Table of Contents
Overview
Web3 and alternative DNS systems represent a paradigm shift in how domain names are registered, resolved, and owned. Unlike traditional DNS managed by ICANN and centralized registrars, these systems use blockchain technology, peer-to-peer networks, or cryptographic proofs to provide censorship-resistant, user-owned naming services.
DNS Science provides comprehensive monitoring and resolution for these alternative systems, enabling security researchers, compliance teams, and blockchain developers to track, analyze, and protect against threats in these emerging ecosystems.
Supported Technologies
What it is: The Ethereum Name Service is a distributed, open, and extensible naming system built on the Ethereum blockchain. It maps human-readable names like vitalik.eth to machine-readable identifiers like Ethereum addresses.
Key Features:
- Resolves to Ethereum addresses, IPFS content hashes, and other records
- Supports subdomains (e.g.,
pay.vitalik.eth) - Integrated with major wallets and dApps
- Names are NFTs that can be traded on marketplaces
- Reverse resolution (address to name)
Technical Details:
- Uses Ethereum smart contracts for registration and resolution
- Namehash algorithm uses keccak256 (not SHA3-256)
- Resolver contracts store records (addresses, content hashes, text records)
- Annual renewal fees paid in ETH
Example Resolution:
curl "https://api.dnsscience.io/api/v2/web3/ens?name=vitalik.eth"
# Returns:
{
"domain": "vitalik.eth",
"eth_address": "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
"content_hash": "ipfs://...",
"text_records": {...}
}
What it is: Unstoppable Domains provides blockchain-based domain names minted as NFTs on Ethereum and Polygon. Unlike ENS, these are one-time purchases with no renewal fees.
Key Features:
- No renewal fees - pay once, own forever
- Supports 10+ cryptocurrency addresses per domain
- Can host decentralized websites via IPFS
- Multiple TLDs: .crypto, .nft, .wallet, .x, .blockchain, .bitcoin, .dao
- Built-in browser support in Opera, Brave
Technical Details:
- Domains are NFTs on Polygon (low gas fees) or Ethereum
- Resolution via Unstoppable's API or direct blockchain queries
- Records stored on-chain in smart contracts
Example Resolution:
curl "https://api.dnsscience.io/api/v2/web3/unstoppable?name=brad.crypto"
What it is: Handshake is a decentralized, permissionless naming protocol that aims to replace the root DNS zone file with a distributed blockchain. It enables anyone to own top-level domains (TLDs) directly.
Key Features:
- Decentralized alternative to ICANN's root zone
- Own entire TLDs, not just second-level domains
- Auction-based initial name distribution
- Compatible with existing DNS infrastructure
- Names can point to traditional DNS nameservers
Technical Details:
- Proof-of-work blockchain optimized for name auctions
- UTXO-based like Bitcoin
- Resolvers query HNS blockchain for TLD ownership
- Can delegate to traditional nameservers
Example Resolution:
curl "https://api.dnsscience.io/api/v2/web3/handshake?name=welcome.nb"
What it is: I2P is an anonymous overlay network that uses .i2p domains for internal addressing. Unlike Tor, I2P is designed primarily for internal services rather than accessing the regular internet.
Key Features:
- End-to-end encrypted communications
- Packet-based (like IP) rather than circuit-based
- Unidirectional tunnels for enhanced anonymity
- Built-in applications: email, torrents, IRC
- Distributed hash table for address book
Technical Details:
- .i2p addresses are Base32 or Base64 encoded destinations
- Address book (hosts.txt) maps human-readable names to destinations
- Garlic routing bundles multiple messages together
- No exit nodes - designed for I2P-only services
Example Resolution:
curl "https://api.dnsscience.io/api/v2/web3/i2p?name=stats.i2p"
Technology Comparison
| Feature | ENS | Unstoppable | Handshake | I2P |
|---|---|---|---|---|
| Primary Use | Crypto addresses | Crypto payments | Decentralized TLDs | Anonymous services |
| Blockchain | Ethereum | Polygon/Ethereum | Handshake chain | None (DHT) |
| Renewal Fees | Annual | None (one-time) | None after auction | None |
| Censorship Resistance | High | High | Very High | Very High |
| Browser Support | Extensions | Opera, Brave | Special resolvers | I2P browser |
| Resolution Speed | 1-3 seconds | 1-3 seconds | ~1 second | Variable |
Why Web3 DNS Matters
Ownership and Control
Traditional domains can be seized by governments, suspended by registrars, or lost due to payment issues. Blockchain domains give users true ownership - they're controlled by private keys, not centralized authorities.
