FAQ
fTLD on Twitter

For the purpose of Registrant Eligibility in .INSURANCE, the reference to “insurers” includes insurance companies, insurance agents/agencies, insurance brokers/brokerages and other equivalents (e.g., intermediaries, representatives).

Top 10 QuestionsExpand Top 10

Why .INSURANCE?

As a verified domain, exclusively for the insurance community, .INSURANCE is a more secure space for insurers and their customers. A web or email address ending in .INSURANCE quickly and easily confirms for customers and employees that they are communicating and transacting with your company, and not a phisher or a spoofed site. A .INSURANCE domain is a visual cue anyone can look for and recognize, an online stamp of trust that will give your customers confidence in your online platform, and help protect your company from bad actors collecting data for breaches, financial fraud and identity theft.

Can I redirect my current domain name to my .INSURANCE domain name?

Yes, you can redirect traffic and emails from your .com (or other TLDs) to your .INSURANCE domain name, enabling you to retain traffic and communication while you educate your customers about your move to a more secure domain. While there are many ways to redirect visitors to a .INSURANCE domain name, an effective method to do this while maintaining your search engine ranking is by using the http ‘301 Moved Permanently’ response status code. Your .INSURANCE domain name must meet the HTTPS requirement by having a public key certificate (e.g., TLS certificate) installed to secure the domain name. Registrants are reminded that .INSURANCE is an HTTPS-only community and therefore any redirection must be made to the HTTPS version of the .INSURANCE website.

Is there a way I can check to see if my .INSURANCE domain name is in compliance with the Security Requirements?

fTLD has compiled a list of publicly available, free resources that can be helpful in understanding whether the implementation of a .INSURANCE domain name addresses the defined requirements and it’s available here. Although these resources are useful, they are not exact checks against the requirements so you may still receive compliance notices even if these resources do not identify any issues. Registrants may email fTLD at compliance@fTLD.com to check the compliance status of a specific domain. fTLD will work with you and your Registrar to address compliance issues.

How do I implement the .INSURANCE Security Requirements to move to my .INSURANCE domain?

fTLD has developed an Implementation Hub to provide the necessary information, guides, resources and tools for implementing, testing, requesting assistance with and reporting on each of our Security Requirements. We also have guides for eligibility and planning & communications that many .INSURANCE Registrants have found helpful in making the move to .INSURANCE.

What makes a .INSURANCE domain name more secure?

Bad actors cannot get a .INSURANCE domain from which to phish and spoof your customers, protecting your organization and customers from the #1 cyberattack. Further, fTLD requires compliance with a set of Registrant Security Requirements that are not mandated by the operators of other commercially available internet domains. Additionally, the fTLD Operations Pledge outlines the policies and procedures we and our registrars must follow to ensure the secure, stable and reliable operations of the .INSURANCE domain.

How does the .INSURANCE verification process work?

To ensure that registrations are made only to organizations that meet and maintain the eligibility requirements, fTLD performs verification upon the initial registration of a .INSURANCE domain, annually thereafter and if certain registration information changes (e.g., Registrant Organization, Registrant Name, Registrant Email). fTLD’s Verification Process Overview is accessible here.

Where can I register my .INSURANCE domain name?

Domain names must be registered with an fTLD-Approved Registrar for .INSURANCE and the list is available here. Prospective Registrants must submit a verification application available here and be approved by fTLD to register a domain name.

How do I check on the availability of a domain name?

To determine if a domain name is available for registration, use the “Select My .INSURANCE Domain” feature here.

I’ve never registered a .INSURANCE domain name, what should I do?

This process can usually be completed within a few business days.

Step 1: Review the eligibility information here to confirm you qualify for .INSURANCE.

Step 2: Check the availability of the domain name(s) you want with the “Select My .INSURANCE Domain” feature and complete the verification application here to get verified and approved by fTLD.

Step 3: Upon approval you will be emailed a registration token. You must provide the token to your fTLD-Approved Registrar of choice, so they can complete the registration process. The list of Registrars is available here.

Step 4: Your Registrar will submit the domain registration request.

Step 5: fTLD reviews and approves the registration.

Questions about the verification application should be emailed to verify@fTLD.com.

