In March this year, accredited registrars received 353 requests from Group-IB to suspend the delegation of domain names over alleged violations. As a result, 314 domain names were blocked, with 4 of them unblocked after their owners corrected their violations. The unblocking was requested by CERT-GIB.
Forty-three domain names were not blocked by registrars due to the urgent measures they took, or the resources were blocked by the hosting provider.
At this moment, 310 domain names have been blocked; 43 domain names are being delegated.
Most of the blocked domains were malware resources (50%; 177 domain names) with the fewest number of blocked domains belonging to botnet controllers (1%; 3 domain names).
Under an agreement with the Coordination Center for TLD .RU/РФ on counteracting illegal use of .RU and .РФ domains, Group-IB is engaged in detecting domain names that violate regulations. Violations include, in part, phishing, unsanctioned access to information systems, distribution of malware and manipulation of infected computer networks.
More information about the ways to report cyber threats and other illegal activities on the net can be found on the website of the Coordination Center.