Censorship Resistance
Decentralized naming systems cannot be easily censored. There's no single point of failure or authority that can remove names. This is crucial for journalists, activists, and anyone in regions with internet censorship.
Interoperability with Web3
Blockchain domains integrate naturally with cryptocurrency wallets, dApps, and decentralized storage. Send crypto to alice.eth instead of a 42-character address.
Privacy
I2P and similar networks provide strong privacy guarantees. Users can host services without revealing their IP addresses or physical locations.
Why DNS Science Tracks Web3
Threat Intelligence
Malicious actors increasingly use blockchain domains for command and control infrastructure, phishing, and scams. Traditional DNS blocklists miss these threats entirely.
Our Mission
- Complete visibility: Monitor the full namespace, not just traditional DNS
- Early detection: Identify malicious blockchain domains before they're widely used
- Research: Understand how these technologies are adopted and abused
- Integration: Provide unified APIs for security tools to query all naming systems
Use Cases
- Security Teams: Detect when employees or systems access suspicious Web3 domains
- Compliance: Monitor for policy violations involving blockchain assets
- Incident Response: Trace cryptocurrency addresses back to domain names
- Brand Protection: Find typosquatting across all naming systems
Scam Prevention & Security
Common Web3 DNS Scams
- Typosquatting:
vitalk.ethinstead ofvitalik.eth - Homograph attacks: Using similar-looking characters
- Fake airdrops: Domains promising free tokens
- Phishing: Domains mimicking legitimate DeFi protocols
- Rug pulls: Projects with suspicious domain patterns
How DNS Science Helps
Address Reputation Scoring
We maintain reputation data for cryptocurrency addresses associated with domains. Addresses linked to scams, hacks, or sanctions are flagged.
Domain Risk Assessment
- Registration age and history
- Similarity to known brands
- Associated address activity
- Content hash analysis
- Cross-reference with phishing databases
Threat Feeds
Enterprise customers receive real-time feeds of malicious Web3 domains for integration into security products.
# Check domain risk score
curl "https://api.dnsscience.io/api/v2/web3/resolve?name=suspicious.eth" \
-H "Authorization: Bearer YOUR_API_KEY"
# Response includes risk indicators:
{
"domain": "suspicious.eth",
"eth_address": "0x...",
"risk_score": 85,
"risk_factors": [
"Address linked to known scam",
"Recently registered",
"Typosquat of popular domain"
]
}
API Endpoints
Universal Resolver
/api/v2/web3/resolve?name={domain}
Auto-detects domain type and resolves using the appropriate system.
ENS Resolution
/api/v2/web3/ens?name={domain}
Resolves ENS (.eth) domains to Ethereum addresses and records.
Unstoppable Domains
/api/v2/web3/unstoppable?name={domain}
Resolves Unstoppable Domains (.crypto, .nft, .wallet, etc.).
Handshake
/api/v2/web3/handshake?name={domain}
Resolves Handshake (HNS) domains.
I2P
/api/v2/web3/i2p?name={domain}
Resolves I2P (.i2p) addresses.
CLI Commands
The DNS Science CLI includes a dedicated web3 command group:
# Universal resolution
dnsscience web3 resolve vitalik.eth
# ENS specific
dnsscience web3 ens vitalik.eth
# Unstoppable Domains
dnsscience web3 unstoppable brad.crypto
# Handshake
dnsscience web3 handshake welcome.nb
# I2P
dnsscience web3 i2p stats.i2p
# JSON output
dnsscience web3 resolve vitalik.eth --json
Installation
pip install dnsscience-cli
# Configure your API key
dnsscience configure --api-key YOUR_KEY