The .co expired domain policy just made .co easier to sell

Who is CIRA? Meet the driving force behind .CA domains

How to use Openprovider AI for domain operations you can trust

How Openprovider uses AI for domain operations you can trust

.uk is about to get a lot easier to sell

.cl domain requirements every reseller should know

How to sell .link premium domains to your customers

When a DNS provider loses its own nameservers and gets back a SERVFAIL

Subdirectory, subdomain, or .blog? How to advise clients on a content hub

Namecheap vs Openprovider: which is the best domain reseller platform?

Best wholesale domain registration (cost-price, not just discounted)

5 Best domain reseller APIs (REST, tld coverage, and pricing compared)

7 Best Namecheap alternatives (cheaper renewals, reseller-ready, no upsells)

7 Best domain reseller programs for higher margins

Is a .design domain good for design agencies? The truth about pricing and trust in 2026

Is a .design domain good for design agencies?

How the right domain API platform turns a complex ccTLD portfolio into a growth engine

7 things to know before registering a .CA domain name

What the .com price increase in 2026 means for your domain portfolio

What is a .tech domain and why are tech startups choosing it?

Why .link premium domains are worth the investment

Why LATAM resellers should add .mx domains to their portfolio

The .co TLD turns 16 years old in 2026

25 years of .nl: what every Dutch domain reseller needs to know to grow a profitable portfolio

How the Openprovider hackathon brought every customer into one view

The 7 best domain registrars of 2026

What is a .io domain extension and what does it stand for?

Why add .org to your domain reseller portfolio

Why subscription-based domain pricing outperforms markup models at scale

infrastructure platforms in domain reselling

The rise of infrastructure platforms in domain reselling

How infrastructure teams reduce support load with domain automation workflows through APIs

Why your clients need a .CL domain when expanding into Chile

consolidate Canadian client domains one platform

How to consolidate Canadian client domains into one platform

Why DNS failures increase when infrastructure is not centrally controlled

Why domain resellers should revisit .blog in 2026

DevNomads: API-first infrastructure and total margin control

Why a .cat domain strengthens your local online identity

Is your domain strategy ready for the World Cup?

Why domain resellers hit a structural growth ceiling in fragmented setups

What resellers with fragmented infrastructure are missing from a consolidated Reseller Control Panel

What domain infrastructure failures look like in real production environments

.dk registry is changing its administration model: what it means for your portfolio

How recurring revenue accelerates when infrastructure services like email, SSL, and DNS are centralized

.com vs. .CA which is best for Canadian businesses?

Why traditional domain pricing models become unstable under portfolio growth

ccTLD restrictions in 2026: which country domains you can actually sell as a reseller

Why API-first infrastructure is replacing registrar portals in reseller operations

Why manual domain renewal processes fail as portfolios scale

How fragmented domain infrastructure steadily erodes margin at scale

Your essential domain health check guide

Why domain operations break after 1,000 domains

The hidden domain renewal risk most resellers find too late

Personal brands, creators, and artists: the growing importance of identity-driven domains

How to fix ‘ERR_SSL_PROTOCOL_ERROR’ on Google Chrome

ERR_SSL_PROTOCOL_ERROR: what it means and how to fix it

.AI and .TECH domains are a smart investment cover image

The complete guide on .ai and .tech domains: sales, volumes, and value

.ai vs .com choosing the right domain for your startup

.ai vs. .com: choosing the right domain for AI startups

Nominate your .org domain and win up to $50,000!

Domain Pricing Registration vs Renewal Costs

Busting the biggest myths about Web3 for domain resellers

7 cheap email hosting providers of 2026

TLD and .com domain price increase in 2026: what Verisign, SIDN, and domain owners say

Who really controls your clients' domains, and why it matters

Who really controls your clients’ domains, and why it matters

Unstoppable domains alternative: why consider Openprovider for domain resellers in 2026?

Premium domain risks explained: trademark, security, and valuation

Why so many domain resellers choose Openprovider as their domain registrar

The .asia upsell opportunity: how resellers can serve Asian-focused businesses in Europe

How to use AI for domain sales: a step-by-step guide

The hidden operational costs of managing domains, SSL, and email across multiple providers

How to negotiate a domain name: expert tips and strategy guide

How to choose a domain infrastructure partner you can trust

How AI-powered domain name search transformed domain name discovery: the .me registry’s journey

Openprovider vs Netim: what do smart domain resellers look for

Atak domains alternative: why consider Openprovider as a domain reseller in 2026?

ConnectReseller alternative: why switch to Openprovider in 2026

Preparing your domain and hosting infrastructure for the vibe coding era

How digital agencies can turn domain infrastructure into a competitive advantage

Exploring reseller alternatives to Gandi: Openprovider as a reseller-first choice

Domain portfolio management: 6 strategies for success

The business case for multi-year domain registrations

Enhancing client relationships: a guide for hosting resellers

6 domain trends resellers should watch in 2026 and beyond

Domain Name API alternative: Why resellers are choosing Openprovider instead

How predictable pricing models help domain resellers protect their margins

How to reduce churn in hosting and domain businesses

How MSPs can centralize domain, SSL, and DNS management

Is your business email at risk? Why DMARC matters in 2026

AI.com sold for $70M: what the record domain deal means for premium domains and resellers

How to upsell security services your customers actually want 

How to set up white-label domain services for your hosting business

What is EasyDMARC? How to protect your email infrastructure

EasyDMARC: Protecting your email infrastructure in the AI age

How a .blog domain helps creators stand out

The affordable way to centralize your digital infrastructure without compromising quality

How to automate domain management using APIs

Choosing the right ResellerClub alternative in 2026

.blog: one simple domain, five real-world ways to use it

New gTLDs vs ccTLDs: which should you sell to clients?

What is RDAP? The new WHOIS protocol explained

DNS explained for non-technical business owners

Vibe coding cybersecurity Openprovider Netcraft

The rise of vibe coding as a cybersecurity weapon

DNSSEC: what it is, why it matters, and how to enable it

Choosing the right domain name for affiliate marketing

What is a domain registry vs registrar vs reseller?


<p>Most of the attention in the domain industry goes to acquisition: new registrations, launch campaigns and first-year growth targets. For a domain reseller, long-term success depends on what happens a year later, when each of those domains comes up for renewal and a payment card, a contact email or a client’s assumption can decide whether it stays active.</p>



<p>That makes the <a href="https://registry.co/co-expired-domain-policy">new .co expired domain policy</a> worth a close look. In this article, we look at:</p>



<ul class="wp-block-list">
<li>What the .co expired domain policy changes</li>



<li>Why the policy makes .co easier to sell</li>



<li>Who runs the .co registry</li>



<li>Four ways to reduce missed .co renewals across your portfolio</li>



<li>How to add .co to your reseller portfolio with Openprovider</li>
</ul>



<h2 class="wp-block-heading" id="h-key-takeaways"><strong>Key takeaways</strong></h2>



<ul class="wp-block-list">
<li>Since October 1, 2026, every expired .co must complete the full domain lifecycle.</li>



<li>Registrars and resellers cannot auction, warehouse or transfer an expired .co without written approval from the .CO Registry.</li>



<li>keeps the right to renew or restore the domain during the renewal and restore periods. </li>



<li>Auto-renew, multi-year terms, renewal notices and automated expiry handling keep your clients’ .co domains active.</li>
</ul>



<h1 class="wp-block-heading" id="h-what-the-co-expired-domain-policy-means-for-your-clients-domains"><strong>What the .co expired domain policy means for your clients’ domains</strong></h1>



<p>The <a href="https://registry.co/co-expired-domain-policy">.CO Registry Policy on Expiring Domain Names</a> took effect on October 1, 2026. It requires every expired .co domain to complete the normal domain lifecycle. Registrars and resellers cannot auction, warehouse or transfer an expired .co to a new owner without written approval from the .CO Registry, and the original registrant keeps full rights to renew or restore it.</p>



<p>The domain lifecycle covers the stages after a domain expires: a period where the owner can renew at the normal price, a restore period with an added fee, and finally deletion, when the registry removes the domain. Our guide on <a href="https://www.openprovider.com/blog/my-domain-expired-what-happens-now">what happens when a domain expires</a> walks through each stage in more detail.</p>



<p>Two practices now need registry approval for .co:&nbsp;</p>



<ul class="wp-block-list">
<li>Pre-deletion auctions, where a registrar sells an expired domain before the registry deletes it.</li>



<li>Warehousing, where a registrar keeps an expired domain for itself. The registry still allows backorders, which register a domain once the registry deletes it, because they use normal registration.</li>
</ul>



<p>For your clients, the result is simple: their <a href="https://www.openprovider.com/domains/tlds/co">.co domain</a> stays theirs for the whole lifecycle, and that gives you a strong point to raise in your next sales conversation.</p>



<h2 class="wp-block-heading" id="h-why-the-policy-makes-co-easier-to-sell"><strong>Why the policy makes .co easier to sell</strong></h2>



<p>The .co expired domain policy applies to domain resellers as well as registrars. It covers all Registrar-Related Parties, so if you sell .co to your own customers, you follow the same lifecycle rules, and your clients keep their right to renew.</p>



<p>That gives you a clear message for business clients. A missed renewal date gives them time to act, with the full lifecycle to renew and a restore period after that, and the registry applies this rule to every registrar that sells .co. For a client choosing a domain to build a business on, that protection makes .co an easier decision.</p>



<p>The policy also puts more weight on your own renewal process. Once a client’s .co completes its lifecycle, the registry deletes it and anyone can register the name, so a reliable renewal process keeps every .co in your portfolio active and bringing in recurring revenue.</p>



<p>Clients who like this protection often ask a follow-up question: who runs .co, and is it a safe long-term choice?</p>



<h2 class="wp-block-heading" id="h-who-runs-co-and-why-your-clients-can-trust-it"><strong>Who runs .co, and why your clients can trust it</strong></h2>



