Instructions for At-bay - tagging

Intro:
The following document defines the procedure of labeling a company based on their website as
restricted, known as Restricted class, by a proposed procedure & the restricted classes
description.

Labeling procedure:
1. If available, review the name of the applicant for obvious applicability (i.e. for Public
Administration, risks often include words like “City of…”, “...Township”, “...Police
Department)
2. Then, a review of the applicant’s website is the next step and will provide valuable
information as to their services; generally a review of pages such as “About”, “Services”,
“who we are”, “what we do”, “Why <company name>”, “capabilities”, ”Solutions”,
“Features”, etc. This will provide the relevant information but more detailed notes
pertaining to specific classes are noted below.
3. The combined information should suffice for decisive labeling.

Restricted classes description:

Other

In case none of the be below Restricted classes descriptions match a given website, please label
it as Other. Note that websites that provide only information of the Restricted class, should be
tagged as Other. Here are some plausible for example:

 http://www.creditandcollectionnews.com/
 https://moneyfit.org/
 https://www.blackjackinfo.com/
 https://www.gamblingnews.com/
 https://www.curadebt.com/
 https://medtruth.com/
 https://solutions.xoxoday.com/
 https://www.cryptocompare.com/
 https://henegan.com/

Restricted class

Gambling

Services involving games of chance or lottery contests whether delivered in person or via the
internet or other method, including gambling facilities (e.g. a racecourse), software, hardware,
and sites that aggregate links to casinos/slot websites. Note that organizations that offer
information only (for instance, https://www.pokeralliance.com/) are not gambling, for example:

 https://mohegansun.com/
 https://nj-casino.goldennuggetcasino.com/p/play20/?btag=a_224b_305c_192303601
 https://www.agtslots.com/
 https://www.microgaming.co.uk/
 https://www.playtech.com/
 https://www.usracing.com/
 https://www.inthenewage.com/
 https://www.churchilldowns.com/

Cannabis

Any service directly involved with growing, harvesting, packing, manufacturing, or distributing
cannabis products. Note that Ancillary service providers are acceptable if not directly involved as
described in the restricted description (e.g., a construction company that builds facilities for
cannabis clients, a technology company that offers SaaS products for cannabis retail operations),
for example, https://www.crescolabs.com/. Here are some true positive examples:

 https://www.smokecartel.com
 https://www.rosintech.com/
 https://www.gocalyx.com/
 https://www.procana.com
 https://trustcontinuum.com/
 https://nugistics.io/
 https://www.medicalmarijuanabudshop.com/
 https://www.missiondispensaries.com

Adult Content

The creation or distribution of adult content or merchandise, for example:

 https://www.imastar.com
 https://www.onlinesextoys.us/
 https://www.healthyandactive.com
 https://szpleasuretoys.com
 https://adultfun.ca/
 https://www.camconsole.com/

Debt collection agency

The pursuit of payments for outstanding debts, often (not inclusively) known as Debt Collection,
Debt Collector, Debt Recovery, Recovery of Receivables, Account Receivable Management, etc.
Debt buyers companies are included as well. Note to exclude any service providers that offer
services to the borrower, e.g., Debt Relief, Consolidation, Revenue Cycle Management,
Settlement, Consulting, Advice, etc. Usually, the word Debt would be common in those sites.

For example:

 https://www.csrscollections.com
 https://capiopfw.com
 www.ddm-group.ch <----- acquisition and management of distressed assets
 https://www.thezincgroup.com/index
 https://www.creditmgt.com
 https://www.collectionagencyservice.com
 https://www.paymentsjournal.com/

Payment Processing

The processing of payment card information in order to complete transactions between

merchants and customers. Note that the Payment option in a website usually means that the
payment processing is done by a third party. The following are payment processors as well; Point
of Sale (POS), ATM software/Hardware, Payment Gateway, and Merchant service providers (see
https://www.santanderbank.com/business/banking/merchant-services, though banks are not
necessarily payment processors). Note that Card issuers (credit/pre-paid) are not in this scope.
Here are some true positive examples:

 https://squareup.com/us/en
 https://www.braintreepayments.com/
 https://instabill.com/
 https://stripe.com/
 https://www.huntington.com/ ---> https://www.huntington.com/Commercial/receivables-
management/merchant-services
 http://ccnetpay.com/
 https://www.pinnaclepaymentservices.com
 https://www.adyen.com
 https://razorpay.com/
 https://www.slimpay.com
 https://www.bridgerpay.com/

