Information for Domain Name Holders · ICANN Unauthorized transfer of domain to new registrar Registrant data changed without authorization •Work out an agreement with current registrant

| 1

Information for Domain Name Holders

Seher Sagiroglu Ayhan

ME-DNS Forum 21 February 2019

ICANN Contractual Compliance

| 2

Why accurate registration data is

important

Domain Name Transfers

Domain Name Renewals

Lost Domain Names

1 2 3

4

Q&A

Agenda

5

| 3

ICANN Contractual Compliance’s Role

¤ To be a trusted service provider ensuring that contracted parties (registry operators and registrars) fulfill the requirements in their agreements with ICANN organization for a secure and stable Domain Name System.

¤ Promotes consumer trust by:¡ Preventing compliance challenges through the collaboration with

contracted parties¡ Facilitating communication between contracted parties and the end

user¡ Attempting to resolve compliance matters and pursue formal remedies

when necessary

| 4| 4

Why accurate registration data is important

| 5

Why accurate registration data (WHOIS) is important

Registrant with accurate data

o Receive WHOIS data reminder email annually

o Receive timely domain renewal reminders

o Receive transfer (AuthInfo) code via email

o Easy to prove you are domain name holder in case of a dispute

Registrant with inaccurate data

o Subject to inaccurate WHOIS inquiries

o Will not receive WHOIS data reminder emails

o Will not receive domain expiration or renewal reminders

o Will not receive transfer (AuthInfo) code to initiate transfer

o Difficult to prove domain name holder

| 6

Common WHOIS Related Complaints

Domains can be suspended/canceled Lessons learned for Registrants

ü Registrant provided inaccurate / invalid registration data

ü Registrant failed to respond to Registrar’s WHOIS inquiries within 15 days

ü Domain name is involved in violation(s) of applicable national law or governmental regulation

ü Registrar is in receipt of court or administrative order relating to use of domain

ü Registrant breached the Registrar’s terms of service

ü ICANN is not a registrar

ü ICANN does not modify WHOIS or registration data

ü ICANN does not provide access to control panel or means to change registration data

ü To see current registration data, check the public WHOIS

| 7

Common WHOIS related complaints

¤ Incorrect/invalid registration data displayed in WHOIS database.

¤ “Missing” registration data due to the European Union’s General Data

Protection Regulation (GDPR) and Temporary Specification

¤ Domain suspended or deleted for non-response to registrar or reseller

¤ Registrants inability to update registration records

¡ No access to control panel or no ability to login

¡ Non-response from service provider or reseller

¤ Domain holder issues – domains registered in name of hosting providers,

resellers or former employees of registrant organization

| 8| 8

Domain Name Transfers

| 9

Domain Name Transfers

¤ Your registrar must provide transfer “AuthInfo” code and unlock domain name upon request by transfer contact

¤ AuthInfo codes can only be sent to registrant email address

¤ Registrars may set their own specific transfer processes, provided they are consistent with the relevant ICANN policy

¤ Transfer request cannot be denied for:¡ Non-payment of future registration period¡ Payment disputes between registrar and its business partner

| 10

Domain Name Transfers

Who can request a transfer?

v Registrant or Admin contact listed

on the registration data

v An agent authorized by registrant

can transfer a domain name

“AuthInfo” or “EPP” transfer code

v Used to identify registrant

v May be available in control panel or

provided upon registrant’s request

v Registrar may request additional

documentation to verify registrant identity

Change of Registrant (COR)

• If you need to change registrant

information prior to transfer, your

registrar MAY enact 60-day transfer

lock that will not allow you to transfer

the domain name to a different

registrar for sixty (60) days

60-day COR Lock Opt-Out

• Your registrar (or reseller) MAYprovide an option to opt-out of the

lock before making any change

• Ensure you fully understand your

registrar's policy before changing

registration data

| 11

Common Transfer Complaints

¤ Unable to retrieve “AuthInfo” codes via control panel/user panel

¤ Unable to unlock domain name via control panel/user panel

¤ Transfer requests by someone not listed as registrant or Admin contact

¤ Request transfer between web hosting or service providers

¤ Registrar/reseller denied transfer due to additional fee, such as “Transfer Fee”

¤ Registrar/reseller denied transfer due to pending/ future registration period

¤ Unresponsive/uncooperative resellers or service providers

¤ Hijacked domain/email accounts and unauthorized transfers

| 12| 12

Domain Name Renewals

| 13

Domain Name Renewals

You should receive at least two renewal reminders approximately one month and one week before the expiration date

Redemption Grace Period (RGP)

Mandatory 30-day period after domain is deleted by registrar. Domain will no longer function, but may be restored, subject to redemption fees

Auto-Renew Grace Period

Optional period of 0 to 45 days after expiration during which registrar may allow registrant to renew domain

You may be able renew the domain during any applicable Auto Renew Grace Period (if offered) depending on registrar’s own renewal and deletion policies

You must be permitted to restore domain names during Redemption Grace Period

| 14

Domain Life Cycle

| 15

Common Renewal Complaints

¤ Registrant did not receive renewal reminders since registrant email is non-functional

¤ Registrant was not able to renew/restore domain because control panel was inaccessible

¤ Registrant paid renewal fee, but domain name was not renewed

¤ Registrar/reseller did not provide information about renewal/redemption fees

¤ Customer service problems such as failed renewal due to payment methods and billing disputes (out of scope)

¤ Reseller’s failure to send reminders, inform customer or other issue described above

| 16

Lost Domain Names

• Act immediately andcontact your registrar

• Form of Authorization• Supporting evidence

for transfer• Submit unauthorized

transfer complaint toICANN

Unauthorized transfer of domain to new registrar

Registrant data changed without authorization

• Work out an agreement with current registrant• File lawsuit in appropriate jurisdiction• File complaint under Uniform Domain-Name

Dispute-Resolution Policy (UDRP) or Uniform Rapid Suspension System (URS) (for trademark violation)

Other alternatives to consider

• Act immediately and contact your registrar• Keep evidence of unauthorized access to

your accounts or emails available forreview

• Seek legal advice about your options

Domain expired and available for registration

Domain deleted due to registrar’s terms of service

• Check registrar’s terms and policies

• Seek legal advice about your options

• Contact your preferred registrar for options you might have

1

2 3

4 5

| 17

ICANN’s authority is limited for lost domains

¤ ICANN does not have ability or contractual authority to:¡ Transfer or return lost domain names¡ Investigate complaints about illegal activity such as domain

hijacking or stolen email accounts¡ Address private disputes over domain name registrations ¡ Address customer-service related complaints such as:

– Payment disputes from credit card chargebacks– Billing disputes for additional services such as special

promotions, hosting or mail services– Technical issues related to nameserver or DNS settings

| 18

Engage with ICANN

Visit us at icann.org

Thank You and Questions

q Information for Domain Name Registrants: https://www.icann.org/registrants

q Domain Name Holder FAQs: https://www.icann.org/resources/pages/name-holder-faqs-2017-10-10-en

q About Lost Domain Names: https://www.icann.org/resources/pages/lost-domain-names

q Contractual Compliance webpage & infographics: https://www.icann.org/resources/pages/compliance-2012-02-25-en

q Complaint Submission and Learn More: https://www.icann.org/compliance/complaint

Additional sources available at: