Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

196,005
Total Tracked
196,003
VT Detected
88,803
Last Seen Active
99,290
Unavailable at Last Check
1
VT Pending
REG.RU

REG.RU 🇷🇺

🇷🇺 Russia Founded 2006 IANA #1606 reg.ru
1,430
Phishing Domains
318
Still Alive
1,112
Taken Down
99.5%
Detection Rate
7.4
Avg VT Score
22.2%
Alive Rate
1,430 phishing-domain abuse reports sent: REG.RU
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,430 domains registered through REG.RU, so the primary report total is 1,430. Database coverage starts Apr 8, 2025. 22% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.5% of domains flagged by VirusTotal 918 domains with VT ≥ 5
Tracking since Apr 2025 — latest: Aug 28, 2026
18/100
Global Risk Score — Moderate
Based on 342M domains analyzed across 4,154 registrars
Full Analysis
940,400
Global Domains
41.7%
1-Year Reg
75%
Active IPs

Registrar of Domain Names REG.RU LLC has a low risk score of 18/100, indicating a relatively clean profile. With 75% of domains having active IPs and only 25% classified as dead, there are strong operational signals.

REGRU-RU 1,430 domains
justsstop.ru
20 VTActive
news.info-games.ru
20 VTActiveApple
Screenshot of upwinz.fun
upwinz.fun
20 VTTaken Downgenericcrypto
Screenshot of upwinz.fun
upwinz.fun
Screenshot of bybit.media
bybit.media
19 VTCloaked · LiveBybit
Screenshot of bybit.media
bybit.media
Screenshot of discord.softorod.com
discord.softorod.com
19 VTUnknowndiscord
Screenshot of discord.softorod.com
discord.softorod.com
Screenshot of login.cs-finals.com
login.cs-finals.com
19 VTUnknownsteam
Screenshot of login.cs-finals.com
login.cs-finals.com
one.sevenfin.ru
19 VTActiveApple
Screenshot of turbodomain72.online
turbodomain72.online
19 VTTaken Downbase
Screenshot of turbodomain72.online
turbodomain72.online
Screenshot of cs-finals.com
cs-finals.com
18 VTUnknownvalve
Screenshot of cs-finals.com
cs-finals.com
Screenshot of kvrdev.ru
kvrdev.ru
18 VTActivesteam
Screenshot of kvrdev.ru
kvrdev.ru
runescapearts.forums.events.quitting.giveaway.gul.org-fm-678-223-176-122345492-182-342.ru
18 VTActive
Screenshot of store.workpoweredshopitem.com
store.workpoweredshopitem.com
18 VTTaken Downcs2
Screenshot of store.workpoweredshopitem.com
store.workpoweredshopitem.com
Screenshot of whatsappbutton.ru
whatsappbutton.ru
18 VTActivewhatsapp
Screenshot of whatsappbutton.ru
whatsappbutton.ru
Screenshot of autn-mail.ru
autn-mail.ru
17 VTUnknown
Screenshot of autn-mail.ru
autn-mail.ru
Screenshot of captcha-krab3-at.ru
captcha-krab3-at.ru
17 VTTaken Downkraken
Screenshot of captcha-krab3-at.ru
captcha-krab3-at.ru
case-battle.net.ru
17 VTUnknown
Screenshot of cases-batle.ru
cases-batle.ru
17 VTUnknowncs2
Screenshot of cases-batle.ru
cases-batle.ru
Screenshot of cs2-ace.shop
cs2-ace.shop
17 VTActive
Screenshot of cs2-ace.shop
cs2-ace.shop
Screenshot of cs2booms.shop
cs2booms.shop
17 VTUnknownvalve
Screenshot of cs2booms.shop
cs2booms.shop
Screenshot of https-krab1--cc.ru
https-krab1--cc.ru
17 VTUnknown
Screenshot of https-krab1--cc.ru
https-krab1--cc.ru
Screenshot of kra---45-----cc.ru
kra---45-----cc.ru
17 VTUnknown
Screenshot of kra---45-----cc.ru
kra---45-----cc.ru
Screenshot of kra46-at.omskarbitr.ru
kra46-at.omskarbitr.ru
17 VTUnknown
Screenshot of kra46-at.omskarbitr.ru
