In May 2017, organizations cooperating with the Coordination Center for TLD .RU/.РФ sent 329 notifications to registrars on removing domain names from delegation.
The analysis of violating domains by the type of detected malicious activity in the reporting period showed that the top spot still belongs to domain names associated with phishing (257 notifications), followed by the spread of malware (65 notifications) and botnet controllers (7). Phishing has been the leader in the number of requests for 10 months already - except for March, when phishing accounted for "only" 49% of all requests.
During the reporting period, 313 domain names were removed from delegation following requests of competent organizations. Fifteen domains were not removed from delegation, since the reasons for blocking were quickly resolved (or the resource was blocked by the hosting provider).
Currently, 295 domain names are still blocked (18 names were unblocked at the request of the relevant organization after the problems were rectified).
In 2012, the Coordination Center implemented the practice of working with organizations capable of determining violations on the internet. These are companies that provide the Coordination Center and accredited domain name registrars with information about resources with illegal content, cases of phishing, unauthorized access to information systems and the spread of malicious programs from domain names located in the .РФ and .RU zones. Registrars have the right to remove domain name delegation for such resources. Today, eight competent organizations - the Safe Internet League, Group-IB, Kaspersky Lab, RU-CERT, ROCIT, Roskomnadzor, Bizon and the Bank of Russia - cooperate with the Coordination Center.
Any internet user can report a detected case of inappropriate use of a domain name to the hotline of one of these organizations, and proper measures will be taken immediately.