<p><a href="https://centralnicregistry.com">CentralNic</a>, part of Team Internet, has run the .co registry since October 3, 2025. It operates .co with CCI on behalf of MinTIC, Colombia’s Ministry of Information and Communications Technologies. The move to CentralNic transferred <a href="https://domainincite.com/31424-centralnic-claims-second-largest-tld-migration-ever">3.3 million .co domains in 29 hours</a>, which CentralNic describes as one of the largest TLD migrations to date.</p>



<p>.co is a country code top-level domain (ccTLD), which lets the registry set its own policies for every registrar that sells it. The expired domain policy is one of those decisions, and it gives your clients the same lifecycle protection wherever they registered their name. Our <a href="https://www.openprovider.com/blog/the-co-tld-turns-16-years-old-in-2026">.co anniversary post</a> covers how .co grew from Colombia’s country code into a global choice for startups.</p>



<p>A stable registry gives your clients confidence in .co, and your renewal process decides how much of that protection reaches them.</p>



<h3 class="wp-block-heading" id="h-four-ways-to-reduce-missed-co-renewals-across-your-portfolio"><strong>Four ways to reduce missed .co renewals across your portfolio</strong></h3>



<p>Resellers reduce missed .co renewals with four controls: auto-renew by default, multi-year registration terms, early renewal notices and automated expiry handling. Together, these controls catch many of the renewals that would otherwise slip through when a client forgets, and they give clients who want to keep their domain every chance to do so.</p>



<p>Each one protects both your client’s domain and your recurring revenue, and they work for hosters, MSPs and agencies alike:</p>



<ul class="wp-block-list">
<li><strong>Turn on auto-renew by default:</strong> clients who want to let a domain go can switch it off, and the rest renew automatically, with no one on your team stepping in.</li>



<li><strong>Offer multi-year terms:</strong> your clients can register or renew a .co for up to five years in total, which leaves them fewer renewal dates to manage and gives you longer-term revenue.</li>



<li><strong>Send renewal notices early:</strong> send them to an address the client checks, and repeat them as the expiry date gets closer.</li>



<li><strong>Automate expiry handling:</strong> connect renewals to your billing system through an API or a plugin, so your team sees a failed payment before the domain expires.</li>
</ul>



<p>Your .co clients are the best place to start this quarter, and running all four controls from one platform is the easiest step of all.</p>



<h2 class="wp-block-heading" id="h-how-to-add-a-co-domain-to-your-reseller-portfolio-with-openprovider"><strong>How to add a .co domain to your reseller portfolio with Openprovider</strong></h2>



<p>With Openprovider, .co runs through the same platform, the same API, the same WHMCS module and the same <a href="https://www.openprovider.com/membership-plans">Openprovider Membership</a> as every other TLD you already sell.</p>



<p>Openprovider Membership gives you cost-price access to Openprovider-accredited TLDs, including .co, with no markup added between you and the registry. That leaves more room for your own margin on every .co renewal. The domain sits alongside the rest of your portfolio in the same <a href="https://www.openprovider.com/resellers/reseller-control-panel">Reseller Control Panel</a>, with one renewal view and one place to manage auto-renew and renewal notices.</p>



<h2 class="wp-block-heading" id="h-sell-co-at-cost-price-with-an-openprovider-membership"><strong>Sell .co at cost price with an Openprovider Membership</strong></h2>



<p>If your clients rely on .co and you want more control over their renewals, <a href="https://cp.openprovider.eu/signup">create a free Openprovider account</a> and start managing your .co domains in one place.</p>



<p>With the new policy protecting every .co registrant, the resellers who pair it with a reliable renewal process are the ones best positioned to keep those clients for years.</p>



<h3 class="wp-block-heading" id="h-frequently-asked-questions"><strong>Frequently asked questions</strong></h3>



<h2 class="wp-block-heading" id="h-what-is-the-new-co-expired-domain-policy"><strong>What is the new .co expired domain policy?</strong></h2>



<p>The .CO Registry Policy on Expiring Domain Names took effect on October 1, 2026. It requires every expired .co domain to complete the normal domain lifecycle, and it stops registrars and resellers from auctioning, warehousing or transferring an expired .co to a new owner without written registry approval.</p>



<h3 class="wp-block-heading" id="h-can-i-still-renew-an-expired-co-domain"><strong>Can I still renew an expired .co domain?</strong></h3>



<p>Yes. The original registrant keeps the right to renew or restore an expired .co until the lifecycle ends and the registry deletes it. For resellers, this means a client who misses a renewal date still has time to act.</p>



<h3 class="wp-block-heading" id="h-can-registrars-still-auction-expired-co-domains"><strong>Can registrars still auction expired .co domains?</strong></h3>



<p>Only with written approval from the .CO Registry. The registry still allows backorders on deleted domains, because they go through normal registration.</p>



<h3 class="wp-block-heading" id="h-does-the-co-policy-apply-to-domain-resellers"><strong>Does the .co policy apply to domain resellers?</strong></h3>



<p>Yes. The policy covers registrars and all Registrar-Related Parties, including resellers. If you sell .co to your own customers, the same lifecycle rules apply to every .co in your portfolio.</p>



