In August 2016 Group-IB sent 265 requests to accredited registrars about suspension from delegation of 139 domain names-violators, this figure is almost three times bigger than in July. As a result of the measures taken 247 names were suspended. 15 out of 247 names were unblocked after the owners eliminated the causes of blocking in a regular manner. The unblocking is conducted at the request of CERT-GIB.
18 domain names haven’t been blocked because the administrators quickly eliminated the causes of blocking or the recourse was earlier on blocked by a hosting provider. As a result at the moment 232 domain names remain blocked, 33 domain names are being delegated.
The largest share of discovered domains-violators accounted for phishing (79%), the smallest – botnet-controllers (2%).
This work to indentify domains-violators has been conducted by Group-IB under the agreement with the Coordination Center to combat unauthorized use of domains .RU and .РФ. Group-IB has to counter the use of domain names in domains .RU and .РФ for illegal purposes, such as phishing, unauthorized access to information systems, distribution of malicious software, and also management of networks of infected computers.
Detailed information on how to report cyber threats and other illegal activities online could be found on the CC’s web site.
