Phishing domains under .su

.su accounts for 93 of the 224,866 domains in the PhishDestroy database (0.04%), with 3 new ones in the last 30 days. The most impersonated brand under .su is Telegram. 48 were online at the last check and 14 have a confirmed takedown.

93
Reported .su domains
0.04%
Share of PhishDestroy reports
3
Last 30 days
14
Confirmed takedowns

Detections per month

2025-11: 12025-12: 22026-01: 102026-02: 92026-03: 152026-04: 82026-05: 52026-06: 52026-07: 22026-08: 202026-09: 32026-10: 2
.su phishing domains detected per month: 82 from 2025-11 to 2026-10; peak 20.

Brands and registrars

Registrars

  1. RUCENTER-SU18
  2. REGRU-SU16
  3. R01-SU10
  4. REGRU-RU7
  5. REGTIME-SU5
  6. BEGET-SU5
  7. DOMENUS-SU3
  8. N/A2

Latest .su phishing domains

The 30 most recently detected .su domains
DomainFirst detectedStatus at last checkRegistrar
exchange-hub.su2026-10-11OnlineREGTIME-SU
elitgaz.su2026-10-10Online—
krakendarknet.su2026-09-29OnlineREGRU-SU
picassoapp.su2026-09-19OnlineARDIS-SU
get-software.su2026-09-14OfflineREGRU-SU
slon11.su2026-08-31OfflineREGRU-SU
getreport.su2026-08-31OnlineREGRU-SU
crd-market.su2026-08-25OnlineRUCENTER-SU
yermokov.su2026-08-16OnlineREGRU-SU
xzx.su2026-08-16OnlineREGRU-SU
stressecat.su2026-08-13OfflineREGRU-SU
ipstress.su2026-08-11OnlineREGRU-SU
vacstresser.su2026-08-11OnlineR01-SU
deepstresser.su2026-08-11OnlineBEGET-SU
darkload.su2026-08-10OnlineRUCENTER-SU
2crd.su2026-08-10OnlineREGRU-SU
pull.su2026-08-09OnlineRUCENTER-SU
crdclub.su2026-08-05OnlineREGRU-SU
swaponix.su2026-08-04OfflineR01-SU
wow.androiddebugbridge.su2026-08-02Offline—
node.androiddebugbridge.su2026-08-02Offline—
jerusalem.androiddebugbridge.su2026-08-02Offline—
telaviv.androiddebugbridge.su2026-08-02Offline—
dysphoria.androiddebugbridge.su2026-08-02Offline—
kieron.androiddebugbridge.su2026-08-02Offline—
cryptofix.su2026-07-28OnlineREGRU-SU
a0e6.foodle.su2026-07-27OnlineRUCENTER-SU
bendavo.su2026-06-15Online—
boustrn.su2026-06-15Online—
vicareu.su2026-06-15Online—

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .su registrations; first .su report 2025-08-08.