In July 2016, Group-IB sent 186 notifications to accredited registrars asking them to cancel the delegation of violators. As a result, the delegation of 154 domains has been cancelled.
Of the remaining 32 delegated names, 16 were not blocked, because their administrators promptly rectified the issues, and the other 16 names were unblocked at the request of CERT-GIB in keeping with an established procedure after their owners did likewise.
The majority of violators were guilty of phishing (65 percent), and the smallest group were botnet controllers (six percent).
Reporting violations is a responsibility of Group-IB under an agreement with the Coordination Center on preventing the unauthorized use of domains .RU and .РФ. Group-IB is in charge of preventing the use of .RU and .РФ domain names for unlawful purposes. These include phishing, unauthorized access to data systems, distribution of malware and botnet control of infected computers.
More details on how to report cyber threats and other unlawful activity online is available on the website of the Coordination Center.
