it.com How it.com Domains Prevents Abuse and Fraud

[it.com]

Thanks to our partners, our team, and our end users, the .it.com suffix is growing exponentially. The year 2024 was a banner year for us, and along with that success have come increasing attempts at fraud and abuse. From the beginning, we decided that our domain extension would be one of quality and healthy growth. We don’t allow illegal activities. We monitor the .it.com suffix regularly using multivariate data that we have gathered into an exclusive “special sauce,” which is already in place and improving by the day.

There are many benefits to owning an .it.com domain. Our clients can register keywords under the .it.com suffix for an SRP (Suggested Retail Price) of $49.00 annually. Many recent registrations are for keywords worth millions of dollars in the .com zone, meaning that average end users are getting bargains on highly valuable keywords.

The most important benefit, however, is the degree of trust that comes with any domain that ends in .com. Yes, our clients buy third-level domains, but they still get a domain with .com at the end of it.

We take that trust very seriously. That’s why we’ve developed policies designed to enhance trust over time. Our policies are evolving as we encounter new cases and develop better methods to prevent abuse. And because our zone is unique, we believe it’s important to be transparent and to communicate our policies and methods with you—our registrar partners.

We recognize that our zone, as a private third-level domain operation, is a little different. But that difference also gives us better insight into what is happening within the zone. We take many proactive measures, including:

• Monitoring ICANN (Internet Corporation for Assigned Names and Numbers) and following their best practices for registries.
• Cooperating closely with our registrar partners to stay informed about new abuse types.
• Receiving regular reports from some of the world’s best abuse-reporting agencies.
• Maintaining contact with the most important spam list aggregators.
• Using several proprietary, third-party reporting services.
• Working with leading domain name arbiters to prevent trademark abuse.We offered a widely promoted Sunrise Period (a period of time between 30 and 60 days before domain names are made available to the general public) in January–February 2023.
• Partnering with the Brand Safety Alliance since day one.
• Evaluating copyright complaints as they arise.
• Collaborating with law enforcement agencies worldwide to prevent illegal activities when necessary.

Through extensive experimentation and collaboration with our experienced DevOps team, we’ve developed a comprehensive set of policies and practices. Below, we outline some of the key aspects of our program.

The it.com Domains Abuse Prevention Program​

Level 1 – Suspicious​

We have developed multiple levels of abuse severity. Level 1 represents a suspicious registration.

For example, we’ve found that domains containing keywords such as bank.it.com and other finance-related terms are commonly used for fraud. Suspicion flags are also raised for domains that include the names of famous software brands and terms related to email, security, passwords, and logins.

Additionally, we maintain an unpublished and constantly evolving list of trending suspicious keywords. At our discretion, we may temporarily withhold these domains from registration until we determine they are safe.

We use machine learning to assess suspiciousness, so this assessment will become more and more accurate. Suspicious flags don’t lead to blocking the domain, optionally we can contact the registrar to draw their attention to this domain.

Level 2 – Reported Spam​

A domain that appears on lists such as Spamhaus, SpamCop, or SORBS is not automatically blocked or affected, but we monitor it more closely. We understand that millions of legitimate domain registrants can end up on these lists and often resolve the issues that landed them there.

Level 3 – Reported & Verified Mass UCE or Abuse (Domain Block Status)​

Level 3 violations trigger Domain Block Status and include:

• Phishing attacks
• Malware distribution
• Botnets
• Pharming
• Excessive copyright complaints

We have mechanisms in place to detect and prevent these abuses. Any malicious activity that uses a domain name to deceive users or distribute harmful content (DNS abuse) will result in a Domain Block action.

A few key points:

1. We will notify the registrar partner.
2. No refunds are offered when abuse is involved.
3. The Partner Registrar may unblock the domain if it believes that the blocking was done by mistake and the registrant has provided sufficient evidence of the legality of using the domain.
4. In case of repeated violation, the domain is blocked in accordance with Level 4.

Level 4 – Reported Illegal Activities (Server Block Status)​

Higher-level violations are more severe and treated accordingly. The most egregious cases trigger a Server Block Status, which applies when we receive reports of:

• Child exploitation.
• Human trafficking.
• Child pornography.
• Other illegal content.

If we confirm such violations, we will immediately notify the registrar partner and place the domain in Server Block Status.

Legal Actions & Government Requests:​

Level 4 Server Block Status may also be applied in cases involving legal proceedings or government authorities.

Evolving for a Safer Internet​

Our Abuse Prevention Program is subject to change as we adapt to the growing challenges of protecting our partners and end users. Our policy is designed to keep abuse out of the .it.com zone.

If you have any questions or concerns, feel free to reach out to us at [email protected]. We consider our registrar partners an integral part of our commitment to a safer online environment.

Continue reading on the it.com Domains blog...