kra46-at.omskarbitr.ru
Screenshot of kra46c-cc.ru
kra46c-cc.ru
17 VTUnknownGoogle
Screenshot of kra46c-cc.ru
kra46c-cc.ru
Screenshot of krab--1---cc.ru
krab--1---cc.ru
17 VTUnknownkraken
Screenshot of krab--1---cc.ru
krab--1---cc.ru
Screenshot of krak45-at.ru
krak45-at.ru
17 VTUnknown
Screenshot of krak45-at.ru
krak45-at.ru
Screenshot of luxslot.pro
luxslot.pro
17 VTUnknowngenericcrypto
Screenshot of luxslot.pro
luxslot.pro
Screenshot of major-boom.shop
major-boom.shop
17 VTUnknown
Screenshot of major-boom.shop
major-boom.shop
Screenshot of metamask-node.site
metamask-node.site
17 VTActiveMetaMask
Screenshot of metamask-node.site
metamask-node.site
Screenshot of severozapadonlineparts.ru
severozapadonlineparts.ru
17 VTActivefacebook
Screenshot of severozapadonlineparts.ru
severozapadonlineparts.ru
Screenshot of 3-slon-cc.ru
3-slon-cc.ru
16 VTUnknown["kraken"]
Screenshot of 3-slon-cc.ru
3-slon-cc.ru
Screenshot of bonk-fundrop.site
bonk-fundrop.site
16 VTUnknowngenericcrypto
Screenshot of bonk-fundrop.site
bonk-fundrop.site
Screenshot of cs-booms.shop
cs-booms.shop
16 VTUnknownvalve
Screenshot of cs-booms.shop
cs-booms.shop
Screenshot of cs2-final.net
cs2-final.net
16 VTTaken Down
Screenshot of cs2-final.net
cs2-final.net
go-doc.ru
16 VTCloaked · Live
Screenshot of hyperpreps.com
hyperpreps.com
16 VTUnknownWallet Connect AbuseWalletConnect
Screenshot of hyperpreps.com
hyperpreps.com
Screenshot of kra----36---------cc.ru
kra----36---------cc.ru
16 VTUnknown
Screenshot of kra----36---------cc.ru
kra----36---------cc.ru
Screenshot of kra46-at.student02.ru
kra46-at.student02.ru
16 VTUnknown
Screenshot of kra46-at.student02.ru
kra46-at.student02.ru
Screenshot of krab1.mvm-context.ru
krab1.mvm-context.ru
16 VTUnknown
Screenshot of krab1.mvm-context.ru
krab1.mvm-context.ru
Screenshot of lis-skins-cs2.ru
lis-skins-cs2.ru
16 VTActive
Screenshot of lis-skins-cs2.ru
lis-skins-cs2.ru
Screenshot of liveevolution.pro
liveevolution.pro
16 VTUnknown
Screenshot of liveevolution.pro
liveevolution.pro
Screenshot of login.cs2-final.net
login.cs2-final.net
16 VTUnknownsteam
Screenshot of login.cs2-final.net
login.cs2-final.net
Screenshot of rushroll.pro
rushroll.pro
16 VTTaken Downgenericcrypto
Screenshot of rushroll.pro
rushroll.pro
Screenshot of s.teams-ls.com
s.teams-ls.com
16 VTTaken Down
Screenshot of s.teams-ls.com
s.teams-ls.com
Screenshot of stroy-portall.ru
stroy-portall.ru
16 VTActivedhl
Screenshot of stroy-portall.ru
stroy-portall.ru
Screenshot of whatsapper.leadball.ru
whatsapper.leadball.ru
16 VTActive["whatsapp"]
Screenshot of whatsapper.leadball.ru
whatsapper.leadball.ru
Screenshot of workshoppoweredskin.com
workshoppoweredskin.com
16 VTTaken Down
Screenshot of workshoppoweredskin.com
workshoppoweredskin.com
Screenshot of asset.kra----36----cc.ru
asset.kra----36----cc.ru
15 VTTaken Down
Screenshot of asset.kra----36----cc.ru
asset.kra----36----cc.ru
Screenshot of aster-dex.art
aster-dex.art
15 VTUnknownacross
Screenshot of aster-dex.art
aster-dex.art
Screenshot of bestblast.pro
bestblast.pro
15 VTActiveBlast
Screenshot of bestblast.pro
bestblast.pro
Screenshot of betterclaimsolana.com
betterclaimsolana.com
15 VTUnknownsolana
Screenshot of betterclaimsolana.com
betterclaimsolana.com
Screenshot of bybit-aml.ru
bybit-aml.ru
