Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

196,005
Total Tracked
196,003
VT Detected
88,803
Last Seen Active
99,290
Unavailable at Last Check
1
VT Pending
REG.RU

REG.RU 🇷🇺

🇷🇺 Russia Founded 2006 IANA #1606 reg.ru
1,430
Phishing Domains
318
Still Alive
1,112
Taken Down
99.5%
Detection Rate
7.4
Avg VT Score
22.2%
Alive Rate
1,430 phishing-domain abuse reports sent: REG.RU
PhishDestroy sends one primary abuse report for every phishing domain entered in its threat database. This page contains 1,430 domains registered through REG.RU, so the primary report total is 1,430. Database coverage starts Apr 8, 2025. 22% of these reported domains remain active, suggesting inadequate enforcement of abuse policies.
99.5% of domains flagged by VirusTotal 918 domains with VT ≥ 5
Tracking since Apr 2025 — latest: Aug 28, 2026
18/100
Global Risk Score — Moderate
Based on 342M domains analyzed across 4,154 registrars
Full Analysis
940,400
Global Domains
41.7%
1-Year Reg
75%
Active IPs

Registrar of Domain Names REG.RU LLC has a low risk score of 18/100, indicating a relatively clean profile. With 75% of domains having active IPs and only 25% classified as dead, there are strong operational signals.

