ICANN adds uptime tracking to Domain Metrica platform

ICANN has expanded its Domain Metrica platform with a new uptime measurement capability, designed to track how rapidly domains recover after appearing on reputation blocklists. The feature combines registration data with abuse-related metrics to provide stakeholders with a clearer view of mitigation timelines across the domain name system (DNS).

The update targets researchers, registries, registrars, and other participants in the ICANN community who rely on the platform for trend analysis and abuse monitoring. By correlating blocklist appearances with subsequent uptime data, Domain Metrica now offers a more granular picture of how quickly abusive domains are addressed after detection.

How the feature works

Domain Metrica aggregates data from multiple sources, including registration records and reputation blocklists, to identify domains associated with potential DNS abuse. The new uptime measurement tool tracks the time elapsed between a domain’s appearance on a blocklist and its subsequent removal or restoration of service. This metric is intended to help stakeholders assess the effectiveness of mitigation efforts and identify patterns in abuse resolution.

The platform’s API has also been updated to support the new uptime data, enabling automated integration with third-party monitoring tools. However, some users have noted that the feature has not undergone extensive testing, raising concerns about its reliability in early deployments. ICANN has not yet provided a timeline for addressing these limitations or expanding the tool’s coverage to include country-code top-level domains (ccTLDs), which remain outside the platform’s current scope.

Why it matters for the domain ecosystem

Reputation blocklists play a critical role in mitigating DNS abuse, but their effectiveness depends on how quickly abusive domains are removed or remediated. By introducing uptime measurement, ICANN aims to provide stakeholders with a standardized way to evaluate mitigation speed, which could inform policy discussions and operational improvements. The data may also help registries and registrars identify bottlenecks in their abuse response processes and benchmark their performance against industry norms.

For researchers, the feature offers a new lens for studying abuse trends over time. By analyzing uptime patterns, they can assess whether mitigation efforts are improving or if certain types of abuse persist despite blocklist listings. The tool’s API integration further enables large-scale analysis, allowing organizations to incorporate uptime data into broader security monitoring frameworks.

Limitations and next steps

While the uptime measurement capability represents a step forward in DNS abuse monitoring, its current limitations could hinder adoption. The lack of ccTLD coverage, for example, excludes a significant portion of the domain ecosystem from analysis. Additionally, the tool’s untested status may deter organizations from relying on it for critical decision-making until further validation is completed.

ICANN has not disclosed plans to expand the feature’s scope or address user feedback, leaving stakeholders to evaluate its utility based on early results. As the tool matures, its impact on abuse mitigation practices will likely depend on how widely it is adopted and whether it can demonstrate measurable improvements in response times.