Transparency Report

The .nl domain is one of the most secure top-level domains in the world. And we work hard to keep it that way. We take the lead on tackling any abuse that involves .nl domain names, for example. Occasionally, that involves cancelling a domain name's registration. And sometimes legal proceedings started by others lead to us being asked to intervene or to share information.

Compared with the total number of .nl domains -- over six million -- the number of times we intervene is very small. Nevertheless, we think it's important to be open and transparent about our interventions, because they can have major implications for those involved. On this page, you'll find details about how often we have felt obliged to take action or share information, of our own accord or in response to legal proceedings. The information here is updated quarterly. If you've got a question about our intervention activities, drop a line to support@sidn.nl.

Notice and Take Down (NTD) Procedure

We remove a domain name from the zone if we are told about website content that is obviously criminal or unlawful, and if everyone who has more control over the content than we do has been asked to take it down, but hasn't.

Q1 2024

Q2 2024

Q3 2024

Q4 2024

NTD requests received

15

13

11

19

NTD requests actioned

2

2

5

5

Basis for actioning request

Child pornography material

0

0

0

0

Copy website

0

1

0

0

Identity fraud

1

1

5

4

Illegal gambling site

0

0

0

0

Illegal sales

0

0

0

1

Oil storage spoofing

0

0

0

0

Phishing

0

0

0

0

Replicas

0

0

0

0

Trademark infringement

1

0

0

0

Libel/slander

0

0

0

0

Dispute resolution

We offer a dispute resolution service for settling cases where someone believes a .nl domain name infringes their rights. A dispute can arise if, for example, a domain name is like someone else's brand name or trading name, or the name of a government body. The WIPO Arbitration and Mediation Center handles the disputes for us. Their decisions are published on the WIPO website and on domjur.nl.

Q1 2024

Q2 2024

Q3 2024

Q4 2024

WIPO cases started

16

11

12

10

WIPO cases resolved by mediation

2

5

3

0

Open cases

11

8

7

6

Cases decided

3

6

7

5

Complaints upheld

1

5

7

5

Complaints rejected

2

1

0

0

Cancellation by SIDN under Article 16

We can unilaterally cancel a domain name's registration at 30 days' notice. We're allowed to do that under Article 16 of the General Terms and Conditions for .nl Registrants. The registrant is told about our decision in a notice sent to their administrative contact's e-mail address. We cancel a registration only if the registrant fails to fulfil their obligations to us. The most common reason for cancelling a registration is that the registrant details provided are incorrect.

Q1 2024

Q2 2024

Q3 2024

Q4 2024

Procedures started

1,227

450

1,295

794

Cases resolved by registrar

76

113

153

53

Registrations cancelled by SIDN

580

1.104

945

1,110

Prevention of irregularities under Article 18

We try to prevent registration-related irregularities as far as possible. With that in mind, we introduced new rules in 2019, allowing us to delete a domain name from the zone if irregularities aren't corrected within 3days. The rules are set out in Article 18 of the General Terms and Conditions for .nl Registrants. We can take action if a domain name's registrant or registrar can't show that registration data is correct within 3 days. Or the registrant or registrar may themselves disable the name or cancel the registration when we point out an irregularity. We use our powers under Article 18 mainly when a domain name is being used for a fake webshop.

Q1 2024

Q2 2024

Q3 2024

Q4 2024

Procedures started

890

549

820

468

Cases resolved by registrar

187

137

231

121

Zone removals by SIDN

703

412

589

347

Provision of full contact details

Using the Whois tool on our website, anyone can look up certain details about a registered .nl domain name, such as the e-mail address of the registrant's administrative contact. However, our database contains other contact information as well, which isn't publicly available. Anyone with a legitimate reason for seeing that information can ask for it by filling in a form on our website.

Q1 2024

Q2 2024

Q3 2024

Q4 2024

Registrant contact information requests received

31

23

15

22

Requests granted

29

23

15

21

Complaints and Appeals

We have a Complaints and Appeals Board (C&AB), which is an independent body that a .nl registrar or registrant can go to if they want to appeal against a particular decision made by SIDN. An appeal can be made if, for example, we decide to temporarily or permanently delete a domain name from the zone. Or if we close a registrar's account. The C&AB also handles complaints made by people who believe that a domain name's registration undermines public order or decency. The C&AB's rulings are published on www.cvkb.nl.

Q1 2024

Q2 2024

Q3 2024

Q4 2024

C&AB cases

0

0

0

0

Phishing and malware

We're dedicated to fighting cybercrime like malware and phishing in the .nl zone. On the basis of suspected abuse reports received via a third-party feed, we contact the registrants, hosters and registrars of the domain names involved. We ask them to investigate and to take action if abuse is confirmed. If the suspected abuse continues, we send out reminders. If that doesn't get a result after up to 66 hours, we do our own checks. Where our checks confirm abuse, we remove the domain name from the zone, then notify the registrar. Once the malicious code has been deleted, the registrar can re-link the domain name's name servers, so that the domain name is re-included in the .nl zone.

Category

Q1 2024

Q2 2024

Q3 2024

Q4 2024

Phishing

604

369

535

337

Malware distribution URL

2

8

11

19

Web shell

151

113

202

51

Malware infrastructure URL

2

9

11

10

Shopping site skimmer

22

20

22

13

Cryptocurrency miner

0

6

3

4

Web-inject malware URL

61

104

119

29

Malware command & control centr

2

0

2

2

Fake shop

120

131

125

132

Cryptocurrency Investment Scam

66

7

20

10

Package Scam

2

0

1

2

Survey Scam

47

38

34

5

Defaced Website

111

94

132

32

Phishing Dropsite

9

2

6

1

Phiskit Archive

6

4

4

5

Median attack duration (hours)

21

23

22

28

Down in 24 hours

829 (70%)

637 (71%)

814 (67%)

380 (59%)

Domain names inactivated by SIDN

164

72

97

60