REGRU-RU 1,430 domains
Screenshot of kra46-at.mknrm.ru
kra46-at.mknrm.ru
14 VTUnknown
Screenshot of kra46-at.mknrm.ru
kra46-at.mknrm.ru
Screenshot of kra46-cc.balet-kalina.ru
kra46-cc.balet-kalina.ru
14 VTUnknown
Screenshot of kra46-cc.balet-kalina.ru
kra46-cc.balet-kalina.ru
Screenshot of kra46-cc.filippok-langepas.ru
kra46-cc.filippok-langepas.ru
14 VTUnknown
Screenshot of kra46-cc.filippok-langepas.ru
kra46-cc.filippok-langepas.ru
Screenshot of kra46at.limepav.ru
kra46at.limepav.ru
14 VTUnknown
Screenshot of kra46at.limepav.ru
kra46at.limepav.ru
Screenshot of kra46cc.ledi-cb.ru
kra46cc.ledi-cb.ru
14 VTUnknown
Screenshot of kra46cc.ledi-cb.ru
kra46cc.ledi-cb.ru
Screenshot of kra47--------cc-c.ru
kra47--------cc-c.ru
14 VTUnknown
Screenshot of kra47--------cc-c.ru
kra47--------cc-c.ru
Screenshot of kra47-at.dmg-garage.ru
kra47-at.dmg-garage.ru
14 VTTaken Down
Screenshot of kra47-at.dmg-garage.ru
kra47-at.dmg-garage.ru
Screenshot of kra47-at.razvodimsia.ru
kra47-at.razvodimsia.ru
14 VTUnknown
Screenshot of kra47-at.razvodimsia.ru
kra47-at.razvodimsia.ru
Screenshot of kra47-at.silakovabeauty.ru
kra47-at.silakovabeauty.ru
14 VTUnknown
Screenshot of kra47-at.silakovabeauty.ru
kra47-at.silakovabeauty.ru
Screenshot of kra47-at.zadaitutvopros.ru
kra47-at.zadaitutvopros.ru
14 VTTaken Down
Screenshot of kra47-at.zadaitutvopros.ru
kra47-at.zadaitutvopros.ru
Screenshot of kra47-cc-com.ru
kra47-cc-com.ru
14 VTUnknown
Screenshot of kra47-cc-com.ru
kra47-cc-com.ru
Screenshot of kra47.faberlik-vg.ru
kra47.faberlik-vg.ru
14 VTUnknown
Screenshot of kra47.faberlik-vg.ru
kra47.faberlik-vg.ru
Screenshot of kra47.vamsudaspb.ru
kra47.vamsudaspb.ru
14 VTUnknown
Screenshot of kra47.vamsudaspb.ru
kra47.vamsudaspb.ru
Screenshot of kra47at.vectors64.ru
kra47at.vectors64.ru
14 VTUnknown
Screenshot of kra47at.vectors64.ru
kra47at.vectors64.ru
Screenshot of kra47cc.barbershop-pride.ru
kra47cc.barbershop-pride.ru
14 VTUnknown
Screenshot of kra47cc.barbershop-pride.ru
kra47cc.barbershop-pride.ru
Screenshot of krab-1--------cc.ru
krab-1--------cc.ru
14 VTActive
Screenshot of krab-1--------cc.ru
krab-1--------cc.ru
Screenshot of krab3-zerkalo.online
krab3-zerkalo.online
14 VTUnknownkraken
Screenshot of krab3-zerkalo.online
krab3-zerkalo.online
Screenshot of kraken-ssilka-ru.ru
kraken-ssilka-ru.ru
14 VTTaken DownKraken
Screenshot of kraken-ssilka-ru.ru
kraken-ssilka-ru.ru
Screenshot of kraken.krab2-att.ru
kraken.krab2-att.ru
14 VTUnknownKraken
Screenshot of kraken.krab2-att.ru
kraken.krab2-att.ru
Screenshot of kraken.krab2ccj.ru
kraken.krab2ccj.ru
14 VTUnknownKraken
Screenshot of kraken.krab2ccj.ru
kraken.krab2ccj.ru
Screenshot of kraken2trfqodidvlh4ab337cpzfrhdlfldhev5fn7njhumwr7instad-onion.ru
kraken2trfqodidvlh4ab337cpzfrhdlfldhev5fn7njhumwr7instad-onion.ru
14 VTActiveKraken
Screenshot of kraken2trfqodidvlh4ab337cpzfrhdlfldhev5fn7njhumwr7instad-onion.ru
kraken2trfqodidvlh4ab337cpzfrhdlfldhev5fn7njhumwr7instad-onion.ru
Screenshot of life-tut.ru
life-tut.ru
14 VTUnknownkraken
Screenshot of life-tut.ru
life-tut.ru
moon-market-ru.ru
14 VTActive
Screenshot of nexusmsk.ru
nexusmsk.ru
14 VTActive
Screenshot of nexusmsk.ru
nexusmsk.ru
Screenshot of oldddrewq.com
oldddrewq.com
14 VTActive
Screenshot of oldddrewq.com
oldddrewq.com
Screenshot of outro.say-meow.ru
outro.say-meow.ru
14 VTActiveGoogle
Screenshot of outro.say-meow.ru
outro.say-meow.ru
Screenshot of rbs-cookie.ru
rbs-cookie.ru
14 VTActivediscord
Screenshot of rbs-cookie.ru
rbs-cookie.ru
Screenshot of s.teams-lm.com
s.teams-lm.com
14 VTTaken Down
Screenshot of s.teams-lm.com
s.teams-lm.com
Screenshot of slo2cc.ru
slo2cc.ru
14 VTTaken Downkraken
Screenshot of slo2cc.ru
slo2cc.ru
Screenshot of steamcomummity.ru
steamcomummity.ru
14 VTTaken Downsteam
Screenshot of steamcomummity.ru
steamcomummity.ru
Screenshot of steancommunitly.ru
steancommunitly.ru
14 VTTaken DownSteam
Screenshot of steancommunitly.ru
steancommunitly.ru
Screenshot of store.poweredartworkspace.com
store.poweredartworkspace.com
14 VTTaken Downacross
Screenshot of store.poweredartworkspace.com
store.poweredartworkspace.com
Screenshot of store.poweredworkart.com
store.poweredworkart.com
14 VTTaken Downcs2
Screenshot of store.poweredworkart.com
store.poweredworkart.com
Screenshot of store.poweredworkshopitem.com
store.poweredworkshopitem.com
14 VTTaken Downcs2
Screenshot of store.poweredworkshopitem.com
store.poweredworkshopitem.com
Screenshot of store.workshopartskinpowered.com
store.workshopartskinpowered.com
14 VTTaken Downacross
Screenshot of store.workshopartskinpowered.com
store.workshopartskinpowered.com
Screenshot of telegram.autentifikator.ru
telegram.autentifikator.ru
14 VTActivetelegram
Screenshot of telegram.autentifikator.ru
telegram.autentifikator.ru
Screenshot of u0688998.plsk.regruhosting.ru
u0688998.plsk.regruhosting.ru
14 VTActive
Screenshot of u0688998.plsk.regruhosting.ru
u0688998.plsk.regruhosting.ru
Screenshot of unionbet.su
unionbet.su
14 VTActivegenericcrypto
Screenshot of unionbet.su
unionbet.su
Screenshot of winarkana.net
winarkana.net
14 VTTaken Downgenericcrypto
Screenshot of winarkana.net
winarkana.net
Screenshot of workshopartskinpowered.com
workshopartskinpowered.com
14 VTTaken Down
Screenshot of workshopartskinpowered.com
workshopartskinpowered.com
Screenshot of xn--phntom-qta.online
xn--phntom-qta.online
14 VTActivephantom
Screenshot of xn--phntom-qta.online
xn--phntom-qta.online
Screenshot of 5xwin.ru
5xwin.ru
13 VTActivegenericcrypto
Screenshot of 5xwin.ru
5xwin.ru
Screenshot of cc-kra46.ru
cc-kra46.ru
13 VTUnknown
Screenshot of cc-kra46.ru
cc-kra46.ru
Screenshot of daybreakcup.com
daybreakcup.com
13 VTUnknown
Screenshot of daybreakcup.com
daybreakcup.com
https-slon3-at.ru
13 VTUnknown
https-slon3at.ru
13 VTUnknown
Screenshot of hyperak.com
hyperak.com
13 VTTaken DownWallet Connect Abuse
Screenshot of hyperak.com
hyperak.com
Screenshot of hyperlllquid.space
hyperlllquid.space
13 VTActivemetamask
Screenshot of hyperlllquid.space
hyperlllquid.space
Screenshot of invictusplay.com
invictusplay.com
13 VTActive
Screenshot of invictusplay.com
invictusplay.com
Screenshot of kra--------44-at.ru
kra--------44-at.ru
13 VTUnknown
Screenshot of kra--------44-at.ru
kra--------44-at.ru
Screenshot of kra-4-2-cc.ru
kra-4-2-cc.ru
13 VTActive
Screenshot of kra-4-2-cc.ru
kra-4-2-cc.ru
Screenshot of kra-44-cc-1.ru
kra-44-cc-1.ru
13 VTUnknown
Screenshot of kra-44-cc-1.ru
kra-44-cc-1.ru
Screenshot of kra44-----at.ru
kra44-----at.ru
13 VTUnknown
Screenshot of kra44-----at.ru
kra44-----at.ru
Screenshot of kra44-cc-c.ru
kra44-cc-c.ru
13 VTUnknown
Screenshot of kra44-cc-c.ru
kra44-cc-c.ru
Screenshot of kra44-cc-net.ru
kra44-cc-net.ru
13 VTUnknown
Screenshot of kra44-cc-net.ru
kra44-cc-net.ru
Screenshot of kra46-at.moskva-domashniy-internet.ru
kra46-at.moskva-domashniy-internet.ru
13 VTUnknown
Screenshot of kra46-at.moskva-domashniy-internet.ru
kra46-at.moskva-domashniy-internet.ru
Screenshot of kra46-at.resto-bel.ru
kra46-at.resto-bel.ru
13 VTUnknown
Screenshot of kra46-at.resto-bel.ru
kra46-at.resto-bel.ru
Screenshot of kra46-cc.farmaciaitali24.ru
kra46-cc.farmaciaitali24.ru
13 VTUnknown
Screenshot of kra46-cc.farmaciaitali24.ru
kra46-cc.farmaciaitali24.ru
Screenshot of kra46-cc.keramavrn.ru
kra46-cc.keramavrn.ru
13 VTUnknown
Screenshot of kra46-cc.keramavrn.ru
kra46-cc.keramavrn.ru
Screenshot of kra46-cc.sco-project.ru
kra46-cc.sco-project.ru
13 VTUnknown
Screenshot of kra46-cc.sco-project.ru
kra46-cc.sco-project.ru
Screenshot of kra46.kln-bankrot-netdolgov.ru
kra46.kln-bankrot-netdolgov.ru
13 VTUnknown
Screenshot of kra46.kln-bankrot-netdolgov.ru
kra46.kln-bankrot-netdolgov.ru
Screenshot of kra46.med-zdorovie.ru
kra46.med-zdorovie.ru
13 VTUnknown
Screenshot of kra46.med-zdorovie.ru
kra46.med-zdorovie.ru
Screenshot of kra46.mgd-bank-rot-net-dolgov.ru
kra46.mgd-bank-rot-net-dolgov.ru
13 VTTaken Down
Screenshot of kra46.mgd-bank-rot-net-dolgov.ru
kra46.mgd-bank-rot-net-dolgov.ru
Screenshot of kra46at.asells.ru
kra46at.asells.ru
13 VTUnknown
Screenshot of kra46at.asells.ru
kra46at.asells.ru
Screenshot of kra46at.farmaciait24.ru
kra46at.farmaciait24.ru
13 VTUnknown
Screenshot of kra46at.farmaciait24.ru
kra46at.farmaciait24.ru
Screenshot of kra46at.iricher-teacher.ru
kra46at.iricher-teacher.ru
13 VTUnknown
