Home / Industry

New TLD? Make Sure It's Secure

The introduction of hundreds of new Top-Level Domains (TLDs) is an exciting time for consumers, businesses, and the Internet community as a whole. However, malicious actors seeking new channels to pursue their activities are also rubbing their hands together with the launch of these TLDs.

These actors are organized, persistent and most importantly, aware of market and technology shifts that open potential new opportunities for exploiting end users. Unfortunately, the domain name industry has seen first-hand what unchecked abuse of a TLD can do for that extension's brand.

In talking with TLD Operators I have identified some confusion as to the requirements for mandatory abuse technical analysis and reporting and the best path to meet these requirements. ICANN compliance and anti-abuse obligations exist for both generic TLDs and .brands alike. While the operational impact differs between generic and .brand TLDs, the base requirement remains the same and in most cases the skills and tools required to monitor and maintain compliance are identical.

While some TLD operators will have internal staff skilled and available to perform the required abuse monitoring, this is not true for the majority of TLD Operators — especially those operating a single or small number of TLDs.

This is where a TLD Operator should consider outsourcing its abuse monitoring to a trusted third party to assess whether domains in the TLD are being used to perpetuate security threats, such as phishing, malware and botnets.

Neustar has provided malicious activity monitoring and its Registry Threat Mitigation Service (RTMS) since 2007 and supports numerous TLDs with these services, effectively and timely identifying security threats, coupled with appropriate logging of activities.

To understand more about how Neustar can help you detect malicious behavior in your TLD, contact rbaker@registry.neustar.

Written by Ryan Baker, Advisor, Professional Services at Neustar Inc.


About Neustar – Neustar,Inc. (NYSE:NSR) is the first real-time provider of cloud-based information services and data analytics, enabling marketing and IT security professionals to promote and protect their businesses. Learn More

Related topics: Cybersecurity, Top-Level Domains


Don't miss a thing – get the Weekly Wrap delivered to your inbox.

Related Blogs

Related News

Explore Topics

Dig Deeper


DNS Security

Sponsored by Afilias
Afilias Mobile & Web Services

Mobile Internet

Sponsored by Afilias Mobile & Web Services


Sponsored by Verisign

Promoted Posts

Now Is the Time for .eco

.eco launches globally at 16:00 UTC on April 25, 2017, when domains will be available on a first-come, first-serve basis. .eco is for businesses, non-profits and people committed to positive change for the planet. See list of registrars offering .eco more»

Industry Updates – Sponsored Posts

Global Domain Name Registrations Reach 330.6 Million, 1.3 Million Growth in First Quarter of 2017

.TECH Gets Its Big Hollywood Break

Verisign Named to the Online Trust Alliance's 2017 Audit and Honor Roll

Attacks Decrease by 23 Precent in 1st Quarter While Peak Attack Sizes Increase: DDoS Trends Report

.PRESS Supports Press Freedom Day for 3rd Consecutive Year

Leading Internet Associations Strengthen Cooperation

5 Afilias Top Level Domains Now Licensed for Sale in China

Radix Announces Largest New gTLD Sale with Casino.Online

2016 Year in Review: The Trending Keywords in .COM and .NET Domain Registrations

Global Domain Name Registrations Reach 329.3 Million, 2.3 Million Growth in Last Quarter of 2016

A Look at How the New .SPACE TLD Has Performed Over the Past 2 Years

Verisign Releases Q4 2016 DDoS Trends Report: 167% Increase in Average Peak Attack from 2015 to 2016

Neustar to be Acquired by Private Investment Group Led by Golden Gate Capital

Startup League Reports from WebSummit, Lisbon

Verisign Q3 2016 DDoS Trends Report: User Datagram Protocol (UDP) Flood Attacks Continue to Dominate

2016 U.S. Election: An Internet Forecast

.SPACE Becomes the Choice of the First Ever Space Nation Asgardia

Government Guidance for Email Authentication Has Arrived in USA and UK

ValiMail Raises $12M for Its Email Authentication Service

Don't Gamble With Your DNS