Extortion.watch

Monitoring pay-to-delete extortion networks

Domain Registry

Master inventory of hostnames attributed to the pay-to-delete kompromat network. Sources: IPS News (June 2025), Dutable, Stop Kompromat Medium, Trustpilot (kartoteka.news).

66 domains across 15 clusters. Abuse contacts and technical IOCs: /iocs. Attachable IOC summary for reports: /reports.

Cluster index

Antimafia · Glavk · Hab · Investigation · K1 · K1 flagship · K1 mirror · Kartoteka · Kompromat · News · News cloud · PR black · Repost · Rumafia · Vlast

Full domain table

DomainClusterLanguageRKN blockedStatusNotes
kompromat1.online K1 flagship RU/EN Yes active Flagship kompromat portal
kompromat1.one K1 mirror RU/EN No mirrored
kartoteka.news Kartoteka RU/EN Yes active High Trustpilot visibility
kartoteka.press Kartoteka RU/EN No mirrored
vlasti.io Vlast RU/EN Yes active
vlst.live Vlast RU/EN No mirrored
vlast.guru Vlast RU/EN No mirrored
antimafia.se Antimafia RU/EN Yes active .se pivot post-RKN
antimaf.pro Antimafia RU/EN No mirrored
rumafia.news Rumafia RU Yes active
rumafia.io Rumafia RU No mirrored
sledstvie.info Investigation RU Yes active
glavk.se Glavk RU/EN No pivot .se domain
ruskompromat.info Kompromat RU No active
repost.news Repost RU/EN No active
novosti.cloud News cloud RU/EN No pivot .cloud pivot
hab.media Hab RU/EN No active
rozsliduvach.info Investigation UK No active
kartoteka.site Kartoteka RU/EN No mirrored
kompromat.gr Kompromat RU No active
blackpr.biz PR black RU No active
kompromat.group Kompromat RU No active
kompromat1.net K1 mirror RU/EN No mirrored
kompromat1.org K1 mirror RU/EN No mirrored
k1.news K1 RU/EN No active
kartoteka.io Kartoteka RU/EN No mirrored
vlasti.news Vlast RU/EN No mirrored
antimafia.news Antimafia RU/EN No mirrored
sledstvie.online Investigation RU No mirrored
glavk.io Glavk RU/EN No mirrored
novosti.press News RU/EN No mirrored
hab.news Hab RU/EN No mirrored
repost.io Repost RU/EN No mirrored
rozsliduvach.online Investigation UK No mirrored
ruskompromat.online Kompromat RU No mirrored
rumafia.press Rumafia RU No mirrored
kartoteka.cloud Kartoteka RU/EN No pivot
vlasti.cloud Vlast RU/EN No pivot
kompromat1.cloud K1 RU/EN No pivot
antimafia.cloud Antimafia RU/EN No pivot
sledstvie.cloud Investigation RU No pivot
glavk.cloud Glavk RU/EN No pivot
hab.cloud Hab RU/EN No pivot
repost.cloud Repost RU/EN No pivot
novosti.io News RU/EN No mirrored
kartoteka.guru Kartoteka RU/EN No mirrored
vlasti.guru Vlast RU/EN No mirrored
kompromat1.guru K1 RU/EN No mirrored
antimafia.guru Antimafia RU/EN No mirrored
sledstvie.guru Investigation RU No mirrored
glavk.guru Glavk RU/EN No mirrored
hab.guru Hab RU/EN No mirrored
repost.guru Repost RU/EN No mirrored
novosti.guru News RU/EN No mirrored
kartoteka.live Kartoteka RU/EN No mirrored
vlasti.live Vlast RU/EN No mirrored
kompromat1.live K1 RU/EN No mirrored
antimafia.live Antimafia RU/EN No mirrored
sledstvie.live Investigation RU No mirrored
glavk.live Glavk RU/EN No mirrored
hab.live Hab RU/EN No mirrored
repost.live Repost RU/EN No mirrored
novosti.live News RU/EN No mirrored
kartoteka.se Kartoteka RU/EN No pivot
vlasti.se Vlast RU/EN No pivot
kompromat1.se K1 RU/EN No pivot

Field definitions

active
Flagship or primary publishing hostname per cluster.
mirrored
Sister domain republishing cluster content under alternate TLD.
pivot
Post-RKN migration to .se, .cloud, or similar jurisdictions (documented 2023–2025).
blocked
Roskomnadzor action reported in OSINT; may still resolve internationally.

Cloaking/TDS may alter visible content by user-agent. Verify with multiple fetches and archive snapshots before filing abuse reports.

Registry verification screenshots

Flagship publisher pages and OSINT mapping sources used to assign cluster membership in the table above.

kompromat1.online kompromat1.online

K1 cluster flagship in the live registry.

Inspect source
IPS News domain list IPS News domain list

Investigative source for cluster membership.

Inspect source