The .nl domain is one of the most secure top-level domains in the world. And we work hard to keep it that way. We take the lead on tackling any abuse that involves .nl domain names, for example. Occasionally, that involves cancelling a domain name's registration. And sometimes legal proceedings started by others lead to us being asked to intervene or to share information.
Compared with the total number of .nl domains -- over six million -- the number of times we intervene is very small. Nevertheless, we think it's important to be open and transparent about our interventions, because they can have major implications for those involved. On this page, you'll find details about how often we have felt obliged to take action or share information, of our own accord or in response to legal proceedings. The information here is updated quarterly. If you've got a question about our intervention activities, drop a line to support@sidn.nl.
Notice and Take Down (NTD) Procedure
We remove a domain name from the zone if we are told about website content that is obviously criminal or unlawful, and if everyone who has more control over the content than we do has been asked to take it down, but hasn't.
Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 | |
---|---|---|---|---|
NTD requests received | 15 | 13 | 11 | 19 |
NTD requests actioned | 2 | 2 | 5 | 5 |
Basis for actioning request | ||||
Child pornography material | 0 | 0 | 0 | 0 |
Copy website | 0 | 1 | 0 | 0 |
Identity fraud | 1 | 1 | 5 | 4 |
Illegal gambling site | 0 | 0 | 0 | 0 |
Illegal sales | 0 | 0 | 0 | 1 |
Oil storage spoofing | 0 | 0 | 0 | 0 |
Phishing | 0 | 0 | 0 | 0 |
Replicas | 0 | 0 | 0 | 0 |
Trademark infringement | 1 | 0 | 0 | 0 |
Libel/slander | 0 | 0 | 0 | 0 |
Dispute resolution
We offer a dispute resolution service for settling cases where someone believes a .nl domain name infringes their rights. A dispute can arise if, for example, a domain name is like someone else's brand name or trading name, or the name of a government body. The WIPO Arbitration and Mediation Center handles the disputes for us. Their decisions are published on the WIPO website and on domjur.nl.
Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 | |
---|---|---|---|---|
WIPO cases started | 16 | 11 | 12 | 10 |
WIPO cases resolved by mediation | 2 | 5 | 3 | 0 |
Open cases | 11 | 8 | 7 | 6 |
Cases decided | 3 | 6 | 7 | 5 |
Complaints upheld | 1 | 5 | 7 | 5 |
Complaints rejected | 2 | 1 | 0 | 0 |
Cancellation by SIDN under Article 16
We can unilaterally cancel a domain name's registration at 30 days' notice. We're allowed to do that under Article 16 of the General Terms and Conditions for .nl Registrants. The registrant is told about our decision in a notice sent to their administrative contact's e-mail address. We cancel a registration only if the registrant fails to fulfil their obligations to us. The most common reason for cancelling a registration is that the registrant details provided are incorrect.
Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 | |
---|---|---|---|---|
Procedures started | 1,227 | 450 | 1,295 | 794 |
Cases resolved by registrar | 76 | 113 | 153 | 53 |
Registrations cancelled by SIDN | 580 | 1.104 | 945 | 1,110 |
Prevention of irregularities under Article 18
We try to prevent registration-related irregularities as far as possible. With that in mind, we introduced new rules in 2019, allowing us to delete a domain name from the zone if irregularities aren't corrected within 3days. The rules are set out in Article 18 of the General Terms and Conditions for .nl Registrants. We can take action if a domain name's registrant or registrar can't show that registration data is correct within 3 days. Or the registrant or registrar may themselves disable the name or cancel the registration when we point out an irregularity. We use our powers under Article 18 mainly when a domain name is being used for a fake webshop.
Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 | |
---|---|---|---|---|
Procedures started | 890 | 549 | 820 | 468 |
Cases resolved by registrar | 187 | 137 | 231 | 121 |
Zone removals by SIDN | 703 | 412 | 589 | 347 |
Provision of full contact details
Using the Whois tool on our website, anyone can look up certain details about a registered .nl domain name, such as the e-mail address of the registrant's administrative contact. However, our database contains other contact information as well, which isn't publicly available. Anyone with a legitimate reason for seeing that information can ask for it by filling in a form on our website.
Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 | |
---|---|---|---|---|
Registrant contact information requests received | 31 | 23 | 15 | 22 |
Requests granted | 29 | 23 | 15 | 21 |
Complaints and Appeals
We have a Complaints and Appeals Board (C&AB), which is an independent body that a .nl registrar or registrant can go to if they want to appeal against a particular decision made by SIDN. An appeal can be made if, for example, we decide to temporarily or permanently delete a domain name from the zone. Or if we close a registrar's account. The C&AB also handles complaints made by people who believe that a domain name's registration undermines public order or decency. The C&AB's rulings are published on www.cvkb.nl.
Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 | |
---|---|---|---|---|
C&AB cases | 0 | 0 | 0 | 0 |
Phishing and malware
We're dedicated to fighting cybercrime like malware and phishing in the .nl zone. On the basis of suspected abuse reports received via a third-party feed, we contact the registrants, hosters and registrars of the domain names involved. We ask them to investigate and to take action if abuse is confirmed. If the suspected abuse continues, we send out reminders. If that doesn't get a result after up to 66 hours, we do our own checks. Where our checks confirm abuse, we remove the domain name from the zone, then notify the registrar. Once the malicious code has been deleted, the registrar can re-link the domain name's name servers, so that the domain name is re-included in the .nl zone.
Category | Q1 2024 | Q2 2024 | Q3 2024 | Q4 2024 |
---|---|---|---|---|
Phishing | 604 | 369 | 535 | 337 |
Malware distribution URL | 2 | 8 | 11 | 19 |
Web shell | 151 | 113 | 202 | 51 |
Malware infrastructure URL | 2 | 9 | 11 | 10 |
Shopping site skimmer | 22 | 20 | 22 | 13 |
Cryptocurrency miner | 0 | 6 | 3 | 4 |
Web-inject malware URL | 61 | 104 | 119 | 29 |
Malware command & control centr | 2 | 0 | 2 | 2 |
Fake shop | 120 | 131 | 125 | 132 |
Cryptocurrency Investment Scam | 66 | 7 | 20 | 10 |
Package Scam | 2 | 0 | 1 | 2 |
Survey Scam | 47 | 38 | 34 | 5 |
Defaced Website | 111 | 94 | 132 | 32 |
Phishing Dropsite | 9 | 2 | 6 | 1 |
Phiskit Archive | 6 | 4 | 4 | 5 |
Median attack duration (hours) | 21 | 23 | 22 | 28 |
Down in 24 hours | 829 (70%) | 637 (71%) | 814 (67%) | 380 (59%) |
Domain names inactivated by SIDN | 164 | 72 | 97 | 60 |