Who is eligible for a .INSURANCE domain name?

Only verified members of the global insurance community are eligible to register domain names. For insurers it includes charter and supervision verification with the organization’s regulator. Please see the .INSURANCE eligibility requirements here.

Eligibility

Who is eligible for a .INSURANCE domain name?

Only verified members of the global insurance community are eligible to register domain names. For insurers it includes charter and supervision verification with the organization’s regulator. Please see the .INSURANCE eligibility requirements here.

Are insurance holding or parent companies eligible to register a .INSURANCE domain name?

Insurance holding or parent companies that are supervised by a relevant government authority are considered service providers as they have been pre-approved by fTLD’s Board of Directors. Further details are provided in the Registrant Eligibility Policy’s Implementation Guidelines (page 4).

Registering A Domain Name

How do I check on the availability of a domain name?

To determine if a domain name is available for registration, use the “Select My .INSURANCE Domain” feature here.

Where can I register my .INSURANCE domain name?

Domain names must be registered with an fTLD-Approved Registrar for .INSURANCE and the list is available here. Prospective Registrants must submit a verification application available here and be approved by fTLD to register a domain name.

Why isn’t my current Registrar on the list of fTLD-Approved Registrars?

All ICANN-accredited Registrars have the option to offer .INSURANCE domain names. fTLD Registrars must comply with the requirements in the fTLD Operations Pledge accessible here that contribute to .INSURANCE being a trusted, verified and more secure environment for domain name owners and their customers. As such, some Registrars may elect not to support the registration of .INSURANCE domain names. It may also be that your Registrar hasn’t yet determined whether or not they will support .INSURANCE. As new Registrars decide to support .INSURANCE, fTLD will update the list of Approved Registrars. Check with your Registrar to see if they are in the process of adding .INSURANCE registrations.

I’ve never registered a .INSURANCE domain name, what should I do?

This process can usually be completed within a few business days.

Step 1: Review the eligibility information here to confirm you qualify for .INSURANCE.

Step 2: Check the availability of the domain name(s) you want with the “Select My .INSURANCE Domain” feature and complete the verification application here to get verified and approved by fTLD.

Step 3: Upon approval you will be emailed a registration token. You must provide the token to your fTLD-Approved Registrar of choice, so they can complete the registration process. The list of Registrars is available here.

Step 4: Your Registrar will submit the domain registration request.

Step 5: fTLD reviews and approves the registration.

Questions about the verification application should be emailed to verify@fTLD.com.

I already have a .INSURANCE domain name and would like to register more, what should I do?

Existing Registrants must first complete a new verification application available here each time additional names are registered. Upon approval you will be emailed a registration token. You must provide the token to your Registrar so they can complete the registration process for you.

Since we already have a .COM address, are we automatically entitled to register the same domain name in .INSURANCE?

No, domain names are initially awarded on a first-come, first-served basis; there is no preference given to those that currently have a specific name in another TLD. Given .INSURANCE is available to eligible members of the global insurance community, there could be an organization with a domain name similar to yours that currently uses another TLD such as .NET, .CO, .UK, .FR, or .JP.

Is having a registered trademark a requirement to register a .INSURANCE domain name?

No, this is not necessary. Your organization may, for example, have a common law right arising from the bona fide use of a trademark and this is sufficient for registering a domain name. If fTLD is unable to verify your right to register a specific .INSURANCE domain name we will contact you and request additional materials to confirm eligibility for the domain name such as proof of use of the mark.

Is there any limit on the number of domain names I can register?

No, you may register as many domain names as you like.

Can I register any domain name I want if I am an eligible Registrant?

You can register any domain name that corresponds to your company’s legal name or branding (e.g., trademarks, trade names or service marks) in bona fide use for the offering of goods or services, or provisioning of information, in the jurisdiction where you are licensed, approved or certified to conduct business and provided it is not an fTLD or ICANN reserved name. For guidance on selecting domain names, please see the .INSURANCE Name Selection Policy accessible here and/or contact fTLD@fTLD.com.

What if I want to register a domain name in .INSURANCE associated with the geographic community (e.g., city, county, region, state) or area (e.g., New England, southern, midwest) my organization serves?

