In April 2018, registries received 313 requests to cancel domain delegation from the competent agencies, according to their monthly report, published on the Coordination Center for TLD .RU/.РФ website.
Criminal activity analysis during the recent period showed that most domains belonged to phishing resources (217 requests), followed by malware destitution resources (81 requests) and bot network controllers (15 requests).
During this period, 303 domain names were cancelled. In ten cases, cancellation was averted after domain name administrators' prompt removal of reasons for blocking (or due to the resource being blocked by the hosting provider).
As of today, 290 domain names remain blocked; with the other 13 restoring delegation on the appeal of the corresponding competent organization after the reason for blocking was removed.
The Coordination Center for TLD .RU/.РФ began to cooperate with organizations that work with violations on the Internet in 2012. These are companies that provide the Coordination Center for TLD .RU/.РФ and accredited registrars with information on malicious resources, phishing sources, unsanctioned access to information systems and the spread of malware through the .RU and .РФ domain names. Registrars have the right to cancel the delegation of such resources.
Today, eight organizations cooperate with the Coordination Center for TLD .RU/.РФ: Safe Internet League, Group-IB, Kaspersky Lab, RU-CERT, ROCIT, the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor), BIZon, and the Bank of Russia. Any internet user can report malicious use of a domain name via their hotlines, and they will take measures immediately. The request processing details are included in the 2017 report on the results of responsible organizations’ activities, published on the Coordination Center for TLD .RU/.РФ website.
