HostExploit and Directi: Actions against registry services abuse – Report April 2009

Registrar Abuse

1. 8,506 domain names have been suspended that were either involved in abusive activity or registered by customers/registrants exhibiting persistent patterns of abuse.
2. These domain names (and/or their registrants) were involved in various types of abuse, such as spamming, phishing/spoofing, malware perpetration, child pornography, financial frauds and falsified ‘Whois’ information.
3. All other services utilized by any of these domain names have also been revoked.

Analysis

When suspending domain names on receiving complaints about their involvement in abuse, HostExploit is pleased to report that, Directi, while reviewing the complaints over the past few months, found certain trends:

1. Domain names registered with the same/similar contact information (name, address patterns)
2. Bulk registrations of domain names with a slight variation in the domain name e.g. 2008bases1.net, 2008bases2.net, 2008bases3.net, 2008bases4.net, 2008bases5.net …. by abusive registrants/customers
3. Same blacklisted name servers being repeatedly utilized.
4. Registrations in the same customer account involved in various forms of abuse
5. Based on these, we reviewed all domain names, first in the customer's account, then in the reseller's account and then across the databases.

An active list of directly suspended domains is available for down load from HostExploit.com

Read the full article:
http://hostexploit.com/index.php?option=com_content&view=article&id=124:actions-against-registry-services-abuse-report-april-2009-hostexploit-and-directi&catid=4:hostexploit-news