces including OpenSea, Foundation, and others. We provide marketplace integration tools, valuation services, and transfer mechanisms. Domain trading includes automatic ownership updates and configuration transfer to new owners.
The Web3 & DNS Bridge
How Unregistry connects blockchain name systems with the global DNS, synchronization, resolution, and trust on both rails
The bridge is the integration layer that connects blockchain name systems with the global DNS. Unregistry synchronizes the two so a single name works everywhere, resolvable in every browser and mail client through DNS, and verifiable on-chain by wallets and Web3 apps. Registry service providers, registries, registrars, businesses, and end users all work from one platform instead of two disconnected worlds.
EPP transactions and smart-contract events are synchronized to a single source of truth. When a name is registered, renewed, or transferred on one rail, the change is published to the other. DNS zones and on-chain registries never drift apart. Registrars integrate once through EPP + REST and get both rails.
Yes. Web3 names are published into worldwide DNS, so they resolve in every browser, mail client, and API with no wallet, plugin, or browser extension required. The same name simultaneously serves as a website address, a wallet handle, and a verified login.
An on-chain anchor is a cryptographic record of a DNS domain written to a blockchain. It proves who owns the name at any point in time, enables programmable transfers, and makes the domain's records readable by any Web3 application, while the name keeps working normally in DNS.
Trust runs on both rails. DNSSEC signs the DNS side of a name; on-chain signatures sign the Web3 side. Unregistry aligns the two so resolvers, registrars, and registries can verify integrity end-to-end, one name, independently verifiable in both worlds.
No. One integration covers both shelves. Registrars connect through a single EPP + REST interface and can sell traditional TLDs and Web3 names from the same catalog, with provisioning, transfers, and renewals handled uniformly across both rails.
Yes. Unregistry provides white-label bridge infrastructure, registry service providers can bolt Web3 resolution and on-chain records onto their existing registry stack without building blockchain tooling in-house. Your brand, our bridge.
Registration, renewal, and transfer flows can be driven by APIs and smart contracts, automation-ready for registrars and registries. The same lifecycle actions you perform over EPP can be triggered programmatically on-chain, so business logic and naming stay in lockstep.
A proven association is a machine-readable claim, published by the registrant in their own DNS zone, that a DNS domain and a Web3 name are controlled by the same party, and it carries a reciprocal control-proof: a challenge-response signature or on-chain verification proving the registrant actually holds the Web3 name. A declared association is the registrant's published pointer without that proof, useful, but presented as a choice rather than a fact. Keeping the two visibly distinct is what prevents the mechanism from becoming an impersonation vector. A verified association answers "is example on this network the same party as example.com?" with a mechanical yes.
DNSSEC is the trust anchor. A record in a DNSSEC-signed zone proves the registrant published it and that it was not altered in flight, anyone can verify that independently. An association in an unsigned zone cannot prove its origin, so verifiers should treat it as unauthenticated: fail-safe, the same way a name whose states cannot be reconciled should stop resolving rather than resolve differently in different places. Most major DNS operators support zone signing today, so this is configuration, not new machinery.
That is one of the main use cases. A proven association between a DNS domain and a Web3 name gives payment apps a verified mapping: send 100 USDC to a verified example.com and the wallet resolves the domain to the on-chain name its registrant provably controls, with the DNS accountability stack (registrant data, dispute processes) standing behind it. Merchants get a name their customers already know how to type; users get a counterparty they can verify. This is the bridge between Web3 payments and ordinary domains.
Partnership & Business Development
Partnership opportunities and business development
We offer various partnership models: technology licensing for registrar/registry software, white-label platform solutions, managed service partnerships, revenue sharing for TLD development, system integration partnerships, and custom solution development. Each partnership is structured to create mutual value and market success.
We provide complete registrar platform solutions including software licensing, ICANN accreditation support, technical infrastructure, billing systems, and operational guidance. Partners can launch registrar services quickly using our proven technology while maintaining their brand and customer relationships.
