In January this year, Group-IB notified accredited registrars that 249 domain name violators could be removed from delegation. As a result, 242 domain names were removed. Seventeen of them were unblocked later in compliance with the standard procedure after their owners eliminated violations. The unblocking was conducted at the request of CERT-GIB.
Seven domain names escaped being blocked because their administrators moved promptly to correct violations or because some of the names had been blocked earlier by a host provider. At present, 225 domain names remain blocked and 24 names are delegated.
Phishing is to blame for most of the blockings (80%), while botnet-controllers account for just one percent.
Group-IB identifies domain-violators under an agreement with the Coordination Center on countering the unauthorized use of .RU and .РФ, particularly the use of .RU and .РФ domain names for illegal purposes, such as phishing, unauthorized access to information systems, spreading malware or establishing control over infected computer networks.
To report cyber threats or other illegal internet activities, follow the detailed instructions on the Coordination Center’s website.
