Czech registrars are not connected to the Kelihos botnet.

Czech registrars have been cleared of operating the Kelihos botnet. Microsoft representatives stated that the Czech subdomain registration service dotFREE Group and the administrator of the .CZ.CC domain were not involved in operating the botnet.

.CZ.CC domain administrator Dominique Alexander Piatti and representatives of dotFREE SRO collaborated with Microsoft, resulting in the removal of the subdomains used to manage Kelihos.

In fact, the attackers used subdomain services.

The botnet's owners found a way to abuse the services of a free spoofing provider (http://cz.cc). The attackers used domains to carry out their operations.