In June of 2014, registrars received 173 requests from the company Group-IB to remove the domain names of violators from delegation. As a result, 155 domain names were removed.
Of the 18 names now delegated, 15 were unblocked through normal procedures after their owners eliminated the reasons they were locked. Unlocking was conducted at the request of CERT-GIB. Registrars made no move with regard to the remaining three domain names, which will now be blocked in accordance with the regulations.
Most of the violating domain names were phishing resources (70 percent), while the smallest share consisted of botnet controllers (two percent).