<h3 class="wp-block-heading" id="h-who-runs-the-co-registry"><strong>Who runs the .co registry?</strong></h3>



<p>CentralNic, part of Team Internet, has run the .co registry since October 3, 2025, working with CCI on behalf of MinTIC, Colombia’s Ministry of Information and Communications Technologies.</p>



<h3 class="wp-block-heading" id="h-is-co-a-safe-choice-for-business-clients"><strong>Is .co a safe choice for business clients?</strong></h3>



<p>Yes. CentralNic runs .co with CCI on behalf of MinTIC, Colombia’s ICT ministry , and the expired domain policy gives every registrant the full lifecycle to renew or restore their domain before deletion.</p>



<h3 class="wp-block-heading" id="h-can-i-sell-co-domains-through-whmcs"><strong>Can I sell .co domains through WHMCS?</strong></h3>



<p>Yes. Openprovider resellers can sell .co through the Openprovider <a href="https://www.openprovider.com/resellers/integrations/whmcs">WHMCS module</a> and the Openprovider API. .co sits in the same catalog as the other extensions you sell, so you can add it to your hosting packages inside a system you already use.</p>



<p></p>


co_mdf_blog_1124x400-%c2%b7-v2-co-social-style-1

co_mdf_blog_1124x400 · V2 (.co social style) (1)


<p>For domain resellers, .CA gives your customers a lot to work with: national trust, strong local recognition, and a clear signal that they serve the Canadian market.&nbsp;</p>



<p>.CA’s Canadian Presence Requirements mean only Canadian citizens, permanent residents, and businesses can register one. Furthermore, 85% of Canadians say they prefer buying from a .CA site over a .com when supporting local businesses.</p>



<p>Behind every great ccTLD is a great registry &#8211; <a href="https://www.cira.ca">Canadian Internet Registration Authority (CIRA)</a> is the one behind .CA.&nbsp;</p>



<p>This article covers who CIRA is, how the registry, registrar, and reseller layers fit together, and the rules domain resellers work under every time they register or renew a .CA domain.</p>



<h2 class="wp-block-heading" id="h-who-is-cira"><strong>Who is CIRA?</strong></h2>



<p>CIRA is the not-for-profit, member-driven organization that manages Canada&#8217;s .CA domain. Based in Ottawa, CIRA took over .CA from the University of British Columbia on December 1, 2000, and its board is elected annually by its members. CIRA reports managing 3.6 million .CA domains as of 2026, according to<a href="https://www.cira.ca"> CIRA&#8217;s own registration figures</a>, making it one of the larger ccTLD registries in the world.</p>



<p>CIRA is not a government agency. It operates independently, governed by its own members.</p>



<h2 class="wp-block-heading" id="h-registry-registrar-reseller-who-does-what"><strong>Registry, registrar, reseller: who does what</strong></h2>



<p>The domain industry works through three layers: registry, registrar, and reseller. CIRA is the registry: it sets the rules for .CA, and holds the one official database of every .CA registration. It does not sell .CA domains directly to the public. Every .CA registration must go through a CIRA-certified registrar, a company CIRA has approved to register, renew, and transfer .CA domains on its systems.</p>



<p>Below the registrar sits the reseller: a hosting company, agency, or MSP that sells domains to its own clients through a registrar&#8217;s platform, without needing its own CIRA certification.</p>



<figure class="wp-block-table"><table class="has-fixed-layout"><tbody><tr><td><strong>Layer</strong></td><td><strong>Role</strong></td><td><strong>Example</strong></td></tr><tr><td>Registry</td><td>Sets the rules, holds the official .CA database, approves registrars</td><td>CIRA (.CA)</td></tr><tr><td>Registrar</td><td>Approved directly by the registry, connects to its systems, sells to the public and to resellers</td><td>Openprovider</td></tr><tr><td>Reseller</td><td>Sells domains under its own brand through a registrar&#8217;s platform</td><td>Web hosts, agencies, MSPs</td></tr></tbody></table></figure>



<p>For resellers, knowing your place in this structure makes the rest of how .CA works much clearer. That starts with the rules CIRA sets for every domain on its registry.</p>



<h2 class="wp-block-heading" id="h-the-cira-rules-every-ca-reseller-works-within"><strong>The CIRA rules every .CA reseller works within</strong></h2>



<p>While resellers do not deal with CIRA directly, its policies still apply to every .CA domain they sell. Registrations that don&#8217;t meet these requirements can be rejected or suspended, so knowing them upfront helps you collect the right details from customers and avoid issues later.&nbsp;</p>



<p>All .CA domains fall under CIRA&#8217;s registry policy compliance requirements, including the following:</p>



<h2 class="wp-block-heading" id="h-certification-and-the-registrant-agreement"><strong>Certification and the registrant agreement</strong></h2>



<p>Selling .CA requires CIRA certification, a direct approval process separate from ICANN&#8217;s general accreditation for TLDs like .com. Once someone registers a .CA domain, they have seven days to accept CIRA&#8217;s registrant agreement, the contract that sets out their rights and duties as a .CA holder.</p>