Screenshot of kra46at.iricher-teacher.ru
kra46at.iricher-teacher.ru
Screenshot of kra46at.podkluchit-domashniy-internet.ru
kra46at.podkluchit-domashniy-internet.ru
13 VTUnknown
Screenshot of kra46at.podkluchit-domashniy-internet.ru
kra46at.podkluchit-domashniy-internet.ru
Screenshot of kra46at.skyboxs.ru
kra46at.skyboxs.ru
13 VTUnknown
Screenshot of kra46at.skyboxs.ru
kra46at.skyboxs.ru
Screenshot of kra46cc.bukvoezhka36.ru
kra46cc.bukvoezhka36.ru
13 VTUnknown
Screenshot of kra46cc.bukvoezhka36.ru
kra46cc.bukvoezhka36.ru
Screenshot of kra46cc.dengi-v-dolg-bistro.ru
kra46cc.dengi-v-dolg-bistro.ru
13 VTUnknown
Screenshot of kra46cc.dengi-v-dolg-bistro.ru
kra46cc.dengi-v-dolg-bistro.ru
Screenshot of kra46cc.skyboxs.ru
kra46cc.skyboxs.ru
13 VTUnknown
Screenshot of kra46cc.skyboxs.ru
kra46cc.skyboxs.ru
Screenshot of kra47-------------------cc.ru
kra47-------------------cc.ru
13 VTUnknown
Screenshot of kra47-------------------cc.ru
kra47-------------------cc.ru
Screenshot of kra47-at.comreal42.ru
kra47-at.comreal42.ru
13 VTUnknown
Screenshot of kra47-at.comreal42.ru
kra47-at.comreal42.ru
Screenshot of kra47-at.decor-np.ru
kra47-at.decor-np.ru
13 VTUnknown
Screenshot of kra47-at.decor-np.ru
kra47-at.decor-np.ru
Screenshot of kra47-at.mxls.ru
kra47-at.mxls.ru
13 VTUnknown
Screenshot of kra47-at.mxls.ru
kra47-at.mxls.ru
Screenshot of kra47-at.school4myski.ru
kra47-at.school4myski.ru
13 VTUnknown
Screenshot of kra47-at.school4myski.ru
kra47-at.school4myski.ru
Screenshot of kra47-cc.ass1s.ru
kra47-cc.ass1s.ru
13 VTUnknown
Screenshot of kra47-cc.ass1s.ru
kra47-cc.ass1s.ru
Screenshot of kra47-cc.faberlik-vg.ru
kra47-cc.faberlik-vg.ru
13 VTUnknown
Screenshot of kra47-cc.faberlik-vg.ru
kra47-cc.faberlik-vg.ru
Screenshot of kra47-cc.finefloor-spb.ru
kra47-cc.finefloor-spb.ru
13 VTUnknown
Screenshot of kra47-cc.finefloor-spb.ru
kra47-cc.finefloor-spb.ru
Screenshot of kra47-cc.haval-m-nch.ru
kra47-cc.haval-m-nch.ru
13 VTTaken Down
Screenshot of kra47-cc.haval-m-nch.ru
kra47-cc.haval-m-nch.ru
Screenshot of kra47-cc.razvodimsia.ru
kra47-cc.razvodimsia.ru
13 VTUnknown
Screenshot of kra47-cc.razvodimsia.ru
kra47-cc.razvodimsia.ru
Screenshot of kra47-cc.skolkovariantov.ru
kra47-cc.skolkovariantov.ru
13 VTUnknown
Screenshot of kra47-cc.skolkovariantov.ru
kra47-cc.skolkovariantov.ru
Screenshot of kra47-cc.tvoyarabotamsk.ru
kra47-cc.tvoyarabotamsk.ru
13 VTUnknown
Screenshot of kra47-cc.tvoyarabotamsk.ru
kra47-cc.tvoyarabotamsk.ru
Screenshot of kra47cc.nefteburovoe.ru
kra47cc.nefteburovoe.ru
13 VTUnknown
Screenshot of kra47cc.nefteburovoe.ru
kra47cc.nefteburovoe.ru
Screenshot of krab-2-att-a.ru
krab-2-att-a.ru
13 VTUnknownKraken
Screenshot of krab-2-att-a.ru
krab-2-att-a.ru
krab1-at.kakdoma54.ru
13 VTActive
krab1cc.ashi13.ru
13 VTTaken Down
Screenshot of krab2atttttttt-a.ru
krab2atttttttt-a.ru
13 VTUnknownKraken
Screenshot of krab2atttttttt-a.ru
krab2atttttttt-a.ru
Screenshot of kraken-zerkalo-site.online
kraken-zerkalo-site.online
13 VTUnknownKraken
Screenshot of kraken-zerkalo-site.online
kraken-zerkalo-site.online
Screenshot of kraken.krab2---cc.ru
kraken.krab2---cc.ru
13 VTUnknownKraken
Screenshot of kraken.krab2---cc.ru
kraken.krab2---cc.ru
Screenshot of krakenvizit.ru
krakenvizit.ru
13 VTUnknownKraken
Screenshot of krakenvizit.ru
krakenvizit.ru
Screenshot of krccc.shop
krccc.shop
13 VTActive
Screenshot of krccc.shop
krccc.shop
krra39at.ru
13 VTUnknown
Screenshot of krusty.online
krusty.online
13 VTTaken Downgenericcrypto
Screenshot of krusty.online
krusty.online
Screenshot of lineairdrop.com
lineairdrop.com
13 VTUnknownLinea
Screenshot of lineairdrop.com
lineairdrop.com
lis-skins-rus.ru
13 VTActive
Screenshot of losexgame.com
losexgame.com
13 VTUnknowngenericcrypto
Screenshot of losexgame.com
losexgame.com
Screenshot of mail.lombard4u.ru
mail.lombard4u.ru
13 VTActiveCoinbase
Screenshot of mail.lombard4u.ru
mail.lombard4u.ru
Screenshot of market-csgo-com.ru
market-csgo-com.ru
13 VTUnknowncounter-strike
Screenshot of market-csgo-com.ru
market-csgo-com.ru
Screenshot of parus36.ru
parus36.ru
13 VTActivegenericemail
Screenshot of parus36.ru
parus36.ru
« Prev 1 2 3 4 5 Next » Page 2 of 15

