Fraud Reports Wiki
Advertisement

To suspend the name server effectively, please take the following steps in this order:[]

1. Change the name server's address record to a nonroutable black hole address.[]

A black hole address is one such as 0.0.0.0 or 61.61.61.61.


This will ensure that in all cases, even after the domain has been been suspended, the name server cannot resolve at the registry.


2. Ensure that the address record for the name server cannot be changed back.[]

Please use your backoffice application to prevent your customer from modifying the IP address either manually or automatically.

You may need to act quickly in adding this status, as many name servers are now fast-flux domains, and it may be possible that the IP address will be changed before you can apply this status.


3. Prevent the name server's domain from leaving to an abuse-friendly registrar.[]

It is important to assure that the domain can neither be deleted nor transferred. Please use your backoffice application to prevent your customer from transferring the domain or deleting it.

If you do not succeed in suspending the domain and preventing its deletion and transfer to another registrar, you will be seen as supporting the illicit organization behind the domain, and may be held liable for your complicit inaction.

4. Ensure that the name server's domain does not resolve at the registry.[]

This may or may not be possible, depending on the TLD. Nonetheless, by ensuring that the IP address is a black hole address, you will render the domain inactive.

5. Verify that your settings have taken effect.[]

Note that you will not be able to verify by ping or host command from several hours to several days, whether or not the changes have fully propagated. Therefore, please check back the following day to ensure that:

  • the name server does not resolve at the registry (use the host command)
  • still has non-routable black hole IP addresses
  • has not been modified from the settings you have applied
Advertisement