<h2 class="wp-block-heading" id="h-canadian-presence-requirements"><strong>Canadian Presence Requirements</strong></h2>



<p>To register a .CA, you must meet CIRA&#8217;s Canadian Presence Requirements (CPR): eligibility rules based on citizenship, permanent residency, or a Canadian business presence. Anyone who meets CPR can register a .CA domain.</p>



<p>In a<a href="https://www.openprovider.com/blog/cira-ceo-byron-holland-on-the-future-of-ca"> past interview with Openprovider</a>, CIRA CEO Byron Holland explained why this matters:</p>



<p>&#8220;To keep .CA Canadian, we have Canadian Presence Requirements to ensure only Canadian citizens and/or permanent residents with a physical presence in Canada can register .CA domains. This way, consumers can trust that they are interacting with a real Canadian business.&#8221;</p>



<p>Read the<a href="https://www.openprovider.com/blog/what-is-the-ca-domain"> full breakdown of .CA domain requirements</a>.</p>



<h2 class="wp-block-heading" id="h-life-cycle-and-to-be-released-tbr-domains"><strong>Life cycle and To Be Released (TBR) domains</strong></h2>



<p>A .CA domain that lapses follows a fixed process. After expiry, it enters a 45-day auto-renew grace period, then a 30-day redemption grace period during which the original registrant can reclaim it. Unclaimed domains then move to CIRA&#8217;s To Be Released (TBR) list and become available during a weekly Wednesday drop session, sometimes called drop catching, where each registrar gets one connection and one request every five seconds. There is no auction &#8211; the first successful request wins.</p>



<h2 class="wp-block-heading" id="h-cdrp-cira-s-dispute-resolution-process"><strong>CDRP: CIRA&#8217;s dispute resolution process</strong></h2>



<p>Disputes over a .CA domain go through CIRA&#8217;s own Domain Name Dispute Resolution Policy (CDRP), separate from ICANN&#8217;s Uniform Domain-Name Dispute-Resolution Policy (UDRP), which covers generic TLDs. Anyone involved in a .CA dispute works under CIRA&#8217;s rules, not ICANN&#8217;s.</p>



<h2 class="wp-block-heading" id="h-what-the-registry-model-means-for-your-clients"><strong>What the registry model means for your clients</strong></h2>



<p>CIRA&#8217;s rules are not just background details. They give resellers real trust arguments to use when a client is weighing .CA against a generic alternative.</p>



<p>A portion of every .CA registration goes toward <a href="https://www.cira.ca/en/net-good/">Net Good</a>, CIRA&#8217;s program that funds Canadian internet infrastructure, digital literacy, and online safety projects. Individual .CA registrants also get WHOIS privacy protection by default, a standard shaped by Canadian privacy law that many generic TLDs only offer as a paid extra. CIRA requires DNSSEC support across the whole registry, adding a layer of protection against DNS spoofing that not every ccTLD requires. And .CA ranks low on Spamhaus&#8217;s domain abuse tables, a sign that CIRA&#8217;s policies help keep the TLD cleaner than most.</p>



<p>If you already manage domains for several Canadian clients, read how to<a href="https://www.openprovider.com/blog/consolidate-canadian-client-domains-platform"> bring a Canadian client portfolio onto one platform</a>. Our<a href="https://www.openprovider.com/blog/ca-domains-for-resellers"> full case for offering .CA to your clients</a> covers the business side in more detail.</p>



<p>That said, CIRA&#8217;s work extends beyond .CA, and that wider scope is exactly what makes its partnership with SIDN worth knowing about.</p>



<h2 class="wp-block-heading" id="h-cira-and-sidn-the-hello-registry-partnership"><strong>CIRA and SIDN: the Hello Registry partnership</strong></h2>



<p><strong>Hello Registry, at a glance</strong></p>



<ul class="wp-block-list">
<li>Announced at ICANN 78 in Hamburg, 2023</li>



<li>Given the name &#8220;Hello Registry&#8221; at ICANN 81 in Istanbul, November 2024, replacing the earlier name &#8220;CIRA Registry Platform&#8221;</li>



<li>Shared infrastructure between CIRA, which runs .CA, and SIDN, which runs .NL</li>



<li>CIRA also provides back-end registry services for .NZ, .IE, .KIWI, .SX, and .MLS, and applied as a Registry Service Provider (RSP) during ICANN&#8217;s 2026 new gTLD application round</li>
</ul>



<p>While CIRA runs .CA,<a href="https://www.sidn.nl"> SIDN</a>, the Dutch registry, runs .NL. Since November 2024, both operate on Hello Registry, a shared platform first announced at ICANN 78 in 2023. For resellers, that&#8217;s dual accreditation in practice: Openprovider holds direct accreditation with both CIRA and SIDN, so .CA and .NL portfolios sit with one partner across two established ccTLD operators, instead of setting up two separate relationships. Read more about<a href="https://www.openprovider.com/blog/25-years-of-nl-what-every-dutch-domain-reseller-needs-to-know-to-grow-a-profitable-portfolio"> Openprovider&#8217;s 25 years managing .NL</a>.</p>



