Major Domain Suffix verification (immediately prior to web query screening)
Domain suffix verification should occur for all web screenings.
Domain suffix verification should occur prior to the first web screening query being made.
Application should look for the following domain suffixes on any email address associated with the transaction (marketing email address, shipto email address, billto email address): .cu, .ir, .kp, .su, .sy
If there is a match, the process should stop and the following error message displayed on the screen:
Your order cannot be processed because your email address indicates that you are located in a country subject to sanctions implemented by the US Department of Treasury, Office of Foreign Assets Control ("OFAC"). Red Hat products are not authorized for export to your country at this time and we are prohibited from processing your order.
Further detail can be found here:
