Takedown Operations

Total Requests

Drafts

awaiting send

In Flight

sent / acked

Actioned

Success Rate

of sent requests

Avg Time to Action

—

Takedown Pipeline

Draft

→

Sent

→

Acknowledged

→

Actioned

→

Closed

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Abuse Contact	Requests	Actioned	Rate
No contact data yet.

Takedown Toolchain

Bulk Takedown Link Analysis ASN Analysis Infra Lookup DNS Audit Legal Escalation Cases WHOIS cache: 482 records

Abuse Contact Discovery

🔄 Pivot:🏢 Js Laboratoriia 🌎 RU

WHOIS Intelligence — `https://securelist.com/a-slice-of-2017-sofacy-activity/83930/`

Registrar	Regional Network Information Center, JSC dba RU-CENTER
Abuse Email	`tld-abuse@nic.ru`
Organization	Js Laboratoriia
Country	RU
Name Servers	`ns1.yandexcloud.net, ns2.yandexcloud.net`

Draft Requests by Target

REGISTRAR Regional Network Information Center, JSC dba RU-CENTER

To: tld-abuse@nic.ru
Date: 2026-08-08
Subject: Abuse Report / Takedown Request: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your domain registration:

  Indicator: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/
  Organization: JS "LABORATORIIA KASPERSKOGO"
  Registrar: Regional Network Information Center, JSC dba RU-CENTER
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-08

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

HOSTING JS "LABORATORIIA KASPERSKOGO"

To: tld-abuse@nic.ru
Date: 2026-08-08
Subject: Abuse Report / Takedown Request: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your hosting service:

  Indicator: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/
  Organization: JS "LABORATORIIA KASPERSKOGO"
  Registrar: Regional Network Information Center, JSC dba RU-CENTER
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-08

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NETWORK (network operator)

To: tld-abuse@nic.ru
Date: 2026-08-08
Subject: Abuse Report / Takedown Request: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your network / ASN:

  Indicator: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/
  Organization: JS "LABORATORIIA KASPERSKOGO"
  Registrar: Regional Network Information Center, JSC dba RU-CENTER
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-08

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

NAMESERVER ns1.yandexcloud.net, ns2.yandexcloud.net

To: tld-abuse@nic.ru
Date: 2026-08-08
Subject: Abuse Report / Takedown Request: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/

To whom it may concern,

We are reporting malicious activity associated with the following indicator, which is using your DNS / name servers:

  Indicator: https://securelist.com/a-slice-of-2017-sofacy-activity/83930/
  Organization: JS "LABORATORIIA KASPERSKOGO"
  Registrar: Regional Network Information Center, JSC dba RU-CENTER
  Observed: threat intelligence correlation across multiple sources
  Report date: 2026-08-08

This indicator has been identified as associated with malicious activity (malware, phishing, C2, or fraud). Please investigate and take appropriate action per your acceptable use policy.

Please provide a reference/ticket number for tracking.

Regards,
Threat Intelligence Platform
Threat Intelligence & Abuse Operations

Request Tracker & Workflow

Indicator	Target	Contact	Status / Advance	Created
No requests yet. Look up a domain above or use Bulk Takedown.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

💡 Recommendations

⚙ Automation

Auto-draft top providers

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Bulk Takedown Link Analysis Legal

Total Requests

Drafts

In Flight

Actioned

Success Rate

Avg Time to Action

Takedown Pipeline

Requests Over Time (30d)

By Target Type

Abuse Contact Performance

Takedown Toolchain

Abuse Contact Discovery

WHOIS Intelligence — https://securelist.com/a-slice-of-2017-sofacy-activity/83930/

Draft Requests by Target

Request Tracker & Workflow

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools

WHOIS Intelligence — `https://securelist.com/a-slice-of-2017-sofacy-activity/83930/`