Data Quality
Ensuring the quality of the data we have for registrants and that we publish in our WHOIS database has been a key objective for EURid since the early days of the .eu top-level domain.
The provision of accurate and up-to-date data is an increasingly important tool in combatting fraudulent domain name use.
We believe that the actions and processes described below can be successful with the full support of our registrars and registrants. By working together with them, we will continue to improve our data quality and make the .eu namespace trusted and safe.
WHOIS Quality
Web-based WHOIS data (which includes information about the domain name holder and name servers associated with each domain name) is useful and mandatory for a variety of purposes. These include carrying out inquiries by consumer protection and other law enforcement authorities, identifying the source of spam email, developing actions to safeguard intellectual property rights, and addressing cyberattacks, as well as resolving technical network issues.
EURid continuously strives to improve the quality of WHOIS data and to promote the registrar compliance with their contractual obligations. To achieve this, we developed EURidity, our own WHOIS Quality system. EURidity is a platform designed to prevent the delegation of bad domains and streamline their withdrawal process in an automated way, using our award-winning APEWS methodology. EURidity minimizes the risk of suspending legitimate domain names without sufficient proof, integrates KYC validation, and interfaces with our support platform for efficient communication.
APEWS
The Abuse Prevention and Early Warning System (APEWS) is an innovative and award-winning methodology based on evaluating patterns of domain name registration. It predicts whether a domain name may potentially be used in an abusive manner.
If the system identifies a registered domain name as being potentially linked to abuse, the domain name is immediately suspended and its status in the web-based WHOIS shows as “Server Hold”. The domain name is registered; however, any service linked to it (such as a website, email, or any other service) will not function. The domain name holder is required to review and validate their registration data via the secured https://my.eurid.eu platform, which EURid created for its domain name holders. The domain name will become active only after a successful validation of the domain name registration data. If the registration data are not validated within a specific time frame, the domain name will be withdrawn and subsequently made available for registration based on the first come, first served principle.
To find out more about APEWS, please consult the following scientific publications (available in English only):
- Detection of Algorithmically Generated Domain Names used by Botnets: A Dual Arms Race.
- Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD
- Assessing the Effectiveness of Domain Blacklisting Against Malicious DNS Registrations.
- An Operational Solution for DNS Registries to Prevent Malicious Domain Registrations
If you have any questions related to personal data processing at EURid, please take a closer look at our Privacy Policy.
Know-Your-Customer
The purpose of our implementation of Know Your Customer (KYC) is to enable domain name holders from the European Union and the European Economic Area to confirm their registration data in an automated manner using one of the available methods at their disposal in EURid’s https://my.eurid.eu platform. The methods that are currently available are described in more detail below. This service expedites the validation process of registration data and lightens the administrative burden for domain name holders. Please note that not all methods described below are available in all the European Union and the European Economic Area countries.
Validation via electronic identity card (eID)
If you have an electronic identity card, you can confirm your registration details with eIDAS.
Electronic identity cards are quickly becoming the standard within the European Union thanks to the eIDAS, which ensures that people and businesses can use their own national electronic identification (eIDs) to access online services throughout EU Member States.
We will continue to integrate new electronic identity schemes with sufficient levels of assurance from other Member States into our systems.
Validation via MRZ scan and SMS
Most official identity or travel documents contain a Machine-Readable Zone (MRZ) with encoded information relating to personal data (such as full name, country of citizenship, and document number). The domain name holder first enters their mobile phone number and receives a text message containing a unique link. This link opens a newly developed application that guides the domain name holder through the process of scanning the Machine-Readable Zone of their identity document. No data leaves the mobile phone until the user has confirmed it. This validation method is supported in all 24 official languages of the European Union.
Validation via bank transfers
Domain name holders that want to obtain a Statement of Holdership can confirm their registration data by transferring a small amount (less than one EUR) directly to a EURid bank account. The bank transfer needs to contain a six-digit code, which shows when selecting this method on my.eurid.eu portal. As soon as the payment is received, EURid will compare the name and address from the bank account holder with the domain name holders information. If the information matches, the Statement of Holdership is automatically issued.
Domain name holders that have been asked to confirm their registration data will now have the option to do this by receiving a small bank payment (less than one EUR) from EURid. This validation method is available to all domain name holders with a bank account in EUR opened in one of the European Union Member States, Iceland, Liechtenstein, or Norway. EURid will make a small payment, which includes a six-digit code. After receiving this payment, the domain holder logs into my.eurid.eu and enters the code to confirm his registration data.
Validation via credit card
Domain name holders can use a credit card to validate their registration data. EURid will not reserve any funds or charge the card, and no transaction will appear on the credit card statement.
Three-step process
Domain name holders who are required to verify their registration data via the methods set out above have either 3 days or 6 weeks to do so, depending on the circumstances of the validation request.
1. First, domain name holders will be asked via e-mail to confirm the registration data linked to their domain name(s). They can do so in their My.eu account by requesting an access code on https://my.eurid.eu which is valid for 2 hours. Private individuals can also complete the validation process as representatives of a company or association.
2. Once logged in to https://my.eurid.eu portal, the domain name holder is first required to review their registration data (if they need to be updated, this should be done by contacting the registrar) and choose from the available methods to validate their registration data.
3. If the evidence submitted by the domain name holder is identical to the registration data, the domain name will be activated. If the evidence does not match the registration data, EURid will perform a manual validation..