Applying for a gTLD means committing to infrastructure decisions you will live with for a decade. Backend selection, registry policy, launch sequencing, and increasingly, whether your namespace resolves on-chain as well as in the DNS.

The Applicant Guidebook tells you how to become a registry operator. It does not tell you how to connect one to a blockchain safely, or how ICANN will evaluate you when you try.

In early 2024, Orange Domains built a native DNS–Web3 bridge from the ground up for .locker. Behind it sits a full smart-contract stack authored for two different chains, hardened through formal security audit, deployed and publicly verified on Ethereum and Bitcoin mainnet, and operated every day as production registry infrastructure. Not a pilot, not a whitepaper, and not a third-party integration we resold.

As a new wave of Web3-enabled gTLDs prepares to enter the root, we are making that experience available to the operators building next.

Why Now

The application window's closed. The build starts now.

August 10, 2026
The first draft of recommendations for integrating with alternative naming systems was released
August 12, 2026
ICANN new gTLD application window closed
Late Q4 2026
The final report of integration recommendations lands for ICANN review
Unknown date
ICANN approves recommendations for secure integrations with alternative naming systems

ICANN's new gTLD application window closed August 12, 2026. Just two days earlier, the Technical Study Group on Integrating with Alternative Naming Systems draft report with recommendations was published its first public comment; the final recommendations for ICANN to approve won’t land until late Q4 after a second public comment, though that may change as well. That means applicants will start submitting RSEPs and building bridges for their gTLD before the recommendations are finalized. One wrong decision can mean a rejected RSEP and a derailed gTLD launch.

What's at Stake

A new framework with no playbook to follow.

That timing creates real obstacles. There's no out-of-the-box solution for a Web3 integration, and most teams don't have the combined Web2 and Web3 expertise to build one from scratch. DNS-Web3 integrations introduce technical concepts most registry operators have never had to touch: string+controller integrations and USoT architecture across ecosystems, reconciling records between onchain alternative names and offchain registrant records, keeping smart contracts compliant with registry policy, resolving lifecycle mismatches, abuse mitigation in decentralized naming systems, and handling names with prior onchain history. None of this is common knowledge, and most gTLDs are still figuring out where to begin with the TSG’s recommendations.

The Gap

The requirements nobody is ready for.

Every gTLD operator knows registrar agreements, zone files, and ICANN policy. Every Web3 native knows protocols, gas fees, and the chain landscape. Almost no one has had to combine them until now.

That's the gap consulting with Orange Domains closes.

Looking for more information about ICANN and the Web3 gTLD landscape? We can help. Drop Don Ruiz a line at don@orangedomains.com.

What We Offer

From Application to Live Registry: Our Services

We don't just advise. We also build. From your initial application through post-delegation and into daily operations, Orange Domains is the partner that gets your Web3 gTLD live and keeps it running.

📋
Integration Requirements & RSEP Readiness
Audit your integration against the emerging framework and identify gaps before the RSEP is submitted.
⚖️
ICANN Compliance Support
Learn the elements of string+controller integrations, registry agreements, EPP mapping, and data requirements.
🏗️
Technical Architecture Guidance
Gain access to SRS/EPP design, smart-contract architecture, resolver and source-of-truth design, security-model engineering, lifecycle management, and abuse mitigation strategy.
⚙️
Custom Web3 Development
Smart contract authorship, resolver and gateway infrastructure, SDKs and API builds, and digital wallet integration, all designed for you on a foundation already stress-tested in production.
🔎
Smart Contract Unified Source of Truth (USOT) Audit
Assess smart contracts against the recommendation from ICANN for testing, security and vulnerability mitigation.
🌐
Cross-Chain R&D
Our team can explore emerging chains and naming system protocols, and translate that research into what it means for your gTLD.
🤝
Partnership Guidance
Navigate registrar/registry relationships, Web3 naming system foundations, and network service operators with confidence.
🎯
Go-to-Market Strategy & Marketing Promotions
Collaborate on positioning and registrar assets, plus get access to promotional infrastructure like our Digital Asset Reward Engine (DARE).
Proven in Production