<h2 class="wp-block-heading" id="h-register-ca-with-a-cira-certified-registrar"><strong>Register .CA with a CIRA-certified registrar</strong></h2>



<p>Openprovider is proud to be a CIRA-certified registrar. This means .CA runs through the same approval, the same platform, and the same<a href="https://www.openprovider.com/membership-plans"> Openprovider Membership</a> pricing as every other TLD in your portfolio. Members register, renew, and transfer .CA domains at cost price, with no separate agreement needed to sell into the Canadian market.</p>



<p>If .CA is already part of your catalog, or you are thinking about adding it,<a href="https://www.openprovider.com/domains/tlds/ca"> explore .CA domains</a> and manage it alongside everything else your clients ask for.</p>



<p>And in the meantime, you can create your free Openprovider account <a href="https://cp.openprovider.eu/signup">here</a>, and see how easy and cost effective it is to manage 2,000 TLDs on one platform.&nbsp;</p>



<h2 class="wp-block-heading" id="h-frequently-asked-questions"><strong>Frequently asked questions</strong></h2>



<p><strong>Who operates .CA?<br></strong>The Canadian Internet Registration Authority (CIRA) operates .CA. CIRA is a not-for-profit organization based in Ottawa. It took over .CA from the University of British Columbia on December 1, 2000.</p>



<p><strong>Can I register a .CA domain directly with CIRA?<br></strong>&nbsp;No. CIRA does not sell .CA domains directly to the public. Every .CA registration goes through a CIRA-certified registrar, such as Openprovider, or a reseller working on a certified registrar&#8217;s platform.</p>



<p><strong>What happens when a .CA domain expires?<br></strong>&nbsp;An expired .CA enters a 45-day auto-renew grace period, then a 30-day redemption grace period, during which the original registrant can still get it back. After that, it moves to CIRA&#8217;s To Be Released list.</p>



<p><strong>How do I get an expiring .CA domain?<br></strong>&nbsp;Unclaimed .CA domains on the To Be Released list become available during CIRA&#8217;s Wednesday drop session. Each registrar gets one connection and can send one request every five seconds. The first successful request wins the domain.</p>



<p><strong>How are .CA disputes resolved?<br></strong>&nbsp;.CA disputes go through CIRA&#8217;s own Domain Name Dispute Resolution Policy (CDRP). This is separate from ICANN&#8217;s UDRP, which covers disputes for generic TLDs like .com.</p>



<p><strong>What is Hello Registry?<br></strong>&nbsp;Hello Registry is the shared registry platform built by CIRA and SIDN, the registry for the Netherlands&#8217; .NL domain. It was announced at ICANN 78 in 2023 and given the name Hello Registry at ICANN 81 in November 2024.</p>



<p></p>


ca_1200x628_landscape-1

CA_1200x628_landscape-1


<p>Most AI announcements in the domain industry focus on what an agent can do. They detail how many tasks it covers and how many tools it connects to. An infrastructure provider that resells domains to its own customers needs to know how much authority the AI has, and when a person steps in to make the call.</p>



<p>Openprovider AI runs in four places:&nbsp;</p>



<ul class="wp-block-list">
<li>Trust and abuse scoring</li>



<li>Identity checks at signup</li>



<li>Support automation</li>



<li>A domain management co-pilot. </li>
</ul>



<p>Openprovider&#8217;s in-house AI team builds and runs each one around the same question: is the system confident enough to act, or should a person decide?</p>



<p>Our blog on <a href="https://www.openprovider.com/blog/domain-management-with-ai">solving domain management with AI</a> covered the general benefits of AI. This article shows how our own systems work, starting with the one rule they all follow.</p>



<h2 class="wp-block-heading" id="h-one-rule-keeps-a-person-in-charge-of-every-uncertain-decision-on-your-domains"><strong>One rule keeps a person in charge of every uncertain decision on your domains</strong></h2>



<p>Every Openprovider AI system follows the same rule: confidence decides who acts.&nbsp;</p>



<p>Each system gives every decision a confidence value, a score for how sure it is about its own answer. With high confidence, the system acts on its own, and with lower confidence, it sends the case to a person. When it has too little information to judge, it takes no action.</p>



<p>Abuse scoring is the first place we apply the rule, because a wrong decision there affects your customers&#8217; domains.</p>



<h2 class="wp-block-heading" id="h-risk-scores-with-confidence-values-protect-your-customers-from-wrongful-suspensions"><strong>Risk scores with confidence values protect your customers from wrongful suspensions</strong></h2>



<p>Openprovider AI gives every domain on our platform a risk score from 0 to 100, plus a confidence value and a risk band, a label that groups scores into levels of risk. Our AI team built the score from around ten independent analyzers that run in parallel. Each analyzer checks a different kind of evidence, such as how the domain name is built or whether it imitates a known brand through a small spelling change, a tactic called typosquatting.</p>



