CyberDomains.xyz
Reference desk

Cyber Domain Resources, Checklists, and Glossary

Fast reference for the people who choose, buy, secure, and operate domains. Use the checklists during reviews and the glossary to align legal, security, brand, and infrastructure teams.

Illustrated guide for Cyber Domain Resources, Checklists, and Glossary

Launch-ready naming checklist

  • Write the domain’s job, primary audience, and highest-risk encounter.
  • Test every candidate by speech, delayed recall, lowercase display, email, and mobile screen.
  • Compare full names across extensions instead of ranking TLDs in isolation.
  • Search trademarks, company names, products, packages, social handles, and active counterpart domains.
  • Review likely typos and lookalikes, then choose a proportionate defensive set.
  • Confirm renewal price, security-service support, and future product flexibility.
  • Select a preferred name, negotiated alternative, and viable fallback.

Domain acquisition checklist

  • Define the exact assets and intended registrant entity.
  • Verify current control with a transaction-specific, non-destructive method.
  • Review registrar, statuses, dates, nameservers, DNSSEC, history, reputation, and prior disputes.
  • Complete rights screening for the buyer’s intended use.
  • Set opening, target, and walk-away ranges including transaction and migration cost.
  • Use a written agreement and payment protection appropriate to the value.
  • Preserve DNS, validate the transfer, restore locks, and update the inventory.

Critical-domain security checklist

  • Correct legal registrant, dedicated account, role contacts, and phishing-resistant MFA.
  • Recovery methods independent of the protected domain.
  • Registrar lock; registry lock where risk and TLD support justify it.
  • Dual approval for nameserver, transfer, DNSSEC, contact, and deletion changes.
  • Auto-renewal, resilient payment, independent expiration alerts, and verified contacts.
  • DNS provider access controls, scoped API tokens, logging, and external monitoring.
  • DNSSEC monitoring when enabled; tested recovery and change runbooks.
  • SPF, DKIM, DMARC, and deliberate policy for non-sending domains.

Migration checklist

  • Inventory URLs, DNS, email, certificates, identity, APIs, webhooks, apps, and vendor allowlists.
  • Secure and fully test the destination domain before public change.
  • Map old URLs to the closest new equivalents and remove redirect chains.
  • Configure new mail identities and authentication before announcing them.
  • Communicate through trusted channels and warn about migration-themed phishing.
  • Monitor DNS, TLS, redirects, crawl, email, authentication, transactions, and support.
  • Keep the old domain registered and serving required redirects and aliases.
  • Perform a post-launch review and update recovery documentation.

Glossary

Authoritative DNS
The name servers responsible for publishing the official DNS data for a zone.
Canonical domain
The preferred public domain used for primary URLs and signals when multiple domains exist.
Client status code
An EPP status generally set through the registrar, such as clientTransferProhibited.
DNS
The Domain Name System that maps names to records used by web, email, and other services.
DNSKEY
A DNSSEC record containing a public key used in validation of signed zone data.
DNSSEC
Extensions that add origin authentication and integrity to signed DNS data through a chain of trust.
DS record
A parent-zone record that points to key material in a signed child zone.
EPP
The Extensible Provisioning Protocol used for communication between registrars and registries.
ICANN
The nonprofit organization coordinating important parts of the Internet’s unique identifier system and related policies.
Nameserver
A server designated to answer DNS queries for a domain or delegated zone.
RDAP
The Registration Data Access Protocol, a structured HTTPS-based way to retrieve current registration data.
Registrant
The individual or entity holding a domain registration under the registration agreement.
Registrar
The organization providing registration services and communicating permitted changes to the registry.
Registrar lock
A registrar-managed restriction commonly used to block unauthorized transfer or other changes.
Registry
The operator maintaining the authoritative registration database for a top-level domain.
Registry lock
A registry-level control that usually requires a stronger process to permit protected changes.
RRSIG
A DNSSEC record containing a digital signature over a DNS record set.
Server status code
An EPP status generally applied at the registry level, such as serverUpdateProhibited.
TLD
The top-level domain at the right side of a name, such as .com or .xyz.
TTL
Time to live, the caching duration associated with a DNS record.
Typosquatting
Registration or use of a confusing variation, often designed to capture mistakes or impersonate a brand.
UDRP
An administrative policy for certain trademark-based disputes involving covered domain names.
WHOIS
A legacy term and protocol associated with domain registration data lookups; RDAP now provides structured access in many contexts.
Zone
An administratively managed portion of the DNS namespace and its published records.

New naming project: start with Cyber Domain Names, then read .COM vs .XYZ and How to Choose a Cybersecurity Domain Name.

Acquisition: use the Domain Buying Guide, Due Diligence Checklist, and Valuation Framework.

Operations: apply the Domain Security Baseline, Lock Guide, DNSSEC Guide, and Migration Runbook.