The domain name must correspond to your trademark, trade name or service mark as described in the Name Selection Policy. If the legal name of your organization does not include the geographic identifying domain name being sought, fTLD may require documentation to verify your organization’s right(s) to the generic geographic domain name to protect the interests of the global insurance community who may have one or more members with a legitimate right(s) to the domain name being sought.

What if I want to register a name fTLD has reserved in .INSURANCE?

fTLD reserved names are comprised of Registry Operator Reserved Names and State Names of the United States, which are identified on the associated Reserved Names lists accessible here. If you believe your organization is eligible to register a name on one of these lists (i.e., you believe a name on fTLD’s Reserved Names list corresponds to your trademark, trade name or service mark), please see fTLD’s Reserved Names Challenge Policy accessible here, and review the Reserved Names Challenge information accessible here.

The outcome of a successful challenge to a name on fTLD’s Reserved Names list is the removal of the name from the respective Reserved Names list. A successful challenge does not result in the requestor being awarded the name, but rather gives them an opportunity to compete to receive it. fTLD will allocate the name via one or more of the allocation mechanisms listed in the Name Allocation Policy. A Reserved Name allocation will not take place until all fTLD-Approved Registrars have been provided notification of the change to the respective Reserved Names list.

Are there any premium domain names in .INSURANCE?

Yes, all single-character names (e.g., 1.INSURANCE), most two-letter names (e.g., AB.INSURANCE), and names fTLD has reserved for its potential use, indicated in bold on the list of Registry Operator Reserved Names are identified as premium and subject to premium pricing.

Verification

How does the .INSURANCE verification process work?

To ensure that registrations are made only to organizations that meet and maintain the eligibility requirements, fTLD performs verification upon the initial registration of a .INSURANCE domain, annually thereafter and if certain registration information changes (e.g., Registrant Organization, Registrant Name, Registrant Email). fTLD’s Verification Process Overview is accessible here.

Is the .INSURANCE verification by fTLD the same as the annual Whois verification required by ICANN?

No, the verification process is mandated for all .INSURANCE registrations.

In contrast, the Whois verification process is required by ICANN to be conducted annually by Registrars to confirm accurate contact information. Registrars are required to contact their Registrants to conduct this verification.

Registrants may risk having their domain name suspended or cancelled for failure to respond to either type of verification request. If you want to confirm whether the request is legitimate, please contact fTLD at verify@fTLD.com.

How long does the domain name verification and/or registration take?

For new Registrants, the verification process is usually completed in 1-3 business days, and upon its completion, the registration process is a matter of a couple of business days from submission by your Registrar to fTLD’s approval. For existing Registrants, the verification is usually completed more quickly. However, because the verification process requires email and/or telephone contact with the Registrant’s organization to verify certain information (i.e., the requestor is a full-time employee of the company and is authorized to make registrations on their behalf), it may take longer to complete. Registrants can expedite verification by ensuring that all individuals that may be contacted are aware of the need to respond to these requests as quickly as possible.

My country does not have a specific license or charter document that is provided to us as a separate document. If this is requested by fTLD, what should we send?

fTLD recognizes that different countries may have differing regulations regarding insurers’ licensure/certification and will accept other materials applicable to an insurers’ specific country of charter and supervision by a government regulatory authority.

What information is checked during the verification process?
  1. Security Check: fTLD will verify the Registrant Contact and Registrant Organization against government and restricted lists/blacklists.
  2. Registrant Organization Eligibility: fTLD will verify the Registrant Organization is eligible as defined in the Registrant Eligibility Policy. New Registrants should be prepared to provide applicable copies of confirming documentation such as Charters, Articles of Incorporation or Certifications of Formation, Licenses, and other forms of Regulatory Authorization, if requested.
  3. Registrant Organization Address: fTLD will verify the address is valid for the Registrant Organization. This is performed using government/regulatory authority resources or other qualified third-party references (e.g., Dun and Bradstreet).
  4. Registrant Contact Email Address: fTLD will verify the email address is valid for the Registrant Organization. This is performed using government/regulatory authority resources or other qualified third-party references (e.g., Dun and Bradstreet, Bloomberg).
  5. Name Selection: fTLD will verify the domain name(s) complies with the Name Selection Policy.
  6. Registrant Contact Employment and Authority: fTLD will verify the Registrant Contact is a full-time, non-contracting employee of the Registrant Organization and is authorized to request domain name(s) on its behalf. This confirmation, via email and/or telephone, must be made by a C-Suite employee (i.e., President, Chairman, CEO, CFO, CIO, CISO, CMO, COO or CTO) of the Registrant Organization.
I have been notified that my domain name is pending verification. What should I do?