<p>The system resolves obvious cases in milliseconds on a fast path and runs ambiguous ones through every analyzer before it acts or passes the case to our abuse team. Around the score, a classifier sends each abuse report to the right queue, bulk classification sorts large takedown requests, and anomaly detection flags sudden changes in abuse volume. Our article on <a href="https://www.openprovider.com/blog/how-openprovider-handles-domain-abuse">how Openprovider handles domain abuse</a> explains the policy and suspension process.</p>



<p>For a reseller, this means we stop real abuse faster and suspend fewer legitimate customers by mistake, so your team handles fewer escalations from clients. Abuse handling also affects your reputation: Interisle&#8217;s <a href="https://interisle.substack.com/p/phishing-landscape-2026-malicious">Phishing Landscape 2026</a> research found that attackers registered about three quarters of phishing domains in recent years specifically for phishing.</p>



<p>We keep the weights, thresholds and specific signals behind these scores private, because publishing them would show abusers how to avoid detection. Our identity checks start even earlier, before an account can register its first domain.</p>



<h2 class="wp-block-heading" id="h-real-time-identity-checks-keep-bad-actors-off-your-platform-from-the-first-signup"><strong>Real-time identity checks keep bad actors off your platform from the first signup</strong></h2>



<p>Openprovider AI checks every new account in real time with a set of small models, each built for one task:&nbsp;</p>



<ul class="wp-block-list">
<li>Validating documents</li>



<li>Authenticating users</li>



<li>Matching faces</li>



<li>Detecting AI-generated documents. </li>
</ul>



<p>Together, these models run KYC and KYB checks (know your customer and know your business) during signup. People on our team review only the edge cases, so legitimate businesses sign up quickly.</p>



<p>Once an account is live, the same confidence rule helps Isabella answer its support tickets faster.</p>



<h2 class="wp-block-heading" id="h-faster-support-answers-with-a-person-checking-every-uncertain-reply"><strong>Faster support answers, with a person checking every uncertain reply</strong></h2>



<p>Isabella, our support automation tool, uses classical machine learning to read each ticket, work out what the customer needs and find the right knowledge base article. A large language model then writes the reply.</p>



<p>Isabella sends high-confidence replies automatically, saves medium-confidence replies as drafts for a support agent to review, and leaves low-confidence tickets for a person to handle from the start. It works in four languages and learns from every reply an agent edits or approves. Isabella is live in our support team and rolling out as chat in the Reseller Control Panel. Customers get faster first responses, and Isabella resolves more tickets without a person getting involved. Our article on <a href="https://www.openprovider.com/blog/ai-and-automation-in-hosting">AI and automation in hosting</a> covers the wider industry.</p>



<p>Isabella answers questions, while the co-pilot takes actions on your domains, so its permissions matter even more.</p>



<h2 class="wp-block-heading" id="h-the-co-pilot-automates-domain-work-with-the-permissions-your-team-already-has"><strong>The co-pilot automates domain work with the permissions your team already has</strong></h2>



<p>The Openprovider co-pilot lets your team manage domains by typing requests in plain English. Staff without API skills can ask it to find a domain, calculate costs, explain a setting, open the right screen or carry out a task.</p>



<p>Some platforms give AI agents admin-level access. Our AI team designed the co-pilot to act only as the logged-in user, with that user&#8217;s own access token. It has no admin identity and no direct access to our database.</p>



<p>The co-pilot can immediately run read-only tasks, such as searches and calculations. It can only perform write actions from a fixed list, so it cannot create new operations. For most write actions, it shows a preview card with the exact action and settings and waits for the user to approve, and deletes and bulk changes need a separate hard confirmation. Every action goes through the <a href="https://developer.openprovider.com/">Openprovider API</a> and its standard checks.</p>



<p>The co-pilot uses the role and permissions you already gave each team member, so you can delegate domain work to more of your team without giving anyone extra access. Use these five questions to check how much authority any AI has over your customers&#8217; domains.</p>



<figure class="wp-block-table"><table class="has-fixed-layout"><thead><tr><th><strong>Question to ask any AI that touches your domains</strong></th><th><strong>Openprovider&#8217;s answer</strong></th></tr></thead><tbody><tr><td>Whose identity does it act with?</td><td>The logged-in user&#8217;s, using that user&#8217;s own token. It has no admin identity.</td></tr><tr><td>Can it invent new operations?</td><td>No. It can only perform write actions from a fixed list.</td></tr><tr><td>Which actions need approval?</td><td>Most write actions, after a preview card shows the exact action and settings.</td></tr><tr><td>Which actions need a hard confirmation?</td><td>Deletes and bulk changes.</td></tr><tr><td>Can it see more than the user can?</td><td>No. It has no direct database access and sees only what the user&#8217;s account allows.</td></tr></tbody></table></figure>



<p>We apply the same care to billing, where AI checks that Members pay the right price.</p>



<h2 class="wp-block-heading" id="h-continuous-billing-checks-keep-cost-price-membership-pricing-accurate"><strong>Continuous billing checks keep cost-price Membership pricing accurate</strong></h2>