15 VTActiveBybit
Screenshot of bybit-aml.ru
bybit-aml.ru
Screenshot of bybit-com.site
bybit-com.site
15 VTActiveBybit
Screenshot of bybit-com.site
bybit-com.site
Screenshot of bybitperu.com
bybitperu.com
15 VTUnknownBybit
Screenshot of bybitperu.com
bybitperu.com
Screenshot of cdn.kra----36----cc.ru
cdn.kra----36----cc.ru
15 VTUnknown
Screenshot of cdn.kra----36----cc.ru
cdn.kra----36----cc.ru
Screenshot of chainlist.xyz
chainlist.xyz
15 VTActive
Screenshot of chainlist.xyz
chainlist.xyz
Screenshot of docspo.ru
docspo.ru
15 VTActive
Screenshot of docspo.ru
docspo.ru
Screenshot of faceit-verifyclubs.com
faceit-verifyclubs.com
15 VTActive
Screenshot of faceit-verifyclubs.com
faceit-verifyclubs.com
get.kra----36----cc.ru
15 VTUnknown
Screenshot of kra------36cc.ru
kra------36cc.ru
15 VTUnknown
Screenshot of kra------36cc.ru
kra------36cc.ru
Screenshot of kra------43--cc.ru
kra------43--cc.ru
15 VTUnknown
Screenshot of kra------43--cc.ru
kra------43--cc.ru
Screenshot of kra--36---------cc.ru
kra--36---------cc.ru
15 VTUnknown
Screenshot of kra--36---------cc.ru
kra--36---------cc.ru
Screenshot of kra46-cc.dnrsovet.ru
kra46-cc.dnrsovet.ru
15 VTUnknown
Screenshot of kra46-cc.dnrsovet.ru
kra46-cc.dnrsovet.ru
Screenshot of kra46-cc.kovrolinych.ru
kra46-cc.kovrolinych.ru
15 VTUnknown
Screenshot of kra46-cc.kovrolinych.ru
kra46-cc.kovrolinych.ru
Screenshot of kra46.mgd-bankrot-netdolgov.ru
kra46.mgd-bankrot-netdolgov.ru
15 VTTaken Down
Screenshot of kra46.mgd-bankrot-netdolgov.ru
kra46.mgd-bankrot-netdolgov.ru
Screenshot of kra47-cc.jugsool.ru
kra47-cc.jugsool.ru
15 VTUnknown
Screenshot of kra47-cc.jugsool.ru
kra47-cc.jugsool.ru
Screenshot of kra47cc-------------a.ru
kra47cc-------------a.ru
15 VTUnknown
Screenshot of kra47cc-------------a.ru
kra47cc-------------a.ru
Screenshot of kraken-ssylka-ru.ru
kraken-ssylka-ru.ru
15 VTUnknownKraken
Screenshot of kraken-ssylka-ru.ru
kraken-ssylka-ru.ru
Screenshot of krk44-at.ru
krk44-at.ru
15 VTUnknown
Screenshot of krk44-at.ru
krk44-at.ru
Screenshot of ledger-live-ledger.org
ledger-live-ledger.org
15 VTActiveLedger
Screenshot of ledger-live-ledger.org
ledger-live-ledger.org
lis-skins-shop.ru
15 VTActive
Screenshot of media2.ewerlire.ru
media2.ewerlire.ru
15 VTActiveApple
Screenshot of media2.ewerlire.ru
media2.ewerlire.ru
Screenshot of nvu-bankrot-netdolgov.ru
nvu-bankrot-netdolgov.ru
15 VTUnknown
Screenshot of nvu-bankrot-netdolgov.ru
nvu-bankrot-netdolgov.ru
Screenshot of rainbet.fun
rainbet.fun
15 VTActivegenericcrypto
Screenshot of rainbet.fun
rainbet.fun
Screenshot of remote-webpage.ru
remote-webpage.ru
15 VTActive
Screenshot of remote-webpage.ru
remote-webpage.ru
Screenshot of s.teams-lc.com
s.teams-lc.com
15 VTTaken Down
Screenshot of s.teams-lc.com
s.teams-lc.com
slon-4-at.ru
15 VTUnknown
Screenshot of workshopoweredskins.com
workshopoweredskins.com
15 VTTaken Down
Screenshot of workshopoweredskins.com
workshopoweredskins.com
Screenshot of betmeloni.com
betmeloni.com
14 VTUnknowngenericcrypto
Screenshot of betmeloni.com
betmeloni.com
Screenshot of biomap.ru
biomap.ru
14 VTActivetelegram
Screenshot of biomap.ru
biomap.ru
Screenshot of cazump.online
cazump.online
14 VTUnknowngenericcrypto
Screenshot of cazump.online
cazump.online
Screenshot of coinbase-rec.com
coinbase-rec.com
14 VTUnknownCoinbase
