30(a) Security Policy: Summary of the security policy for the proposed registry

Prototypical answer:

gTLDFull Legal NameE-mail suffixDetail
.starStar India Private Limitedgmail.comView

The answer to question #30a is provided by Afilias, the back-end provider of registry services for this TLD.

Afilias aggressively and actively protects the registry system from known threats and vulnerabilities, and has deployed an extensive set of security protocols, policies and procedures to thwart compromise. Afilias’ robust and detailed plans are continually updated and tested to ensure new threats are mitigated prior to becoming issues. Afilias will continue these rigorous security measures, which include:
Multiple layers of security and access controls throughout registry and support systems;
24x7 monitoring of all registry and DNS systems, support systems and facilities;
Unique, proven registry design that ensures data integrity by granting only authorized access to the registry system, all while meeting performance requirements;
Detailed incident and problem management processes for rapid review, communications, and problem resolution, and;
Yearly external audits by independent, industry-leading firms, as well as twice-yearly internal audits.

Security policies and protocols
Afilias has included security in every element of its service, including facilities, hardware, equipment, connectivity⁄Internet services, systems, computer systems, organizational security, outage prevention, monitoring, disaster mitigation, and escrow⁄insurance, from the original design, through development, and finally as part of production deployment. Examples of threats and the confidential and proprietary mitigation procedures are detailed in our response to question #30(b).

There are several important aspects of the security policies and procedures to note:
Afilias hosts domains in data centers around the world that meet or exceed global best practices.
Afilias’ DNS infrastructure is massively provisioned as part of its DDoS mitigation strategy, thus ensuring sufficient capacity and redundancy to support new gTLDs.
Diversity is an integral part of all of our software and hardware stability and robustness plan, thus avoiding any single points of failure in our infrastructure.
Access to any element of our service (applications, infrastructure and data) is only provided on an as-needed basis to employees and a limited set of others to fulfill their job functions. The principle of least privilege is applied.
All registry components critical and non-critical are monitored 24x7 by staff at our NOCs, and the technical staff has detailed plans and procedures that have stood the test of time for addressing even the smallest anomaly. Well-documented incident management procedures are in place to quickly involve the on-call technical and management staff members to address any issues.

Afilias follows the guidelines from the ISO 27001 Information Security Standard (Reference: http:⁄⁄www.iso.org⁄iso⁄iso_catalogue⁄catalogue_tc⁄catalogue_detail.htm?csnumber=42103 ) for the management and implementation of its Information Security Management System. Afilias also utilizes the COBIT IT governance framework to facilitate policy development and enable controls for appropriate management of risk (Reference: http:⁄⁄www.isaca.org⁄cobit). Best practices defined in ISO 27002 are followed for defining the security controls within the organization. Afilias continually looks to improve the efficiency and effectiveness of our processes, and follows industry best practices as defined by the IT Infrastructure Library, or ITIL (Reference: http:⁄⁄www.itil-officialsite.com⁄).

The Afilias registry system is located within secure data centers that implement a multitude of security measures both to minimize any potential points of vulnerability and to limit any damage should there be a breach. The characteristics of these data centers are described fully in our response to question #30(b).

The Afilias registry system employs a number of multi-layered measures to prevent unauthorized access to its network and internal systems. Before reaching the registry network, all traffic is required to pass through a firewall system. Packets passing to and from the Internet are inspected, and unauthorized or unexpected attempts to connect to the registry servers are both logged and denied. Management processes are in place to ensure each request is tracked and documented, and regular firewall audits are performed to ensure proper operation. 24x7 monitoring is in place and, if potential malicious activity is detected, appropriate personnel are notified immediately.

Afilias employs a set of security procedures to ensure maximum security on each of its servers, including disabling all unnecessary services and processes and regular application of security-related patches to the operating system and critical system applications. Regular external vulnerability scans are performed to verify that only services intended to be available are accessible.

Regular detailed audits of the server configuration are performed to verify that the configurations comply with current best security practices. Passwords and other access means are changed on a regular schedule and are revoked whenever a staff member’s employment is terminated.

Access to registry system
Access to all production systems and software is strictly limited to authorized operations staff members. Access to technical support and network operations teams where necessary are read only and limited only to components required to help troubleshoot customer issues and perform routine checks. Strict change control procedures are in place and are followed each time a change is required to the production hardware⁄application. User rights are kept to a minimum at all times. In the event of a staff member’s employment termination, all access is removed immediately.