<p>Registries start and end promotions all the time, and each change affects what Openprovider pays and what Members pay. Openprovider AI compares the two prices continuously and flags any gap as soon as it appears. It checks both directions: that Members get registry discounts while they apply, and that Member prices update when a promotion ends. This keeps cost-price pricing accurate on eligible TLDs, so you can plan your margins on correct numbers.</p>



<h2 class="wp-block-heading" id="h-clear-ai-rules-and-human-sign-off-protect-every-change-to-your-platform"><strong>Clear AI rules and human sign-off protect every change to your platform</strong></h2>



<p>The Openprovider AI team has built finance automations, automated QA testing and a pipeline that turns a Jira ticket into a pull request, a proposed code change ready for review. These tools have saved our organization tens of hours of manual work so far, with hundreds more expected once planned projects ship. The team is also testing a model-agnostic &#8220;software factory&#8221; that can run on different AI models, so Openprovider does not depend on a single AI vendor.</p>



<p>An AI ambassador program scores teams on the AI-powered processes they ship, our Security team owns the list of approved AI tools, and a person signs off on any significant or customer-facing change. The team is already building the next tools for the Reseller Control Panel.</p>



<h2 class="wp-block-heading" id="h-ai-driven-onboarding-and-an-ai-website-builder-are-on-the-roadmap-for-your-reseller-control-panel"><strong>AI-driven onboarding and an AI website builder are on the roadmap for your Reseller Control Panel</strong></h2>



<p>Two new tools are on the roadmap for the Reseller Control Panel: an AI-driven onboarding flow and an AI website builder. Neither has shipped yet, and we will share details closer to release.</p>



<h2 class="wp-block-heading" id="h-registrar-scale-data-gives-openprovider-ai-an-edge-that-competitors-cannot-license"><strong>Registrar-scale data gives Openprovider AI an edge that competitors cannot license</strong></h2>



<p>Any company can license the same AI models we use. Openprovider has built the data those models learn from over more than 22 years: registration, abuse and reconciliation records at registrar scale. This data makes our models accurate, and a culture of testing and shipping keeps improving them.</p>



<p>If you are deciding whether to trust a registrar&#8217;s AI with your customers&#8217; domains, start with the questions below.</p>



<h2 class="wp-block-heading" id="h-questions-to-ask-before-you-trust-openprovider-ai-with-your-domains"><strong>Questions to ask before you trust Openprovider AI with your domains</strong></h2>



<h3 class="wp-block-heading" id="h-how-does-openprovider-use-ai"><strong>How does Openprovider use AI?</strong></h3>



<p>Openprovider uses AI in four places: trust and abuse scoring, identity checks, support automation and a domain management co-pilot. It also uses AI to check billing. Each system acts alone only when it is confident.</p>



<h3 class="wp-block-heading" id="h-is-it-safe-to-let-an-ai-agent-manage-domains"><strong>Is it safe to let an AI agent manage domains?</strong></h3>



<p>It depends on the agent&#8217;s authority. The Openprovider co-pilot acts only as the logged-in user, uses a fixed list of write actions and asks for approval before most changes.</p>



<h3 class="wp-block-heading" id="h-what-does-human-in-the-loop-mean-for-openprovider-ai"><strong>What does human in the loop mean for Openprovider AI?</strong></h3>



<p>A person reviews every case the AI is not confident about, and the co-pilot waits for the user&#8217;s approval before most changes.</p>



<h3 class="wp-block-heading" id="h-who-builds-openprovider-ai"><strong>Who builds Openprovider AI?</strong></h3>



<p>Openprovider&#8217;s in-house AI team builds and runs every system in this article.</p>



<p></p>


ai_blog_1124x400-1

ai_blog_1124x400 (1)

Auto Draft

Business Advice

Business Email

Company Updates

Domain News

Domain Resellers

Domains

Geen onderdeel van een categorie

Industry News

Podcasts

Security

Sin categorizar

SSLs and Security

Tech & AI

TLDs

Uncategorized @hi

Domain transfer

Domain prices

Domain promotions

WHOIS lookup

Reseller control panel

WHMCS

Plesk license

WP Guardian

Other integrations

Business email

Spam filtering

EasyDMARC

Premium SSL certificates

Premium DNS

S/MIME and CodeSigning

Free domain security scanner

Domains & Services

Membership plans to give you competitive advantage

Membership program

Membership pricing

Membership

Web hosting providers

Digital agencies

Marketing agencies

Solutions

Blog

Leadership resources & Media

Cybersecurity Hub

Corporate Social Responsibility

API documentation

Knowledge base

Contact support

Resources

openprovider-blocks/dynamic-blog-hero-highlight

<strong>Openprovider Blog</strong>

openprovider-blocks/hero-center-with-badge-v2

openprovider-blocks/dynamic-blog-list-categories

Find Your Domain

frame-1000005428

Frame 1000005428

New blog page development

Sign me up!

Become a Member today and get access to exclusive deals.

The .co expired domain policy just made .co easier to sell

Openprovider Blog

Not a Member yet?