A friend approached me saying he found a whole host of spam domains registered to his office (as in, if you whois the domain the registrant and administrative contact are functional people from his address).
What are his options to stop this from being the case, if any?