<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:287201874;
mso-list-template-ids:-1478196958;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:1043139288;
mso-list-template-ids:1111113338;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style></head><body lang=en-JO link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal style='text-align:justify'><span lang=EN-US style='font-size:11.0pt'><a href="https://www.icann.org/news/blog/do-you-have-a-domain-name-here-s-what-you-need-to-know-part-6">https://www.icann.org/news/blog/do-you-have-a-domain-name-here-s-what-you-need-to-know-part-6</a><o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span lang=EN-US style='font-size:11.0pt'>This piece by ICANN’s Registrant Program may be of interest to domain name registrants.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><b><span lang=EN-US style='font-size:11.0pt'>Fahd Batayneh<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify'><span lang=EN-US style='font-size:11.0pt'>ICANN<o:p></o:p></span></p><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0cm 0cm 1.0pt 0cm'><p class=MsoNormal style='text-align:justify;border:none;padding:0cm'><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p></div><p class=MsoNormal style='text-align:justify'><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>As a domain name <a href="https://www.icann.org/icann-acronyms-and-terms/en/G0101">registrant</a>, it's important to always understand and adhere to your <a href="https://www.icann.org/resources/pages/benefits-2013-09-16-en">rights and responsibilities</a> and to educate yourself about how to best securely and responsibly manage your domain name(s).<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'>Beware of Phishing Scams and Emails that Appear to Be From ICANN<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><a href="https://www.icann.org/resources/pages/phishing-2013-05-03-en">Phishing</a> attacks are a type of fraud that cybercriminals utilize to lure others online, including registrants, into doing what the criminals want them to do. Phishing may result in others voluntarily giving away their username and password or clicking a link that will lead to their devices being infected with <a href="https://www.icann.org/resources/pages/malware-2013-05-03-en">malware</a>, which is software that, when installed, performs unwanted or malicious activity. If an attacker can gain access to a registrant's private domain name registration information and passwords, they can potentially redirect the domain to wherever they like. As such, it's immensely important that you take note of any suspicious or unsolicited emails.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Phishing emails may claim that your domain name registration needs to be renewed and that you must pay some sort of fee to get it back. These malicious campaigns typically use deceptive techniques such as forging a trusted sender's address or domain, or using a similar or lookalike domain. Phishing messages typically ask for the reader to reply, call a phone number, click a link, or open an attached file, which results in stealing personal information or gaining some other advantage over the victim.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Sometimes phishing emails aimed at registrants may appear to come from ICANN (even using ICANN's branding and logo or sender email addresses containing the name "ICANN"). It is important to know that ICANN does not send emails directly to registrants about managing their domain names, and never requests payment of fees from registrants.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'>Protecting Yourself and Your Domain Name<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Ensuring a stable and secure <a href="https://www.icann.org/icann-acronyms-and-terms/en/G0474">Domain Name System</a> (DNS) for all Internet users is one of ICANN's key priorities. We recommend that you take the following steps to protect your domain name and personal information related to your domain name registration:<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><ul style='margin-top:0cm' type=disc><li class=MsoNormal style='text-align:justify;mso-list:l1 level1 lfo1'><span style='font-size:11.0pt'>Be suspicious of any email that offers domain name management services from ICANN. As noted above, ICANN does not offer domain name management services or process domain registrations and will never collect fees from registrants directly.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l1 level1 lfo1'><span style='font-size:11.0pt'>ICANN will never send registrants a <a href="https://www.icann.org/news/blog/do-you-have-a-domain-name-here-s-what-you-need-to-know-part-1">WHOIS Data Reminder Policy (WDRP)</a> notice, registration data verification request, domain name expiration reminder, or domain name renewal request message. If you receive an email about your domain that purports to come from ICANN, contact your sponsoring registrar directly to enquire about the validity of that message.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l1 level1 lfo1'><span style='font-size:11.0pt'>Please read the blog "<a href="https://www.icann.org/news/blog/what-you-should-do-if-you-receive-a-suspected-fraudulent-icann-email">What You Should Do If You Receive A Suspected Fraudulent ICANN Email</a>" and remember to report suspicious emails that appear to come from ICANN to <a href="mailto:globalsupport@icann.org">globalsupport@icann.org</a>. Our team can take a look to determine if it's fraudulent. If it is, we'll work with appropriate parties, including law enforcement, to address the source of the email.