Yes, we provide complete registry operations as a service including technical infrastructure, ICANN compliance, EPP systems, DNS hosting, escrow services, and 24/7 monitoring. This allows TLD operators to focus on business development while we handle technical operations and compliance.
Registry service providers can offer both rails under their own brand. EPP-based domain operations, DNS hosting, on-chain record services, and integration APIs. Scope and components are provisioned by arrangement; talk to us about the platform surface that fits your business.
Yes, we offer professional integration services including custom API development, system integration, data migration, training, and ongoing support. Our team works with partners to ensure smooth integration with existing business processes and maximum value realization.
Partners receive comprehensive support including dedicated account management, technical support, business development assistance, marketing resources, training programs, and priority access to new features. Support levels vary by partnership tier with enhanced services for strategic partners.
Partnership requirements vary by program but generally include technical capability, market presence, financial stability, and alignment with our business objectives. We evaluate partners based on their ability to successfully deliver services and contribute to mutual growth.
We offer flexible revenue models including software licensing fees, transaction-based pricing, revenue sharing arrangements, managed service fees, and custom pricing for strategic partnerships. Models are designed to align incentives and ensure profitable growth for all parties.
Partner onboarding includes business planning, technical integration, system configuration, testing, training, and launch support. The process typically takes 4-12 weeks depending on complexity. We provide dedicated onboarding teams and project management to ensure successful launches.
Yes, we actively pursue strategic partnerships with technology companies, service providers, and industry leaders. Strategic partnerships may involve joint product development, market expansion, technology integration, or new business model creation. We welcome discussions with potential strategic partners.
Technical Infrastructure
Technical specifications and infrastructure details
We operate enterprise-grade infrastructure including global DNS networks, redundant data centers, high-availability systems, automated monitoring, and security services. Our infrastructure supports millions of queries daily with 99.99% uptime SLA and provides the foundation for all registry and registrar services.
Our security infrastructure includes DDoS protection, encrypted communications, multi-factor authentication, automated threat detection, regular security audits, and compliance with industry standards. We maintain SOC 2 certification and implement defense-in-depth security strategies.
Our systems provide sub-100ms API response times, 99.99% DNS uptime, global CDN performance, and automatic scaling capabilities. We maintain performance monitoring and provide SLA guarantees with regular performance reporting and optimization.
We maintain comprehensive backup systems including real-time replication, automated daily backups, geographic distribution, and tested recovery procedures. Our disaster recovery plan ensures minimal downtime and data protection with regular testing and updates.
We operate 24/7 monitoring with automated alerting, performance tracking, security monitoring, and proactive issue detection. Our NOC team provides continuous oversight with escalation procedures and detailed reporting on system health and performance metrics.
Our infrastructure uses cloud-native technologies with automatic scaling, load balancing, and global distribution. We can handle traffic spikes, volume growth, and geographic expansion without service disruption. Scalability planning includes capacity forecasting and proactive resource allocation.
We maintain compliance with ICANN requirements, SOC 2 certification, GDPR requirements, and industry security standards. Regular audits ensure ongoing compliance, and we provide compliance reporting and documentation for partner requirements.
Our platform supports REST APIs, EPP protocols, webhook integrations, SAML/SSO, database synchronization, and custom integrations. We provide comprehensive documentation, SDKs, and professional services to ensure successful integration with partner systems.
Data protection includes encryption at rest and in transit, access controls, audit logging, retention policies, and privacy compliance. We implement data minimization principles, provide data portability options, and maintain strict access controls with regular security training.
Technical support includes 24/7 system monitoring, dedicated support teams, escalation procedures, documentation resources, and professional services. Support levels vary by service tier with enhanced support for enterprise customers and critical system issues.
Compliance & Legal
Legal compliance, regulations, and policy matters
We maintain full ICANN compliance through dedicated compliance teams, automated monitoring, regular audits, and policy implementation. This includes registry agreement adherence, reporting requirements, data accuracy obligations, and ongoing policy updates. We provide compliance consulting for partners.
