diff --git a/README.md b/README.md
index 840fc07..0d698d8 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,7 @@ The following taxonomies are described:
 - [Cyber Kill Chain](./kill-chain) from Lockheed Martin
 - DE German (DE) [Government classification markings (VS)](./de-vs)
 - [DHS CIIP Sectors](./dhs-ciip-sectors)
+- [Domain Name Abuse](./domain-abuse)
 - [eCSIRT](./ecsirt) and IntelMQ incident classification
 - [ENISA](./enisa) ENISA Threat Taxonomy
 - [Estimative Language](./estimative-language) Estimative Language (ICD 203)
@@ -60,6 +61,11 @@ Taxonomy for the handling of protectively marked information in MISP with German
 
 DHS critical sectors as described in https://www.dhs.gov/critical-infrastructure-sectors.
 
+### [Domain Name Abuse](./domain-abuse)
+
+Taxonomy to tag domain names used for cybercrime. 
+We suggest to use europol-incident(./europol-incident) to tag abuse-activity.
+
 ### [eCSIRT](./ecsirt) and IntelMQ incident classification
 
 eCSIRT incident classification Appendix C of the eCSIRT EU project including IntelMQ updates.