Afilias applications use encrypted network communications. Access to the registry server is controlled. Afilias allows access to an authorized registrar only if each of the authentication factors matches the specific requirements of the requested authorization. These mechanisms are also used to secure any web-based tools that allow authorized registrars to access the registry. Additionally, all write transactions in the registry (whether conducted by authorized registrars or the registryʹs own personnel) are logged.

EPP connections are encrypted using TLS⁄SSL, and mutually authenticated using both certificate checks and login⁄password combinations. Web connections are encrypted using TLS⁄SSL for an encrypted tunnel to the browser, and authenticated to the EPP server using login⁄password combinations.

All systems are monitored for security breaches from within the data center and without, using both system-based and network-based testing tools. Operations staff also monitor systems for security-related performance anomalies. Triple-redundant continual monitoring ensures multiple detection paths for any potential incident or problem. Details are provided in our response to questions #30(b) and #42. Network Operations and Security Operations teams perform regular audits in search of any potential vulnerability.

To ensure that registrar hosts configured erroneously or maliciously cannot deny service to other registrars, Afilias uses traffic shaping technologies to prevent attacks from any single registrar account, IP address, or subnet. This additional layer of security reduces the likelihood of performance degradation for all registrars, even in the case of a security compromise at a subset of registrars.

There is a clear accountability policy that defines what behaviors are acceptable and unacceptable on the part of non-staff users, staff users, and management. Periodic audits of policies and procedures are performed to ensure that any weaknesses are discovered and addressed. Aggressive escalation procedures and well-defined Incident Response management procedures ensure that decision makers are involved at early stages of any event.

In short, security is a consideration in every aspect of business at Afilias, and this is evidenced in a track record of a decade of secure, stable and reliable service.

Independent assessment
Supporting operational excellence as an example of security practices, Afilias performs a number of internal and external security audits each year of the existing policies, procedures and practices for:
Access control;
Security policies;
Production change control;
Backups and restores;
Batch monitoring;
Intrusion detection, and
Physical security.

Afilias has an annual Type 2 SSAE 16 audit performed by PricewaterhouseCoopers (PwC). Further, PwC performs testing of the general information technology controls in support of the financial statement audit. A Type 2 report opinion under SSAE 16 covers whether the controls were properly designed, were in place, and operating effectively during the audit period (calendar year). This SSAE 16 audit includes testing of internal controls relevant to Afiliasʹ domain registry system and processes. The report includes testing of key controls related to the following control objectives:
Controls provide reasonable assurance that registrar account balances and changes to the registrar account balances are authorized, complete, accurate and timely.
Controls provide reasonable assurance that billable transactions are recorded in the Shared Registry System (SRS) in a complete, accurate and timely manner.
Controls provide reasonable assurance that revenue is systemically calculated by the Deferred Revenue System (DRS) in a complete, accurate and timely manner.
Controls provide reasonable assurance that the summary and detail reports, invoices, statements, registrar and registry billing data files, and ICANN transactional reports provided to registry operator(s) are complete, accurate and timely.
Controls provide reasonable assurance that new applications and changes to existing applications are authorized, tested, approved, properly implemented and documented.
Controls provide reasonable assurance that changes to existing system software and implementation of new system software are authorized, tested, approved, properly implemented and documented.
Controls provide reasonable assurance that physical access to data centers is restricted to properly authorized individuals.
Controls provide reasonable assurance that logical access to system resources is restricted to properly authorized individuals.
Controls provide reasonable assurance that processing and backups are appropriately authorized and scheduled and that deviations from scheduled processing and backups are identified and resolved.

The last Type 2 report issued was for the year 2010, and it was unqualified, i.e., all systems were evaluated with no material problems found.

During each year, Afilias monitors the key controls related to the SSAE controls. Changes or additions to the control objectives or activities can result due to deployment of new services, software enhancements, infrastructure changes or process enhancements. These are noted and after internal review and approval, adjustments are made for the next review.

In addition to the PricewaterhouseCoopers engagement, Afilias performs internal security audits twice a year. These assessments are constantly being expanded based on risk assessments and changes in business or technology.

Additionally, Afilias engages an independent third-party security organization, PivotPoint Security, to perform external vulnerability assessments and penetration tests on the sites hosting and managing the Registry infrastructure. These assessments are performed with major infrastructure changes, release of new services or major software enhancements. These independent assessments are performed at least annually. A report from a recent assessment is attached with our response to question #30(b).

Afilias has engaged with security companies specializing in application and web security testing to ensure the security of web-based applications offered by Afilias, such as the Web Admin Tool (WAT) for registrars and registry operators.