We comply with GDPR, CCPA, and other data protection regulations through privacy-by-design principles, consent management, data minimization, breach notification procedures, and individual rights support. We provide tools and guidance to help partners maintain compliance.
We support standard dispute resolution procedures including UDRP, URS, and other ICANN-approved mechanisms. Our systems integrate with dispute providers, automate process workflows, and ensure compliance with resolution decisions. We provide guidance on dispute procedures and best practices.
We operate comprehensive abuse handling systems including automated detection, investigation procedures, takedown processes, and law enforcement cooperation. Our abuse team works 24/7 to address security threats, malicious use, and policy violations while protecting legitimate users.
We have established procedures for handling legal requests including court orders, subpoenas, and law enforcement requests. We verify legitimacy, protect user rights where appropriate, and provide required information in compliance with applicable laws and jurisdictions.
Our services are governed by comprehensive terms of service, privacy policies, acceptable use policies, and service-specific agreements. Policies are regularly updated to reflect legal requirements and industry best practices. We provide clear documentation and notification of policy changes.
We implement intellectual property protection through trademark verification systems, sunrise periods for new TLDs, claims services, blocking mechanisms, and rapid response procedures. We work with rights holders to prevent infringement while supporting legitimate use.
We monitor regulatory developments globally and implement changes through our compliance team, policy updates, system modifications, and partner communication. We provide advance notice of changes and assistance with compliance requirements for new regulations.
We provide comprehensive audit trails, compliance reporting, performance metrics, and custom reporting capabilities. Regular audits ensure system integrity and compliance. Partners receive relevant reports and have access to audit information for their own compliance needs.
We maintain appropriate insurance coverage, implement risk management procedures, and provide contractual liability limitations. Our services include indemnification provisions where appropriate, and we work to minimize liability exposure for partners and users while maintaining service quality.
Support & Resources
Support services, documentation, and resources
We provide multiple support channels including online documentation, email support, chat support, phone support for enterprise customers, community forums, and professional services. Support availability varies by service tier with 24/7 options for critical services.
Comprehensive documentation includes API references, integration guides, best practices, video tutorials, and knowledge base articles. We maintain up-to-date documentation with examples, use cases, and troubleshooting guides. All documentation is searchable and regularly updated.
We provide various training programs including onboarding sessions, technical training, certification programs, webinars, and custom training for partners. Training covers platform usage, best practices, integration techniques, and industry knowledge.
Yes, we maintain community forums, user groups, and partner networks for knowledge sharing, collaboration, and peer support. Community resources include discussion forums, user-contributed content, and regular community events.
Professional services include consulting, custom development, integration services, migration assistance, training, and ongoing support. Our experienced team helps partners maximize value from our platform and achieve their business objectives.
We provide comprehensive SLA guarantees covering uptime (99.99%), response times, resolution times, and performance metrics. SLA terms vary by service level with credits available for missed targets. Regular SLA reporting ensures transparency and accountability.
Yes, we provide 24/7 emergency support for critical issues affecting system availability or security. Emergency support includes immediate response, escalation procedures, and priority resolution. Contact information and procedures are provided to all enterprise customers.
We welcome feedback through multiple channels including support tickets, surveys, community forums, and direct contact with account managers. Feedback is reviewed regularly and influences product development, service improvements, and policy updates.
System status is available through our status page, API endpoints, email notifications, and webhook alerts. Real-time status information includes service availability, performance metrics, and planned maintenance. Customers can subscribe to status updates and configure custom alerts.
Yes, we offer comprehensive migration assistance including planning, data transfer, system integration, testing, and cutover support. Our migration team has experience with various platforms and provides guidance to minimize disruption and ensure successful transitions.
Still Need Help?
Our support team is ready to assist you with any questions about domain registration, technical integration, or enterprise solutions.