Although the question has a much broader scope an example case is my posted question: Should I worry if I have tried to ssh into a 'fake' dyndns.org site? (with ssh keys)
In summary the previous question is related to people running sites with the (supposed) aim of collecting ssh logins to poorly secured servers using dynamically allocated ips through dyndns.org. By running a server on for instance dyndn.com tyou could collect passwords where people accidently miss the s when ssh'ing in and if the sites using password authentication only theyve you have all you need.
Its got me thinking as to why these sites are still up considering theres reasonable supsicion (on my part thats all it is) that theyre being run for nefarious purposes.
Arent theyre agencys to tackle this behaviour? Is it that people dont report it (I havent, who to?), wouldnt dyndns be looking out for it and sort it (ill try to email them tomorrow)? Is it that theres no proof?