Screenshot of coinbase-rec.com
coinbase-rec.com
Screenshot of cs.2cyberplay.com
cs.2cyberplay.com
14 VTUnknowndota 2
Screenshot of cs.2cyberplay.com
cs.2cyberplay.com
Screenshot of digital.kraken19at-t.ru
digital.kraken19at-t.ru
14 VTUnknownKraken
Screenshot of digital.kraken19at-t.ru
digital.kraken19at-t.ru
Screenshot of discord.fresh-soft.ru
discord.fresh-soft.ru
14 VTActivediscord
Screenshot of discord.fresh-soft.ru
discord.fresh-soft.ru
Screenshot of eazy-cash.ru
eazy-cash.ru
14 VTActivegenericcrypto
Screenshot of eazy-cash.ru
eazy-cash.ru
Screenshot of edge2.soldi99.pro
edge2.soldi99.pro
14 VTUnknownGoogle
Screenshot of edge2.soldi99.pro
edge2.soldi99.pro
Screenshot of heavengame.space
heavengame.space
14 VTUnknowngenericcrypto
Screenshot of heavengame.space
heavengame.space
Screenshot of hostel-max.ru
hostel-max.ru
14 VTUnknown
Screenshot of hostel-max.ru
hostel-max.ru
https--slon--3--cc.ru
14 VTTaken Down
Screenshot of kark45-cc.ru
kark45-cc.ru
14 VTUnknown
Screenshot of kark45-cc.ru
kark45-cc.ru
kra-----36-cc.ru
14 VTUnknown
Screenshot of kra-43-cc-site.ru
kra-43-cc-site.ru
14 VTUnknown
Screenshot of kra-43-cc-site.ru
kra-43-cc-site.ru
Screenshot of kra-aa-31-at.ru
kra-aa-31-at.ru
14 VTUnknownkraken
Screenshot of kra-aa-31-at.ru
kra-aa-31-at.ru
Screenshot of kra42-at-web.ru
kra42-at-web.ru
14 VTUnknown
Screenshot of kra42-at-web.ru
kra42-at-web.ru
Screenshot of kra42cc-original.ru
kra42cc-original.ru
14 VTUnknown
Screenshot of kra42cc-original.ru
kra42cc-original.ru
Screenshot of kra43----------cc.ru
kra43----------cc.ru
14 VTUnknown
Screenshot of kra43----------cc.ru
kra43----------cc.ru
Screenshot of kra43at-webs.ru
kra43at-webs.ru
14 VTUnknown
Screenshot of kra43at-webs.ru
kra43at-webs.ru
Screenshot of kra44-at-at.ru
kra44-at-at.ru
14 VTUnknown
Screenshot of kra44-at-at.ru
kra44-at-at.ru
Screenshot of kra44-cc-vpn.ru
kra44-cc-vpn.ru
14 VTTaken Down
Screenshot of kra44-cc-vpn.ru
kra44-cc-vpn.ru
Screenshot of kra46-at.credit-vzyat.ru
kra46-at.credit-vzyat.ru
14 VTUnknown
Screenshot of kra46-at.credit-vzyat.ru
kra46-at.credit-vzyat.ru
1 2 3 4 Next » Page 1 of 15

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,060 Cloudflare 21,492 Dynadot 10,923 PDR Ltd. d/b/a PublicDomainRe... 8,054 Namecheap 7,871 GoDaddy 6,694 NameSilo 6,554 Gname.com Pte. Ltd. 6,542 WebNIC 5,154 Global Domain Group 4,401 Trustname.com 4,258 Tucows 4,232 Wix Studio 4,093 Hostinger 3,407 Vercel 2,859 GitHub, Inc. 2,772 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,196 OwnRegistrar, Inc. 2,019 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,754 Cloudflare Pages 1,724 Name.com 1,681 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,450 REGRU-RU 1,430 Key-Systems 1,413 Squarespace Domains II 1,296

Showing 1,430 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,748 genericcrypto 7,740 across 6,798 Google 6,377 Coinbase 4,215 MetaMask 4,083 Trezor 3,429 Solana 3,054 Ethereum 2,954 genericcloudflare 2,919 Binance 2,595 Kraken 2,497 Facebook 2,242 cryptoscam 1,833 Cloudflare 1,607 Apple 1,549 x.com 1,439 base 1,432 Microsoft 1,324 Bet365 1,321

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,035 Seed Phrase Theft 19 Airdrop Scam 8,321 Investment Scam 335

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust