The increasing importance of registrars in the fight against spam

**Executive summary:** The report describes an active Storm botnet campaign distributing fake holiday e-cards hosted on rapidly changing fast-flux infrastructure (domains such as merrychristmasdude.com, newyearcards2008.com) that infected many systems; because the domains were registered via Nic.ru and Nic.ru failed to respond to takedown requests, Spamhaus resorted to listing parts of Nic.ru's infrastructure to disrupt the campaign.