Consulting From a Registry Operating at the Frontier of Web3

Our dynamic team of innovators, engineers, marketers, and thought leaders is committed to bridging Web2 and Web3 securely and responsibly. Diverse industry experience helped us push the boundaries of what's possible in the domain and blockchain space for .locker:

Audited smart-contract builds on Bitcoin and Ethereum
Two independent, audited smart-contract builds for naming protocols on Bitcoin and Ethereum, all live and publicly verified on Mainnet.
Live source-of-truth architecture
A unified source-of-truth architecture that keeps Orange Domains in control of .locker, per the TSG report.
Registry-grade onchain lifecycle
A registry-grade onchain lifecycle designed to coexist with availability checks, conflict handling, and registry data requirements.
Full production developer stack
A full production stack of developer SDKs, 100+ endpoint APIs, cross-chain indexing, wallet-compatible NFT metadata, and an automated security test suite.
Day-two operations
Day-two operations including monitoring, infrastructure management, wallet administration for reward programs, and real incident response for a real registrant base.

Let's talk about what consulting looks like for your Web3 gTLD.

Whether you're submitting an application or preparing to build post-delegation, we'll put together a plan shaped around your gTLD, your stage, and your timeline.

Don Ruiz — General Manager
Orange Domains
FAQ

Common questions about Web3 gTLDs.

Answers for registry operators and applicants weighing a DNS-Web3 bridge for the 2026 round.

What is a Web3 gTLD?
A Web3 gTLD is a domain that functions both as a traditional domain name and a Web3 digital identity. Web3 digital identities are associated with digital wallets and live on the blockchain.
Do I need to think about Web3 when applying for a gTLD in the 2026 round?
It's not required by ICANN, but we strongly suggest considering it. The Web3 domain market has millions of registered domains, representing the broader surge in the cryptocurrency market and blockchain adoption.

It is far easier to integrate with Web3 before the Sunrise period. Integrating after registering domains creates technical complexities, disrupts branding, and creates confusion for existing registrants.
What does an integration with alternative namespaces mean for a Web3 gTLD registry operator?
Per ICANN's ongoing technical study of integrating with alternative name spaces, there are some requirements that may be coming down the line for Web3 gTLD registry operators. A string+controller integration requires registries to be in control of the health and security of their namespaces. This requires Unified Source of Truth architecture, reconciling onchain and offchain data to establish a source of truth, and careful smart contract design.
Does adding Web3 capabilities put ICANN accreditation at risk?
If done correctly, ICANN accreditation will not be at risk. ICANN's Technical Study Group has presented a framework for secure, resilient, and stable integrations with alternative naming systems, including blockchain-based naming systems. Registry operators who build Web3 bridges with that framework in mind have a stronger chance of passing the RSEP review, putting them on the path to gTLD launch.
Will Web3 integration replace or compete with existing DNS infrastructure?
No. Integrations with alternative naming systems should not interfere with the global DNS. Instead, integrations should act as an identity layer that complement the power of DNS. ICANN's technical study provides a framework for how integrations should work alongside DNS to ensure the stability of the broader internet.
Can .brand gTLDs integrate with Web3, or is it only for community/generic strings?
Yes, .brands can integrate with Web3! Use cases for .brands may differ from an individual looking for a digital identity. Blockchain principles like immutable ledgers, cryptographic security, and transparency are offering new opportunities for businesses.
My gTLD application is for an AI-related domain. Do I need Web3?
Yes. As AI agents start acting on our behalf by making purchases, managing tasks, executing transactions, they need an identity that's both machine-readable and human-verifiable. A digital wallet address alone doesn't tell you who or what you're dealing with. A DNS domain does.