Web3 & Alternative DNS

Decentralized naming systems, blockchain domains, and privacy networks

Overview

Web3 and alternative DNS systems represent a paradigm shift in how domain names are registered, resolved, and owned. Unlike traditional DNS managed by ICANN and centralized registrars, these systems use blockchain technology, peer-to-peer networks, or cryptographic proofs to provide censorship-resistant, user-owned naming services.

DNS Science provides comprehensive monitoring and resolution for these alternative systems, enabling security researchers, compliance teams, and blockchain developers to track, analyze, and protect against threats in these emerging ecosystems.

Supported Technologies

ENS (Ethereum Name Service) .eth

What it is: The Ethereum Name Service is a distributed, open, and extensible naming system built on the Ethereum blockchain. It maps human-readable names like vitalik.eth to machine-readable identifiers like Ethereum addresses.

Key Features:

  • Resolves to Ethereum addresses, IPFS content hashes, and other records
  • Supports subdomains (e.g., pay.vitalik.eth)
  • Integrated with major wallets and dApps
  • Names are NFTs that can be traded on marketplaces
  • Reverse resolution (address to name)

Technical Details:

  • Uses Ethereum smart contracts for registration and resolution
  • Namehash algorithm uses keccak256 (not SHA3-256)
  • Resolver contracts store records (addresses, content hashes, text records)
  • Annual renewal fees paid in ETH

Example Resolution:

curl "https://api.dnsscience.io/api/v2/web3/ens?name=vitalik.eth"

# Returns:
{
  "domain": "vitalik.eth",
  "eth_address": "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
  "content_hash": "ipfs://...",
  "text_records": {...}
}
Unstoppable Domains .crypto .nft .wallet .x .blockchain

What it is: Unstoppable Domains provides blockchain-based domain names minted as NFTs on Ethereum and Polygon. Unlike ENS, these are one-time purchases with no renewal fees.

Key Features:

  • No renewal fees - pay once, own forever
  • Supports 10+ cryptocurrency addresses per domain
  • Can host decentralized websites via IPFS
  • Multiple TLDs: .crypto, .nft, .wallet, .x, .blockchain, .bitcoin, .dao
  • Built-in browser support in Opera, Brave

Technical Details:

  • Domains are NFTs on Polygon (low gas fees) or Ethereum
  • Resolution via Unstoppable's API or direct blockchain queries
  • Records stored on-chain in smart contracts

Example Resolution:

curl "https://api.dnsscience.io/api/v2/web3/unstoppable?name=brad.crypto"
Handshake (HNS) Decentralized TLDs

What it is: Handshake is a decentralized, permissionless naming protocol that aims to replace the root DNS zone file with a distributed blockchain. It enables anyone to own top-level domains (TLDs) directly.

Key Features:

  • Decentralized alternative to ICANN's root zone
  • Own entire TLDs, not just second-level domains
  • Auction-based initial name distribution
  • Compatible with existing DNS infrastructure
  • Names can point to traditional DNS nameservers

Technical Details:

  • Proof-of-work blockchain optimized for name auctions
  • UTXO-based like Bitcoin
  • Resolvers query HNS blockchain for TLD ownership
  • Can delegate to traditional nameservers

Example Resolution:

curl "https://api.dnsscience.io/api/v2/web3/handshake?name=welcome.nb"
I2P (Invisible Internet Project) .i2p

What it is: I2P is an anonymous overlay network that uses .i2p domains for internal addressing. Unlike Tor, I2P is designed primarily for internal services rather than accessing the regular internet.