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC 29,060 Cloudflare 21,492 Dynadot 10,923 PDR Ltd. d/b/a PublicDomainRe... 8,054 Namecheap 7,871 GoDaddy 6,694 NameSilo 6,554 Gname.com Pte. Ltd. 6,542 WebNIC 5,154 Global Domain Group 4,401 Trustname.com 4,258 Tucows 4,232 Wix Studio 4,093 Hostinger 3,407 Vercel 2,859 GitHub, Inc. 2,772 MarkMonitor 2,587 Dominet (HK) Limited 2,205 Spaceship, Inc. 2,196 OwnRegistrar, Inc. 2,019 Netlify 1,981 Hosting Concepts B.V. d/b/a R... 1,754 Cloudflare Pages 1,724 Name.com 1,681 CSC Corporate Domains, Inc. 1,601 MAT BAO CORPORATION 1,488 Cosmotown 1,450 REGRU-RU 1,430 Key-Systems 1,413 Squarespace Domains II 1,296

Showing 1,430 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,415 Solana Drainer 2,673 Wallet Connect Abuse 1,673 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 31 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,892 Airdrop Scam 6,268 Seed Phrase Phishing 744 Wallet Connect Abuse 598 Token Presale 237 Recovery Scam 97 Verification Scam 67 Giveaway Scam 58 NFT Mint 51 Credential Phishing 31 Staking Scam 8 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 7,748 genericcrypto 7,740 across 6,798 Google 6,377 Coinbase 4,215 MetaMask 4,083 Trezor 3,429 Solana 3,054 Ethereum 2,954 genericcloudflare 2,919 Binance 2,595 Kraken 2,497 Facebook 2,242 cryptoscam 1,833 Cloudflare 1,607 Apple 1,549 x.com 1,439 base 1,432 Microsoft 1,324 Bet365 1,321

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 2,035 Seed Phrase Theft 19 Airdrop Scam 8,321 Investment Scam 335

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust