That would depend on the potential harm. Sadly most people do not understand the difference between a 419 scam bank and a phishing site. Key is careful investigation. ...
We can pull the plug on the entire server, but that could affect hundreds of sites and so we simply can't
When the bad guys are using fast flux and hopping from host to host, it won't help, since they'll just jump elsewhere. That's why the ability to turn off domains quickly is an important part of fighting online crime. On the other hand (and not particularly related to ICANN), at some point the world will have to clarify the responsibilities of hosting providers, so if a server's too important to turn the whole thing off, you better have some way to turn off a part that's gone bad. This will involve telling people that for $5/mo you don't get guaranteed 24/7 six sigma business critical hosting, you get what you get, which may include some downtime. R's, John