Key Features:

  • End-to-end encrypted communications
  • Packet-based (like IP) rather than circuit-based
  • Unidirectional tunnels for enhanced anonymity
  • Built-in applications: email, torrents, IRC
  • Distributed hash table for address book

Technical Details:

  • .i2p addresses are Base32 or Base64 encoded destinations
  • Address book (hosts.txt) maps human-readable names to destinations
  • Garlic routing bundles multiple messages together
  • No exit nodes - designed for I2P-only services

Example Resolution:

curl "https://api.dnsscience.io/api/v2/web3/i2p?name=stats.i2p"

Technology Comparison

Feature ENS Unstoppable Handshake I2P
Primary Use Crypto addresses Crypto payments Decentralized TLDs Anonymous services
Blockchain Ethereum Polygon/Ethereum Handshake chain None (DHT)
Renewal Fees Annual None (one-time) None after auction None
Censorship Resistance High High Very High Very High
Browser Support Extensions Opera, Brave Special resolvers I2P browser
Resolution Speed 1-3 seconds 1-3 seconds ~1 second Variable

Why Web3 DNS Matters

Ownership and Control

Traditional domains can be seized by governments, suspended by registrars, or lost due to payment issues. Blockchain domains give users true ownership - they're controlled by private keys, not centralized authorities.

Censorship Resistance

Decentralized naming systems cannot be easily censored. There's no single point of failure or authority that can remove names. This is crucial for journalists, activists, and anyone in regions with internet censorship.

Interoperability with Web3

Blockchain domains integrate naturally with cryptocurrency wallets, dApps, and decentralized storage. Send crypto to alice.eth instead of a 42-character address.

Privacy

I2P and similar networks provide strong privacy guarantees. Users can host services without revealing their IP addresses or physical locations.

Why DNS Science Tracks Web3

Threat Intelligence

Malicious actors increasingly use blockchain domains for command and control infrastructure, phishing, and scams. Traditional DNS blocklists miss these threats entirely.

Our Mission

Use Cases

Scam Prevention & Security

Common Web3 DNS Scams

  • Typosquatting: vitalk.eth instead of vitalik.eth
  • Homograph attacks: Using similar-looking characters
  • Fake airdrops: Domains promising free tokens
  • Phishing: Domains mimicking legitimate DeFi protocols
  • Rug pulls: Projects with suspicious domain patterns

How DNS Science Helps

Address Reputation Scoring

We maintain reputation data for cryptocurrency addresses associated with domains. Addresses linked to scams, hacks, or sanctions are flagged.

Domain Risk Assessment

Threat Feeds

Enterprise customers receive real-time feeds of malicious Web3 domains for integration into security products.

# Check domain risk score
curl "https://api.dnsscience.io/api/v2/web3/resolve?name=suspicious.eth" \
  -H "Authorization: Bearer YOUR_API_KEY"

# Response includes risk indicators:
{
  "domain": "suspicious.eth",
  "eth_address": "0x...",
  "risk_score": 85,
  "risk_factors": [
    "Address linked to known scam",
    "Recently registered",
    "Typosquat of popular domain"
  ]
}

API Endpoints

Universal Resolver

GET /api/v2/web3/resolve?name={domain}

Auto-detects domain type and resolves using the appropriate system.

ENS Resolution

GET /api/v2/web3/ens?name={domain}

Resolves ENS (.eth) domains to Ethereum addresses and records.

Unstoppable Domains

GET /api/v2/web3/unstoppable?name={domain}

Resolves Unstoppable Domains (.crypto, .nft, .wallet, etc.).

Handshake

GET /api/v2/web3/handshake?name={domain}

Resolves Handshake (HNS) domains.

I2P

GET /api/v2/web3/i2p?name={domain}

Resolves I2P (.i2p) addresses.

CLI Commands

The DNS Science CLI includes a dedicated web3 command group:

# Universal resolution
dnsscience web3 resolve vitalik.eth

# ENS specific
dnsscience web3 ens vitalik.eth

# Unstoppable Domains
dnsscience web3 unstoppable brad.crypto

# Handshake
dnsscience web3 handshake welcome.nb

# I2P
dnsscience web3 i2p stats.i2p

# JSON output
dnsscience web3 resolve vitalik.eth --json

Installation

pip install dnsscience-cli

# Configure your API key
dnsscience configure --api-key YOUR_KEY