DNS Abuse Policy & Mitigation Framework

1. Purpose & Regulatory Mandate

WITH YOU MEDYA GIDA SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“With You Global”) maintains a strict zero-tolerance commitment against abusive and malicious utilization of domain names within its generic top-level domain registries, including .DEPLOY and .ATLAS.

This DNS Abuse Policy operates in direct compliance with:

• The ICANN Base Registry Agreement, including Section 2.14 and Specification 11 (Public Interest Commitments).
• The 2024 Base Registry Agreement & Registrar Accreditation Agreement DNS Abuse Contractual Amendments.
• Security and Stability Advisory Committee advisories (SAC098, SAC107, and SAC115) regarding malicious registrations and domain hijacking mitigation.

2. Categorical Scope of DNS Abuse

In alignment with ICANN consensus definitions and global cybersecurity industry standards, With You Global actively investigates and remediates the following five core categories of DNS Abuse, as well as critical web harms:

3. Abuse Reporting Requirements & Actionable Evidence

To enable swift investigation and prevent malicious or frivolous takedown requests, reports submitted to abuse@withyouglobal.com must include Actionable Evidence:

• Target FQDN & Full URL: Specific domain name and exact URL where the abusive payload or deceptive content is located.
• Abuse Classification: Clear identification of the abuse type (Phishing, Malware, Botnet C2, Pharming, or Malicious Spam).
• Technical Evidence: Packet captures (pcap), full unedited email headers, HTTP request/response transcripts, malware file hashes (SHA-256 / MD5), or public analysis links (e.g., VirusTotal, URLhaus).
• Timestamp: UTC timestamp documenting the active observation of the malicious behavior.
• Reporter Information: Full name, organizational affiliation (cybersecurity firm, CSIRT, law enforcement, or affected party), and contact email.

4. Investigation Workflow & Response SLAs

Our 24/7 Abuse Monitoring Desk adheres to strict Service Level Agreements (SLAs) upon receipt of actionable reports:

Threat Severity	Acknowledgment SLA	Remediation / Action Target
Critical (CSAM, National Infrastructure, Immediate Life Safety)	Within 2 Hours	Mitigation & serverHold initiated within 6 Hours
High (Active Phishing, Ransomware, Botnet C2)	Within 4 Hours	Registrar escalation; containment within 12 Hours
Standard DNS Abuse & Malicious Spam Delivery	Within 12 Hours	Remediation or proof of clean state within 24 Hours

5. Registry Enforcement Actions

In accordance with the division of responsibilities under the ICANN framework:

• Level 1 — Registrar Escalation: With You Global immediately transmits verified abuse tickets to the sponsoring ICANN-accredited registrar of record, specifying an actionable takedown window.
• Level 2 — Direct Registry Intervention: If the sponsoring registrar fails to act within the prescribed SLA window, is non-responsive, or if evidence demonstrates the domain was registered predominantly for malicious purposes (malicious registration), With You Global exercises its authority to apply registry status codes:
  • serverHold: Immediately suspends authoritative DNS resolution across all global root nameservers.
  • serverUpdateProhibited: Locks DNS resource records from unauthorized modifications.
  • serverTransferProhibited: Prevents inter-registrar transfers intended to evade enforcement.
• Level 3 — Domain Deletion / Cancellation: Where required by valid court order, competent law enforcement directive, or final ICANN arbitration outcome, the domain registration is permanently cancelled.

6. Law Enforcement & National CERT Coordination

With You Global maintains dedicated communication pipelines for verified law enforcement agencies (LEAs), national computer emergency response teams (e.g., USOM/BTK in Türkiye, ENISA in Europe, CISA in the US), and accredited cybersecurity threat-intelligence feeds. Requests bearing valid official warrants or verified statutory emergency declarations receive priority triage.

7. False Positive Appeals & Contest Protocol

If a registrant believes their domain was suspended erroneously or has thoroughly cleansed a previously compromised web application, they may submit an appeal to abuse@withyouglobal.com with the subject line [ABUSE APPEAL] <domain-name>, including forensic evidence of full malware remediation. Upon successful re-verification, registry locks are lifted within 6 hours.