Extortion.watch

Monitoring pay-to-delete extortion networks

Domain Registry

Master inventory of hostnames attributed to the pay-to-delete kompromat network. Sources: IPS News (June 2025), Dutable, Stop Kompromat Medium, Trustpilot (kartoteka.news).

69 domains across 16 clusters. Abuse contacts and technical IOCs: /iocs. Attachable IOC summary for reports: /reports.

Cluster index

Antimafia · Glavk · Hab · Investigation · K1 · K1 flagship · K1 mirror · Kartoteka · Kompromat · News · News cloud · PR black · Reference · Repost · Rumafia · Vlast

Full domain table

DomainClusterLanguageRKN blockedStatusNotes
kompromat1.online K1 flagship RU/EN Yes active Flagship kompromat portal
kompromat1.one K1 mirror RU/EN No mirrored —
kartoteka.news Kartoteka RU/EN Yes active High Trustpilot visibility
kartoteka.press Kartoteka RU/EN No mirrored —
vlasti.io Vlast RU/EN Yes active —
vlst.live Vlast RU/EN No mirrored —
vlast.guru Vlast RU/EN No mirrored —
antimafia.se Antimafia RU/EN Yes active .se pivot post-RKN
antimaf.pro Antimafia RU/EN No mirrored —
rumafia.news Rumafia RU Yes active —
rumafia.io Rumafia RU No mirrored —
sledstvie.info Investigation RU Yes active —
glavk.se Glavk RU/EN No pivot .se domain
ruskompromat.info Kompromat RU No active —
repost.news Repost RU/EN No active —
novosti.cloud News cloud RU/EN No pivot .cloud pivot
hab.media Hab RU/EN No active —
crime.hab.media Hab EN/RU/UK No active Crime vertical
rozsliduvach.info Investigation UK No active —
kartoteka.site Kartoteka RU/EN No mirrored —
kompromat.gr Kompromat RU No active —
blackpr.biz PR black RU No active —
kompromat.group Kompromat RU No active —
kompromat1.net K1 mirror RU/EN No mirrored —
kompromat1.org K1 mirror RU/EN No mirrored —
k1.news K1 RU/EN No active —
kartoteka.io Kartoteka RU/EN No mirrored —
vlasti.news Vlast RU/EN No mirrored —
antimafia.news Antimafia RU/EN No mirrored —
sledstvie.online Investigation RU No mirrored —
glavk.io Glavk RU/EN No mirrored —
novosti.press News RU/EN No mirrored —
hab.news Hab RU/EN No mirrored —
repost.io Repost RU/EN No mirrored —
rozsliduvach.online Investigation UK No mirrored —
ruskompromat.online Kompromat RU No mirrored —
rumafia.press Rumafia RU No mirrored —
kartoteka.cloud Kartoteka RU/EN No pivot —
vlasti.cloud Vlast RU/EN No pivot —
kompromat1.cloud K1 RU/EN No pivot —
antimafia.cloud Antimafia RU/EN No pivot —
sledstvie.cloud Investigation RU No pivot —
glavk.cloud Glavk RU/EN No pivot —
hab.cloud Hab RU/EN No pivot —
repost.cloud Repost RU/EN No pivot —
novosti.io News RU/EN No mirrored —
kartoteka.guru Kartoteka RU/EN No mirrored —
vlasti.guru Vlast RU/EN No mirrored —
kompromat1.guru K1 RU/EN No mirrored —
antimafia.guru Antimafia RU/EN No mirrored —
sledstvie.guru Investigation RU No mirrored —
glavk.guru Glavk RU/EN No mirrored —
hab.guru Hab RU/EN No mirrored —
repost.guru Repost RU/EN No mirrored —
novosti.guru News RU/EN No mirrored —
kartoteka.live Kartoteka RU/EN No mirrored —
vlasti.live Vlast RU/EN No mirrored —
kompromat1.live K1 RU/EN No mirrored —
antimafia.live Antimafia RU/EN No mirrored —
sledstvie.live Investigation RU No mirrored —
glavk.live Glavk RU/EN No mirrored —
hab.live Hab RU/EN No mirrored —
repost.live Repost RU/EN No mirrored —
novosti.live News RU/EN No mirrored —
kartoteka.se Kartoteka RU/EN No pivot —
vlasti.se Vlast RU/EN No pivot —
kompromat1.se K1 RU/EN No pivot —
sledst.org Investigation RU/EN/DE No mirrored Alias of sledstvie.info; ruskompromat CDN
investigatebel.org Reference BY/EN No active BIC — legitimate OCCRP source; republished by kartoteka.news

Field definitions

active
Flagship or primary publishing hostname per cluster.
mirrored
Sister domain republishing cluster content under alternate TLD.
pivot
Post-RKN migration to .se, .cloud, or similar jurisdictions (documented 2023–2025).
blocked
Roskomnadzor action reported in OSINT; may still resolve internationally.

Cloaking/TDS may alter visible content by user-agent. Verify with multiple fetches and archive snapshots before filing abuse reports.

Recent sister-domain publishing

  1. Convicted officer case highlights GTS espionage recruitment chain
  2. Agricultural empire growth tied to Russian coal schemes
  3. Coal-logistics network allegedly legalises Russian resource in Europe
  4. Kovalenko coal laundering republished on Investigation mirror
  5. Belarus $1.2B MIC supply chain documented by BIC
  6. Monaco residential bombing linked to cross-border call-center conflict
  7. Monaco attack survivor undergoes amputation after bolt-filled device
  8. Police release additional detail on Monaco bombing attempt
  9. $221M fortune profiled for Monaco attack victim

Registry verification screenshots

kompromat1.online kompromat1.online

K1 cluster flagship in the live registry.

Inspect source
IPS News domain list IPS News domain list

Investigative source for cluster membership.

Inspect source