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l1 level1 lfo1'><span style='font-size:11.0pt'>Contact your sponsoring registrar directly for any concerns about the status of your domain name.<o:p></o:p></span></li></ul><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'>Measures for Additional Protection<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>In addition to being vigilant about watching for phishing attacks, here are some additional proactive measures you can take to protect yourself from those trying to gain unauthorized access to your domain name account:<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><ul style='margin-top:0cm' type=disc><li class=MsoNormal style='text-align:justify;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt'>Always keep your domain name registrant account information private, secure, and recoverable. Enable multi-factor authentication if your registrar supports it.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt'>Use <a href="https://www.icann.org/registrar-reports/accreditation-qualified-list.html">ICANN-accredited registrars</a> to register and manage your domain name(s) and always research the reputation and service record of registrars before selecting one. If you're not entirely comfortable with a registrar after you register a domain name with them, you can and should consider transferring your domain name to a registrar you trust.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt'>Ask your registrar to apply a "registrar lock" on your domain names, which can help prevent changes to your domain name registration information and <a href="https://www.icann.org/news/blog/do-you-have-a-domain-name-here-s-what-you-need-to-know-part-4">block attempts to transfer or delete your domain names</a>.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt'>Use <a href="https://www.icann.org/icann-acronyms-and-terms/en/G0279">Transport Layer Security (TLS)</a> HTTPS when you access your domain name registration account to prevent someone intercepting your communication with your registrar.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt'>Use a different email address for your registrar account than your domain name registration information. If your domain name is hijacked by someone who has gained access to your account with the registrar, that person will likely alter the registration information to remove you as the registered holder of the domain name. If you used an email address that is not associated with your domain name for your registration information, you will be able to provide that email address as evidence to the registrar that you were the registered holder of the domain name before it was altered by unauthorized access to your account.<o:p></o:p></span></li><li class=MsoNormal style='text-align:justify;mso-list:l0 level1 lfo2'><span style='font-size:11.0pt'>On your local machines, use a password manager, create strong passwords, and safeguard them.<o:p></o:p></span></li></ul><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'>Sign Your DNS Zones With DNSSEC<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Another step you can take to protect your domain name and contribute to the overall security of the Domain Name System (DNS) is by DNSSEC-signing all the data associated with each of your domain names.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><a href="https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en">DNSSEC</a> (Domain Name System Security Extensions) reduces the chances an attacker will be able to substitute their answers in response to DNS queries. By creating digital signatures over your domain's zone data, clients looking up your domain names can verify the information they receive is what you had placed in the zone.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Many DNS software packages and registration systems have tools that automate DNSSEC-signing. Check to ensure that DNSSEC-signing is enabled in your DNS software and at your registrar and that your registrar has the necessary information (your Delegation Signer record or your DNSKEY) to help establish trust in the information they just signed.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Learn more about DNSSEC, why it's important, and how to put it into action with our <a href="https://www.icann.org/resources/pages/octo-publications-2019-05-24-en">DNSSEC Explainer</a>, published by ICANN's Office of the Chief Technology Officer (OCTO) and available in all UN languages.<o:p></o:p></span></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'>Always Be Proactive<o:p></o:p></span></b></p><p class=MsoNormal style='text-align:justify'><b><span style='font-size:11.0pt'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-align:justify'><span style='font-size:11.0pt'>Domain name registrants are important players in <a href="https://www.icann.org/news/blog/icann-org-s-multifaceted-response-to-dns-abuse">combating DNS abuse</a>. We encourage you to always be vigilant and proactive in securely and responsibly managing your domain name(s). We hope you found these suggestions useful, and always encourage registrants to <a href="https://www.icann.org/community">play an active role in the ICANN community</a>. You can find more information on ICANN.org for domain name registrants <a href="https://www.icann.org/registrants">here</a>.<o:p></o:p></span></p></div></body></html>