fTLD uses information provided by you to confirm your eligibility for a domain name. fTLD will contact you via email or telephone if specific additional information is needed. It is important that you respond to fTLD’s request(s) promptly as your domain name cannot be registered until the verification process is completed and you have been provided a registration token. Registrants should respond promptly to all verification requests from fTLD, and failing to respond could result in rejection of your application or inactivation of your domain name. Any questions you have about the verification process should be sent to verify@fTLD.com.

Is the Registrant Contact in WHOIS allowed to be a role-based designation instead of a natural person?

In line with ICANN policy, fTLD allows role-based designations for the Registrant Contact Name and role email accounts for the Registrant Email. However, a specific individual’s name must be provided to fTLD for the verification process. This individual must be a full-time employee and authorized to register domains for the Registrant Organization. The verification application permits you to provide both the individual’s name and the role-based name.

When does fTLD re-verify eligibility for a .INSURANCE domain name?

To ensure Registrants maintain eligibility for their domain name(s), fTLD conducts annual verifications and verifications when certain registration information changes (e.g., Registrant Organization, Registrant Name, Registrant Email).

What happens if my organization is acquired?

Once fTLD learns of a consolidation or acquisition (e.g., from an insurance regulatory authority), we will communicate with the Registrant about what are and are not permissible activities for the domain registration to ensure compliance with fTLD’s Policies and Requirements. In the event of questions about this, please write to compliance@fTLD.com.

Security

What makes a .INSURANCE domain name more secure?

Bad actors cannot get a .INSURANCE domain from which to phish and spoof your customers, protecting your organization and customers from the #1 cyberattack. Further, fTLD requires compliance with a set of Registrant Security Requirements that are not mandated by the operators of other commercially available internet domains. Additionally, the fTLD Operations Pledge outlines the policies and procedures we and our registrars must follow to ensure the secure, stable and reliable operations of the .INSURANCE domain.

Can Security Requirements change? If so, how are these changes made and how will Registrars and Registrars know about them?

Yes, Security Requirements can change. The Security Requirements specify that fTLD will periodically review and amend the requirements to respond to changing needs in security or the community. The amendment process includes a review by fTLD’s Security Requirements Working Group (SRWG) and consideration and approval of its recommendations by fTLD’s Board of Directors. Any approved changes to the requirements will be communicated directly to Registrars and broadly announced to stakeholders via information posted to fTLD’s websites as well as other means for sharing such details. Adequate notification to stakeholders and time for implementation is provided when changes are required to processes and technical infrastructure by new or modified requirements. Please contact fTLD at fTLD@fTLD.com if you would like to participate in future efforts of the Security Requirements Working Group.

Who is responsible for enforcing the Security Requirements and Policies in .INSURANCE?

fTLD is ultimately responsible for enforcing the Security Requirements and policies in .INSURANCE. Registrars will also play a role in enforcement of Registrant Security Requirements as they have a direct relationship with the Registrant. fTLD retains the right to take action if the Registrar or Registrant  fails to do so.

Is there a way I can check to see if my .INSURANCE domain name is in compliance with the Security Requirements?

fTLD has compiled a list of publicly available, free resources that can be helpful in understanding whether the implementation of a .INSURANCE domain name addresses the defined requirements and it’s available here. Although these resources are useful, they are not exact checks against the requirements so you may still receive compliance notices even if these resources do not identify any issues. Registrants may email fTLD at compliance@fTLD.com to check the compliance status of a specific domain. fTLD will work with you and your Registrar to address compliance issues.

Can my organization host a .INSURANCE website without encryption?

