RU-CENTER-RU: phishing domains and abuse response

PhishDestroy reported 30 phishing domains registered with RU-CENTER-RU between 2026-01-02 and 2026-06-18, sending 30 abuse reports. Median time from the first report until a domain stopped resolving: 26.0 days (n = 15). 5 of 20 domains were still active 90 days after the first report. The database holds 256 RU-CENTER-RU domains in total.

30
Domains reported (window)
30
Abuse reports sent
26.0 days
Median time to unavailable
256
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 15 (50%); Offline 14 (47%); Suspended 1 (3%).

90th percentile time to unavailable: 41.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Kraken81
  2. Kraken8
  3. Google5
  4. WhatsApp3
  5. Coinbase3
  6. ["kraken"]3
  7. Steam2
  8. Backpack2

Top-level domains

  1. .ru256

Most reported domains

  1. 7-slonov.ru
  2. antai-amende-clients.justns.ru
  3. cgiben.temp.swtest.ru
  4. cyber-tank.ru
  5. dcnn.ru

Latest RU-CENTER-RU phishing domains

The 30 most recently detected domains at RU-CENTER-RU
DomainFirst detectedStatus at last checkRegistrar
cardingcashouts.ru2026-10-21OnlineRU-CENTER-RU
adwords-google.ru2026-10-19OnlineRU-CENTER-RU
w01.aksakov-museum.ru2026-10-07OnlineRU-CENTER-RU
slonn7.ru2026-09-27OnlineRU-CENTER-RU
slon-to-kraken.ru2026-09-25OnlineRU-CENTER-RU
kraken-onion.ru2026-09-25OnlineRU-CENTER-RU
kraken-darknet-ssilka.ru2026-09-25OnlineRU-CENTER-RU
zerkalo-kraken-onion.ru2026-09-25OnlineRU-CENTER-RU
kraken-slon-zerkalo.ru2026-09-25OnlineRU-CENTER-RU
kraken-zerkalo-darknet.ru2026-09-25OnlineRU-CENTER-RU
kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njhumwr7instad--onion.ru2026-09-25OnlineRU-CENTER-RU
slon3-kraken-cc.ru2026-09-25OnlineRU-CENTER-RU
kraken-ssilka-slon.ru2026-09-25OnlineRU-CENTER-RU
kraken-sait-darknet.ru2026-09-25OnlineRU-CENTER-RU
instrukciya-kraken.ru2026-09-25OnlineRU-CENTER-RU
ssilka-kraken-tor.ru2026-09-25OnlineRU-CENTER-RU
ssilka-kraken.ru2026-09-25OnlineRU-CENTER-RU
kraken-ssilka.ru2026-09-25OnlineRU-CENTER-RU
zerkalo-slon-kraken.ru2026-09-25OnlineRU-CENTER-RU
slon3-kraken-at.ru2026-09-25OnlineRU-CENTER-RU
ssilka-kraken-vhod.ru2026-09-25OnlineRU-CENTER-RU
slon-kraken.ru2026-09-24OnlineRU-CENTER-RU
vhod-kraken-ssilka.ru2026-09-24OnlineRU-CENTER-RU
instrukciya-kraken-vhod.ru2026-09-24OnlineRU-CENTER-RU
kraken-darknet-vhod.ru2026-09-24OnlineRU-CENTER-RU
krab4at-kraken.ru2026-09-24OnlineRU-CENTER-RU
slon-cc-at-kraken.ru2026-09-24OnlineRU-CENTER-RU
krakens-onion.ru2026-09-24OnlineRU-CENTER-RU
krmp-kraken-cc.ru2026-09-24OnlineRU-CENTER-RU
slon06-at.ru2026-09-24OnlineRU-CENTER-RU

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.