Finally, Afilias has engaged IBM’s Security services division to perform ISO 27002 gap assessment studies so as to review alignment of Afilias’ procedures and policies with the ISO 27002 standard. Afilias has since made adjustments to its security procedures and policies based on the recommendations by IBM.

Special TLD considerations
Afilias’ rigorous security practices are regularly reviewed; if there is a need to alter or augment procedures for this TLD, they will be done so in a planned and deliberate manner.

Commitments to registrant protection
With over a decade of experience protecting domain registration data, Afilias understands registrant security concerns. Afilias supports a “thick” registry system in which data for all objects are stored in the registry database that is the centralized authoritative source of information. As an active member of IETF (Internet Engineering Task Force), ICANN’s SSAC (Security & Stability Advisory Committee), APWG (Anti-Phishing Working Group), MAAWG (Messaging Anti-Abuse Working Group), USENIX, and ISACA (Information Systems Audits and Controls Association), the Afilias team is highly attuned to the potential threats and leading tools and procedures for mitigating threats. As such, registrants should be confident that:
Any confidential information stored within the registry will remain confidential;
The interaction between their registrar and Afilias is secure;
The Afilias DNS system will be reliable and accessible from any location;
The registry system will abide by all polices, including those that address registrant data;
Afilias will not introduce any features or implement technologies that compromise access to the registry system or that compromise registrant security.

Afilias has directly contributed to the development of the documents listed below and we have implemented them where appropriate. All of these have helped improve registrants’ ability to protect their domains name(s) during the domain name lifecycle.
[SAC049]: SSAC Report on DNS Zone Risk Assessment and Management (03 June 2011)
[SAC044]: A Registrantʹs Guide to Protecting Domain Name Registration Accounts (05 November 2010)
[SAC040]: Measures to Protect Domain Registration Services Against Exploitation or Misuse (19 August 2009)
[SAC028]: SSAC Advisory on Registrar Impersonation Phishing Attacks (26 May 2008)
[SAC024]: Report on Domain Name Front Running (February 2008)
[SAC022]: Domain Name Front Running (SAC022, SAC024) (20 October 2007)
[SAC011]: Problems caused by the non-renewal of a domain name associated with a DNS Name Server (7 July 2006)
[SAC010]: Renewal Considerations for Domain Name Registrants (29 June 2006)
[SAC007]: Domain Name Hijacking Report (SAC007) (12 July 2005)

To protect any unauthorized modification of registrant data, Afilias mandates TLS⁄SSL transport (per RFC 5246) and authentication methodologies for access to the registry applications. Authorized registrars are required to supply a list of specific individuals (five to ten people) who are authorized to contact the registry. Each such individual is assigned a pass phrase. Any support requests made by an authorized registrar to registry customer service are authenticated by registry customer service. All failed authentications are logged and reviewed regularly for potential malicious activity. This prevents unauthorized changes or access to registrant data by individuals posing to be registrars or their authorized contacts.

These items reflect an understanding of the importance of balancing data privacy and access for registrants, both individually and as a collective, worldwide user base.

The Afilias 24⁄7 Customer Service Center consists of highly trained staff who collectively are proficient in 15 languages, and who are capable of responding to queries from registrants whose domain name security has been compromised for example, a victim of domain name hijacking. Afilias provides specialized registrant assistance guides, including specific hand-holding and follow-through in these kinds of commonly occurring circumstances, which can be highly distressing to registrants

Security resourcing plans
Please refer to our response to question #30b for security resourcing plans.

Similar gTLD applications: (303)

gTLDFull Legal NameE-mail suffixzDetail
.lockerDish DBS Corporationcscinfo.com-4.05Compare
.moparChrysler Group LLC.cscinfo.com-4.05Compare
.APP.APP REGISTRY INC.afilias.info-4.05Compare
.vikingViking River Cruises (Bermuda) Ltd.cscinfo.com-4.05Compare
.olloDish DBS Corporationcscinfo.com-4.05Compare
.directDish DBS Corporationcscinfo.com-4.05Compare
.maseratiFiat S.p.A. (ʺsocietà per azioniʺ)cscinfo.com-4.05Compare
.dtvDish DBS Corporationpattonboggs.com-4.05Compare
.jeepChrysler Group LLC.cscinfo.com-4.05Compare
.dvrHughes Satellite Systems Corporationcscinfo.com-4.05Compare
.slingHughes Satellite Systems Corporationcscinfo.com-4.05Compare
.hughesHughes Satellite Systems Corporationcscinfo.com-4.05Compare
.alfaromeoFiat S.p.A. (ʺsocietà per azioniʺ)cscinfo.com-4.05Compare
.chevroletGeneral Motors LLCcscinfo.com-4.05Compare
.fiatFiat S.p.A. (ʺsocietà per azioniʺ)cscinfo.com-4.05Compare
.uconnectChrysler Group LLC.cscinfo.com-4.05Compare
.chevyGeneral Motors LLCcscinfo.com-4.05Compare
.bcgThe Boston Consulting Group, Inc.cscinfo.com-4.05Compare
.abarthFiat S.p.A. (ʺsocietà per azioniʺ)cscinfo.com-4.05Compare
.boehringerBoehringer Ingelheim Pharma GmbH & Co. KGcscinfo.com-4.05Compare
.caseFiat Industrial S.p.A (società per azioni)cscinfo.com-4.05Compare
.HOMEDotHome ⁄ CGR E-Commerce Ltddothome.net-4.05Compare
.ferrariFiat S.p.A. (ʺsocietà per azioniʺ)cscinfo.com-4.05Compare
.cliniqueELC Online Inc.cscinfo.com-4.05Compare
.naspersIntelprop (Proprietary) Limitedcscinfo.com-4.05Compare
.digikeyDigi-Key Corporationdigikey.com-4.05Compare
.jioAffinity Names, Inc.afilias.info-4.05Compare
.shopyourwayShop Your Way, Inc.cscinfo.com-4.05Compare
.schaefflerSchaeffler Technologies AG & Co. KGlemarit.com-4.05Compare
.mobileDish DBS Corporationcscinfo.com-4.05Compare
.tataTATA SONS LIMITEDtata.com-4.05Compare
.nokiaNokia Corporationvalideus.com-4.05Compare
.诺基亚Nokia Corporationvalideus.com-4.05Compare
.HOME.HOME REGISTRY INC.afilias.info-4.05Compare
.ART.ART REGISTRY INC.afilias.info-4.05Compare
.aigoaigo Digital Technology Co,Ltd.hichina.com-4.05Compare
.delmonteDel Monte International GmbHfreshdelmonte.com-4.05Compare
.SHAWShaw Cablesystems G.P.afilias.info-4.05Compare
.phoneDish DBS Corporationcscinfo.com-4.05Compare
.monsterMonster Worldwide, Inc.cscinfo.com-4.05Compare
.istanbulIstanbul Metropolitan Municipalitygmail.com-4.05Compare
.istIstanbul Metropolitan Municipalitygmail.com-4.05Compare
.NOWGlobal Top Level ApSglobaltoplevel.com-4.05Compare
.cruiseViking River Cruises (Bermuda) Ltd.cscinfo.com-4.05Compare
.vegasDot Vegas, Inc.mackayventures.com-4.05Compare
.EXTRASPACEExtra Space Storage LLCmsn.com-4.05Compare
.lanciaFiat S.p.A. (ʺsocietà per azioniʺ)cscinfo.com-4.05Compare
.nraNRA Holdings Company, INC.afilias.info-4.05Compare
.srtChrysler Group LLC.cscinfo.com-4.05Compare
.blockbusterDish DBS Corporationcscinfo.com-4.05Compare
.WEBSchlund Technologies GmbHafilias.info-4.05Compare
.movieDish DBS Corporationcscinfo.com-4.05Compare
.GAMEBeijing Gamease Age Digital Technology Co., Ltd.hichina.com-4.05Compare
.CyouBeijing Gamease Age Digital Technology Co., Ltd.hichina.com-4.05Compare
.dataDish DBS Corporationcscinfo.com-4.05Compare
.dishDish DBS Corporationcscinfo.com-4.05Compare
.SARLmySARL GmbHafilias.info-4.05Compare
.latinoDish DBS Corporationcscinfo.com-4.05Compare