Cryptocurrency or Blockchain

Any services involved in the mining, storage, tracking, or distribution of cryptocurrency

including but not limited to the use of blockchain for these purposes. Examples will also include
crypto wallets maintained via blockchain. Note that some companies are engaged in providing
information only (thus, should be tagged as Other). For example:

 https://www.bitpay.com
 https://utrust.com/
 https://www.coinmetrics.io
  https://www.getcryptopay.com/index.php?page=home
 https://paybis.com/
 https://www.btctoaud.net/
 https://b2bpaymentssolution.com/

Managed IT service and/or security provider (MSP/MSSP)

Any provider offering management of IT services (managed services) including, but not limited
to ongoing or continuous remote access to client/customer servers or production systems. Often
focused on cybersecurity offering services such as: “patch/vulnerability management, a help desk
with remote access, Intrusion prevention systems (IPS), Web content filtering, Identity access,
management (IAM), Privileged access, management (PAM), Vulnerability scanning, Patch
management, Anti-spam, Firewalls (UTMs, NGFWs, etc.), VPN, Data loss prevention (DLP),
Threat intelligence", etc. For example::

 www.secureworks.com
 https://www.groveis.com/
 http://beyondidentity.co.il/
 https://teamascend.com/services/
 https://openvpn.net/
 https://dobbs-defense.com/
 https://www.servicenow.com/
 https://lucidica.co.uk/
 https://www.tierpoint.com/
 https://www.esgglobalservices.com/
 https://www.elevateservicesgroup.com
 https://www.cjsassociates.com

Note that not all companies that provide IT services/support or Consultant are MSP/MSSP. They
must comply with the above description.

Public Administration

The management or administration of public activities for government entities including

townships, municipalities, states, and federal administration. Also includes community
development and community medical, policing services (i.e. emergency medical services, fire
departments, police departments) where it is an arm of the local government. For example:

 https://grandislesheriffvt.org/
 https://www.irvingchamber.com/
 https://www.shelby-sheriff.org/
 https://chcb.net/
 https://www.emsaac.org/
 http://cityofflaglerbeach.com/
 https://www.springfield-ma.gov/fire/
 https://www.austell.org/
  https://www.arlingtonva.us/Government/Departments/Police-Department
 http://ross.pa.us/
 http://quapawtribe.com/

Utilities

Any provision, private or public, of power generation via electrical, coal, nuclear, natural gas, or
other energy sources to residences or businesses; water supply (i.e., treatment and distribution);
sewage treatment facilities (i.e., collection, treatment, and disposal); and steam supply (i.e.,
provision and/or distribution). Does not include retail and sale of gasoline, propane, or other fuel
sources for residential or commercial use (e.g., gas stations, propane tank refill stations, etc.)
Here are some true positive examples:

 https://www.resourceenergy.com/
 https://www.yorkwater.com/
 http://www.linkuscorp.com/
 https://www.conocophillips.com/
 https://www.mc2energyservices.com/
 https://www.westernvawater.org/
 https://www.goldwindamericas.com/
 https://www.powerhome.com/

Educational Services

Public administering of educational services for kindergarten through 12th grade (primary and
secondary schools). This industry includes charter schools, school boards, and school districts.
Also known as Public Schools (K-12).

Does not include: Private schools or higher education including religious schools, junior
colleges, and public or private universities.

Examples:

 Elementary schools
 Parochial schools, elementary or secondary
 High schools
 Primary schools
 Kindergartens
 Schools for the physically disabled, elementary or secondary
 Military academies elementary or secondary

For Example:

 https://www.sarasotacountyschools.net/schools/pineview/
 https://www-ope.stjohns.k12.fl.us/
Parked/Unreachable websites

The website is down, the website is down for maintenance, this domain is parked (there is no
actual website associated with this URL). For instance, 404/400/403/500 error message. See
further description:

 https://en.wikipedia.org/wiki/Domain_parking (parked domain definition)

 https://smcduct.com/ (403 error message)
 Coin.Market <- example (currrect for 19.12.2021)