No, .INSURANCE is an HTTPS-only community to support privacy and integrity of web and other services by default The Security Requirements mandate encryption via a digital identity certificate (e.g., TLS certificate) and specifies Encryption/TLS requirements for .INSURANCE websites. Also, as .INSURANCE is on the HSTS preload list, websites that are not HTTPS compliant will not be accessible via major browsers (like Chrome). As a global HSTS security policy becomes increasingly common, additional browsers will block sites that are not HTTPS compliant.

What is a Proxy/Privacy Registration Service and why is it prohibited?

Proxy/Privacy Registration Services are used to conceal the true identity of the domain name owner and their contact information. fTLD prohibits this practice as it makes it difficult to identify and contact a Registrant that is alleged to be using their domain name for practices that are in violation of fTLD’s Acceptable Use / Anti-Abuse Policy accessible here.

Are Role Names and Email Addresses permitted?

Registrants are permitted to use role names (e.g., Domain Admin) and role email addresses (e.g., domainadmin@insurername.TLD). Role names and role emails serves to mask the underlying true identity of the Registrant (i.e., their name and business email address) in the public WHOIS record; however, fTLD must always maintain this information in its systems (e.g., matters related to the verification process, security monitoring, compliance).

What happens if my activated .INSURANCE domain name is not in compliance with fTLD’s Policies or Requirements?

fTLD is monitoring all domain names for compliance with the Policies and Requirements. fTLD will notify Registrars/Registrants of domain names that are not in compliance and failure of the Registrar/Registrant to provide a timely response and a remediation plan to fTLD can result in the domain name being removed from the .INSURANCE zone or more significant actions.

Implementation

How do I implement the .INSURANCE Security Requirements to move to my .INSURANCE domain?

fTLD has developed an Implementation Hub to provide the necessary information, guides, resources and tools for implementing, testing, requesting assistance with and reporting on each of our Security Requirements. We also have guides for eligibility and planning & communications that many .INSURANCE Registrants have found helpful in making the move to .INSURANCE.

Once I move to our .INSURANCE domain name, what do I do with my existing domain?

You can continue using your current domain name (e.g., .com), and once you have your .INSURANCE domain in place you can redirect your traffic and emails to your new .INSURANCE site and email address. Maintaining your original domain and redirecting to your .INSURANCE domain will allow you to retain all customer traffic and communication while educating them about your move to a more secure domain. You can redirect your old domain indefinitely, though many insurers deactivate the old domain when traffic to them becomes minimal (usually up to one year).

Can I redirect my current domain name to my .INSURANCE domain name?

Yes, you can redirect traffic and emails from your .com (or other TLDs) to your .INSURANCE domain name, enabling you to retain traffic and communication while you educate your customers about your move to a more secure domain. While there are many ways to redirect visitors to a .INSURANCE domain name, an effective method to do this while maintaining your search engine ranking is by using the http ‘301 Moved Permanently’ response status code. Your .INSURANCE domain name must meet the HTTPS requirement by having a public key certificate (e.g., TLS certificate) installed to secure the domain name. Registrants are reminded that .INSURANCE is an HTTPS-only community and therefore any redirection must be made to the HTTPS version of the .INSURANCE website.

Can I redirect my .INSURANCE domain name to my current domain name (e.g., .com)?

Yes, provided your .INSURANCE domain name meets the HTTPS requirement you may redirect to your current domain. Organizations that redirect from .INSURANCE to non-.INSURANCE domain names are strongly encouraged to inform visitors of this action via an explicit message to avoid confusion and to assure that visitors understand they are leaving a .INSURANCE domain name. Registrants are reminded that .INSURANCE is an HTTPS-only community and therefore any redirection must be made from the HTTPS version of the .INSURANCE website.

What is the reason there are use restrictions imposed on my .INSURANCE domain name?

As noted in fTLD’s Acceptable Use / Anti-Abuse policy accessible here and the Implementation Guidelines annexed to the .INSURANCE Registrant Eligibility Policy accessible here, fTLD may impose additional use restrictions, at any time, on a Registrant’s use of a domain name to protect the integrity of the .INSURANCE gTLD and the community that it serves. fTLD will communicate any use restrictions on a .INSURANCE domain name to the Registrant before approving the initial registration request or at any time during the term of the registration of the .INSURANCE domain name, which must be accepted and complied with in order to maintain the registration.