.hairYour Hair Limitedafilias.info-4.05Compare
.SRLmySRL GmbHafilias.info-4.05Compare
.SECURITYDefender Security Companydefenderdirect.com-4.05Compare
.pncPNC Domain Co., LLCcscinfo.com-4.05Compare
.LTDmyLTD GmbHafilias.info-4.05Compare
.kyknetElectronic Media Network Limited (M-Net)cscinfo.com-4.05Compare
.LLCmyLLC GmbHafilias.info-4.05Compare
.LLPmyLLP GmbHafilias.info-4.05Compare
.gotvMultiChoice Africa (Proprietary) Limitedcscinfo.com-4.05Compare
.geaGEA Group Aktiengesellschaftgeagroup.com-4.05Compare
.dstvMultiChoice Africa (Proprietary) Limitedcscinfo.com-4.05Compare
.GECOMPANYGE GTLD Holdings LLCreedsmith.com-4.05Compare
.通用电气公司GE GTLD Holdings LLCreedsmith.com-4.05Compare
.dotDish DBS Corporationcscinfo.com-4.05Compare
.RedstoneRedstone Haute Couture Co., Ltd.hichina.com-4.05Compare
.SHOPAmazon EU S.à r.l.valideus.com-4.05Compare
.jcpJCP Media, Inc.cscinfo.com-4.05Compare
.PLAYAmazon EU S.à r.l.valideus.com-4.05Compare
.BUYAmazon EU S.à r.l.valideus.com-4.05Compare
.chryslerChrysler Group LLC.cscinfo.com-4.05Compare
.fedexFederal Express Corporationcscinfo.com-4.05Compare
.indiansReliance Industries Limitedril.com-4.05Compare
.streamHughes Satellite Systems Corporationcscinfo.com-4.05Compare
.travelersinsuranceTravelers TLD, LLCcscinfo.com-4.05Compare
.rilReliance Industries Limitedril.com-4.05Compare
.redumbrellaTravelers TLD, LLCcscinfo.com-4.05Compare
.relianceReliance Industries Limitedril.com-4.05Compare
.hdfcbankHDFC Bank Limitedhdfcbank.com-4.05Compare
.trvTravelers TLD, LLCcscinfo.com-4.05Compare
.TICKETSTickets TLD LLCafilias.info-4.05Compare
.DESIGNBET Inc.afilias.info-4.05Compare
.mzansimagicElectronic Media Network Limited (M-Net)cscinfo.com-4.05Compare
.BLOGBET Inc.afilias.info-4.05Compare
.emersonEmerson Electric Co.cscinfo.com-4.05Compare
.pwcPwC Business Trustcscinfo.com-4.05Compare
.edekaEDEKA Verband kaufmännischer Genossenschaften e.V.dotzon.com-4.05Compare
.ramChrysler Group LLC.cscinfo.com-4.05Compare
.bhartiBharti Enterprises (Holding) Private Limitedbharti.in-4.05Compare
.goodyearThe Goodyear Tire & Rubber Companycscinfo.com-4.05Compare
.airtelBharti Airtel Limitedbharti.in-4.05Compare
.insuranceProgressive Casualty Insurance Companycscinfo.com-4.05Compare
.dunlopThe Goodyear Tire & Rubber Companycscinfo.com-4.05Compare
.progressiveProgressive Casualty Insurance Companycscinfo.com-4.05Compare
.AKDNFondation Aga Khan (Aga Khan Foundation)afilias.info-4.05Compare
.tiresThe Goodyear Tire & Rubber Companycscinfo.com-4.05Compare
.volkswagenVolkswagen Group of America Inc.indeca.de-4.05Compare
.lamborghiniAutomobili Lamborghini S.p.A.indeca.de-4.05Compare
.transunionTrans Union LLCcscinfo.com-4.05Compare
.upsUPS Market Driver, Inc.cscinfo.com-4.05Compare
.lasalleJones Lang LaSalle Incorporatedcscinfo.com-4.05Compare
.dodgeChrysler Group LLC.cscinfo.com-4.05Compare
.helsinkiCity of Helsinkihel.fi-4.05Compare
.jllJones Lang LaSalle Incorporatedcscinfo.com-4.05Compare
.cadillacGeneral Motors LLCcscinfo.com-4.05Compare
.xinElegant Leader Limitedhichina.com-4.05Compare
.gallupGallup, Inc.cscinfo.com-4.05Compare
.shriramShriram Capital Ltd.shriram.com-4.05Compare
.scholarshipsScholarships.com, LLCscholarships.com-4.05Compare
.MUSICDotMusic ⁄ CGR E-Commerce Ltdmusic.us-4.05Compare
.手机Beijing RITT-Net Technology Development Co., Ltdafilias.info-4.05Compare
.pornICM Registry PN LLCicmregistry.com-4.05Compare
.mihMyriad International Holdings B.V.cscinfo.com-4.05Compare
.adultICM Registry AD LLClawley.com-4.05Compare
.AVIANCAAerovias del Continente Americano S.A. Aviancaafilias.info-4.05Compare
.sexICM Registry SX LLCicmregistry.com-4.05Compare
.gmcGeneral Motors LLCcscinfo.com-4.05Compare
.ivecoFiat Industrial S.p.A (società per azioni)cscinfo.com-4.05Compare
.MORMONIRI Domain Management, LLC (ʺApplicantʺ)kmclaw.com-4.05Compare
.africamagicElectronic Media Network Limited (M-Net)cscinfo.com-4.05Compare
.bbbCouncil of Better Business Bureaus, Inc.cscinfo.com-4.05Compare
.LDSIRI Domain Management, LLC (ʺApplicantʺ)kmclaw.com-4.05Compare
.travelersTravelers TLD, LLCcscinfo.com-4.05Compare
.newhollandFiat Industrial S.p.A (società per azioni)cscinfo.com-4.05Compare
.alibabaAlibaba Group Holding Limitedhichina.com-4.05Compare
.ciprianiHotel Cipriani Srlcscinfo.com-4.05Compare
.stadaSTADA Arzneimittel AGopportunity.de-4.05Compare
.audiAUDI Aktiengesellschaftindeca.de-4.05Compare
.orientexpressOrient-Express Hotels Ltd.cscinfo.com-4.05Compare
.chatrRogers Communications Partnershiprci.rogers.com-4.05Compare
.rogersRogers Communications Partnershiprci.rogers.com-4.05Compare
.大众汽车Volkswagen (China) Investment Co., Ltd.indeca.de-4.05Compare
.fidoRogers Communications Partnershiprci.rogers.com-4.05Compare
.موقعSuhub Electronic Establishmentafilias.info-4.05Compare
.daburDabur India Limiteddabur.com-4.05Compare
.hotelHOTEL Top-Level-Domain S.a.r.ldothotel.info-4.05Compare
.sbiSTATE BANK OF INDIAsbi.co.in-4.05Compare
.buickGeneral Motors LLCcscinfo.com-4.05Compare
.beknownMonster Worldwide, Inc.cscinfo.com-4.05Compare
.statebankSTATE BANK OF INDIAsbi.co.in-4.05Compare
.caseihFiat Industrial S.p.A (società per azioni)cscinfo.com-4.05Compare
.mckinseyMcKinsey Holdings, Inc.cscinfo.com-4.05Compare
.acoACO Severin Ahlmann GmbH & Co. KGaco.com-4.05Compare
.naturaNATURA COSMÉTICOS S.A.cscinfo.com-4.05Compare
.bookR.R. Bowker LLCbowker.com-4.05Compare
.VOTEMonolith Registry LLCafilias.info-4.05Compare
.supersportSuperSport International Holdings Limitedcscinfo.com-4.05Compare
.VOTOMonolith Registry LLCafilias.info-4.05Compare
.KOSHERKosher Marketing Assets LLCafilias.info-4.05Compare
.northlandinsuranceTravelers TLD, LLCcscinfo.com-4.05Compare
.mnetElectronic Media Network Limited (M-Net)cscinfo.com-4.05Compare
.工行Industrial and Commercial Bank of China Limitedhichina.com-4.05Compare
.multichoiceMultiChoice Africa (Proprietary) Limitedcscinfo.com-4.05Compare
.ICBCIndustrial and Commercial Bank of China Limitedhichina.com-4.05Compare
.activeThe Active Network, Incactivenetwork.com-4.05Compare
.lamerELC Online Inc.cscinfo.com-4.05Compare
.payuMIH PayU B.V.cscinfo.com-4.05Compare
.bugattiBugatti International SAindeca.de-4.05Compare
.metlifeMetLife Services and Solutions, LLCcscinfo.com-4.05Compare
.vipI-REGISTRY Ltd., Niederlassung Deutschlandi-registry.com-4.05Compare
.richI-REGISTRY Ltd., Niederlassung Deutschlandi-registry.com-4.05Compare
.cebThe Corporate Executive Board Companycscinfo.com-4.05Compare
.onlineI-REGISTRY Ltd., Niederlassung Deutschlandi-registry.com-4.05Compare
.onlI-REGISTRY Ltd., Niederlassung Deutschlandi-registry.com-4.05Compare
.allyAlly Financial Inc.cscinfo.com-4.05Compare
.appleApple Inc.cscinfo.com-4.05Compare
.originsELC Online Inc.cscinfo.com-4.05Compare
.homedepotHomer TLC, Inc.cscinfo.com-4.05Compare
.thdHomer TLC, Inc.cscinfo.com-4.05Compare
.mitMassachusetts Institute of Technologymit.edu-4.05Compare
.alipayAlibaba Group Holding Limitedhichina.com-4.04Compare
.fageFAGE Dairy Industry S.A.winston.com-4.04Compare
.nowStarbucks (HK) Limitedtld.asia-4.04Compare
.kidsDotKids Foundation Limitedtld.asia-4.04Compare
.storageSelf Storage Company LLCextraspace.com-4.04Compare
.corpDOTCORP LIMITEDcorpregistry.net-4.04Compare
.creditunionCUNA Performance Resources, LLCcuna.com-4.04Compare
.stockholmStockholms kommundipcon.com-4.04Compare
.ottDish DBS Corporationcscinfo.com-4.04Compare
.GEDGED Domains LLCgedtestingservice.com-4.04Compare
.wolterskluwerWolters Kluwer N.V.valideus.com-4.04Compare
.AGAKHANFondation Aga Khan (Aga Khan Foundation)afilias.info-4.04Compare
.IMAMATFondation Aga Khan (Aga Khan Foundation)afilias.info-4.04Compare
.ISMAILIFondation Aga Khan (Aga Khan Foundation)afilias.info-4.04Compare
.XihuanQIHOO 360 TECHNOLOGY CO. LTD.360.cn-4.04Compare
.SinaSina Corporationstaff.weibo.com-4.04Compare
.ShoujiQIHOO 360 TECHNOLOGY CO. LTD.360.cn-4.04Compare
.YunQIHOO 360 TECHNOLOGY CO. LTD.360.cn-4.04Compare
.WeiboSina Corporationstaff.weibo.com-4.04Compare
.AnquanQIHOO 360 TECHNOLOGY CO. LTD.360.cn-4.04Compare
.微博Sina Corporationstaff.weibo.com-4.04Compare
.promoPhenomena Group Oyphenomena.com-4.03Compare
.ITVITV Services Limitedvalideus.com-4.03Compare
.ZARAIndustria de Diseño Textil, S.A. (INDITEX, S.A.)valideus.com-4.03Compare
.BaiduBaidu, Inc.baidu.com-4.03Compare
.IrishDot-Irish LLCtldassets.com-4.02Compare
.SaleDot-Sale LLCsaledomain.name-4.02Compare
.GolfDot-Golf LLCtldassets.com-4.02Compare
.HEALTHAfilias Limitedafilias.info-4.02Compare
.LOTTOAfilias Limitedafilias.info-4.02Compare
.CASINOAfilias Limitedafilias.info-4.02Compare
.greenAfilias Limitedafilias.info-4.02Compare
.INCAfilias Limitedafilias.info-4.02Compare
.LGBTAfilias Limitedafilias.info-4.02Compare
.BLOGAfilias Domains No. 1 Limitedafilias.info-4.02Compare
.llcAfilias Limitedafilias.info-4.02Compare
.APPAfilias Limitedafilias.info-4.02Compare
.BETAfilias Limitedafilias.info-4.02Compare
.LTDAfilias Limitedafilias.info-4.02Compare
.merckMerck KGaAbettinger.de-4.02Compare
.emerckMerck KGaAbettinger.de-4.01Compare
.WINEAfilias Limitedafilias.info-4.01Compare
.RADIOAfilias Limitedafilias.info-4.01Compare
.POKERAfilias Domains No. 5 Limitedafilias.info-4.01Compare
.WEBAfilias Domains No. 3 Limited,afilias.info-4.01Compare
.SHIKSHAAfilias Limitedafilias.info-4.01Compare
.ORGANICAfilias Limitedafilias.info-4.01Compare
.KIMAfilias Limitedafilias.info-4.01Compare
.MEETAfilias Limitedafilias.info-4.01Compare
.PETAfilias Limitedafilias.info-4.01Compare
.移动Afilias Limitedafilias.info-4.01Compare
.信息Afilias Limitedafilias.info-4.01Compare
.TEAMAfilias Limitedafilias.info-4.01Compare
.MEMORIALAfilias Limitedafilias.info-4.01Compare
.DESIAfilias Domains No. 4 Limited,afilias.info-4.01Compare
.MAILAfilias Domains No. 2 Limited,afilias.info-4.01Compare
.REDAfilias Limitedafilias.info-4.01Compare
.BLACKAfilias Limitedafilias.info-4.01Compare
.BLUEAfilias Limitedafilias.info-4.01Compare
.MLSAfilias Limitedafilias.info-4.01Compare
.PINKAfilias Limitedafilias.info-4.01Compare
.GCCGCCIX WLLsedari.com-4Compare
.VIGVIENNA INSURANCE GROUP AG Wiener Versicherung Gruppesedari.com-4Compare
.CHESAPEAKEAfterdot LLCsedari.com-4Compare
.CHKAfterdot LLCsedari.com-4Compare
.DELTADelta Air Lines, Inc.sedari.com-4Compare
.中文网TLD REGISTRY LIMITEDsedari.com-4Compare
.在线TLD REGISTRY LIMITEDsedari.com-4Compare
.netbankCOMMONWEALTH BANK OF AUSTRALIAcba.com.au-3.98Compare
.commbankCOMMONWEALTH BANK OF AUSTRALIAcba.com.au-3.98Compare
.cbaCOMMONWEALTH BANK OF AUSTRALIAcba.com.au-3.98Compare
.hivdotHIV gemeinnuetziger e.V.dothiv.org-3.97Compare
.cloudCloudNames AScloudnames.com-3.94Compare
.globalCloudNames AScloudnames.com-3.94Compare
.ticketsAccent Media Limitedcloudnames.com-3.94Compare
.FLOWERSPiper Ventures, LLCfairwindspartners.com-3.92Compare
.SHOWTIMECBS Domains Inc.fairwindspartners.com-3.92Compare
.CBSCBS Domains Inc.fairwindspartners.com-3.92Compare
.MARRIOTTMarriott Worldwide Corporationfairwindspartners.com-3.92Compare
.GIFTSLucy Ventures, LLCfairwindspartners.com-3.92Compare
.ESURANCEEsurance Insurance Companyfairwindspartners.com-3.92Compare
.AUTOINSURANCEAllstate Fire and Casualty Insurance Companyfairwindspartners.com-3.9Compare
.CARINSURANCEAllstate Fire and Casualty Insurance Companyfairwindspartners.com-3.9Compare
.GOODHANDSAllstate Fire and Casualty Insurance Companyfairwindspartners.com-3.9Compare
.ALLSTATEAllstate Fire and Casualty Insurance Companyfairwindspartners.com-3.9Compare
.ABBVIEAbbott Laboratoriesfairwindspartners.com-3.9Compare
.ABBOTTAbbott Laboratoriesfairwindspartners.com-3.9Compare
.BOATSDERBoats, LLCdominionenterprises.com-3.9Compare
.BESTBUYBBY Solutions, Inc.fairwindspartners.com-3.9Compare
.MOTORCYCLESDERMotorcycles, LLCdominionenterprises.com-3.9Compare
.RENTDERRent, LLCdominionenterprises.com-3.9Compare
.FORSALEDERForsale, LLCdominionenterprises.com-3.9Compare
.APARTMENTSDERApartments, LLCdominionenterprises.com-3.9Compare
.YACHTSDERYachts, LLCdominionenterprises.com-3.9Compare
.AUTOSDERAutos, LLCdominionenterprises.com-3.9Compare
.HOMESDERHomes, LLCdominionenterprises.com-3.9Compare
.CARSDERCars, LLCdominionenterprises.com-3.9Compare
.CIMBCIMB Group Sdn Bhdipmirror.com-3.83Compare
.temasekTemasek Holdings (Private) Limtiedtemasek.com.sg-3.81Compare
.淡马锡Temasek Holdings (Private) Limtiedtemasek.com.sg-3.81Compare
.ECOBig Room Inc.doteco.org-3.77Compare
.机构Public Interest Registrypir.org-3.77Compare
.机构体制Public Interest Registrypir.org-3.77Compare
.संगठनPublic Interest Registrypir.org-3.77Compare
.оргPublic Interest Registrypir.org-3.77Compare
.cernEuropean Organization for Nuclear Research (ʺCERNʺ)cern.ch-3.76Compare
.NGOPublic Interest Registrypir.org-3.76Compare
.ONGPublic Interest Registrypir.org-3.76Compare
.BNLBanca Nazionale del Lavorobnlmail.com-3.6Compare
.sewSEW-EURODRIVE GmbH & Co KGsew-eurodrive.de-3.6Compare
.BNPPARIBASBNP Paribasbnpparibas.com-3.6Compare
.heartAmerican Heart Association, Inc.heart.org-3.42Compare
.strokeAmerican Heart Association, Inc.heart.org-3.42Compare
.wilmarWilmar International Limitedwilmar.com.sg-3.25Compare
.電訊盈科PCCW Enterprises Limitedtld.asia-2.53Compare
.香港電訊PCCW-HKT DataCom Services Limitedtld.asia-2.53Compare
.hktPCCW-HKT DataCom Services Limitedtld.asia-2.53Compare
.pccwPCCW Enterprises Limitedtld.asia-2.53Compare
.nowtvStarbucks (HK) Limitedtld.asia-2.53Compare
.richardliPacific Century Asset Management (HK) Limitedtld.asia-2.53Compare