Can I provide access to third-party content on my .INSURANCE domain name?

Yes, this activity is permitted.

Costs

What does a .INSURANCE domain name cost to register and why is it more expensive than my current domain name?

fTLD charges the same base price to Registrars for all .INSURANCE domains, which cover operating expenses such as the verification process, and monitoring of Security Requirements for .INSURANCE. Premium domains have a different base price. In addition, Registrars may include services and/or have their own operational expenses included in the final retail price of your .INSURANCE domain name.

Is there a difference in the cost between standard and premium domain names?

Yes, there is a difference in cost and Registrants should consult with their Registrar for this information.

Are there other costs associated with using my .INSURANCE domain name?

There will be other costs to your organization associated with the implementation of the Security Requirements. For example, complying with the DNSSEC, TLS, and name server requirements may require additional support and/or services from your Registrar, core processor, hosting provider, DNS provider, etc. As you consider which Registrar to use, you should ask about their ability to support the Security Requirements and the associated costs. See fTLD’s Third-Party Provider Program for who can assist you with meeting the requirements.

Are there any premium domain names in .INSURANCE?

Yes, all single-character names (e.g., 1.INSURANCE), most two-letter names (e.g., AB.INSURANCE), and names fTLD has reserved for its potential use, indicated in bold on the list of Registry Operator Reserved Names are identified as premium and subject to premium pricing.

General Information

Why .INSURANCE?

As a verified domain, exclusively for the insurance community, .INSURANCE is a more secure space for insurers and their customers. A web or email address ending in .INSURANCE quickly and easily confirms for customers and employees that they are communicating and transacting with your company, and not a phisher or a spoofed site. A .INSURANCE domain is a visual cue anyone can look for and recognize, an online stamp of trust that will give your customers confidence in your online platform, and help protect your company from bad actors collecting data for breaches, financial fraud and identity theft.

Where can I find all the .INSURANCE Policies mentioned in this FAQ?

All fTLD Policies for .INSURANCE are located here.

What is gTLD?

gTLD – or generic Top-Level Domain – refers to the letters to the right of the dot at the end of an internet web address. Examples of gTLDs are .INSURANCE, .BANK, .COM, .ORG and .NET.

What is fTLD?

fTLD Registry Services, LLC was formed in 2011 by a coalition of banks, insurance companies and financial services trade associations from around the world. In 2012, fTLD submitted community-based applications to the Internet Corporation for Assigned Names and Numbers (ICANN) for the .BANK and .INSURANCE gTLDs. fTLD launched .BANK in May 2015 and .INSURANCE in May 2016.

What is ICANN?

The Internet Corporation for Assigned Names and Numbers, or ICANN, is an oversight body responsible for the stability and unification of the internet. Its key responsibilities include policy development for existing and new generic Top-Level Domains (gTLDs). In June 2011, ICANN’s board of directors authorized the launch of the New gTLD Program. The program’s goals include enhancing competition and consumer choice, and enabling the benefits of innovation via the introduction of new gTLDs.

Trademarks

What is the Trademark Clearinghouse (TMCH)?

ICANN’s TMCH is a global repository for trademark data. Designed to meet global needs for the domain name system, the TMCH verifies trademark data worldwide and maintains a database with the verified trademark records. The TMCH is not a trademark office.

There is a cost to use the TMCH. Learn more at the Trademark Clearinghouse website.

Why would I want to register our trademarks in the Trademark Clearinghouse (TMCH)?

The Trademark Claims period initially ran for the first 365 days of General Availability and has been extended several times. To check the date the period will close, search for INSURANCE here. During the Trademark Claims period, anyone attempting to register a domain name matching a mark that is recorded in the TMCH will receive a notification displaying the relevant mark information.

If the notified party registers the domain name, the TMCH will send a notice to those trademark holders with matching records in the TMCH, informing them that someone has registered the domain name.

What trademarks does the Trademark Clearinghouse (TMCH) accept?

The TMCH will accept and verify registered trademarks, marks protected by statute or treaty or court validated marks as well as any other marks that constitute Intellectual Property (IP) rights that meet the eligibility requirements of the TMCH. Learn more about accepted marks at the Trademark Clearinghouse website.

(rev. 2019.05.09)
TOP