From January to September 2026, the number of reports regarding malicious domains in the .ru and .рф zones increased by 32 percent, reaching 49,500. The Coordination Center for TLDs reported these figures following the Domain Patrol project.
Phishing remains the primary threat, accounting for 29,605 reports, a 17 percent increase compared to the previous year. This category represents 59.8 percent of all complaints. Meanwhile, reports concerning malware distribution nearly doubled to 13,542, making up 27.3 percent of the total.
Authorities blocked 48,564 domains, which is 98 percent of all identified malicious sites and a 32.6 percent increase year-over-year. The average response time from report to blocking was 5.8 hours. Total reports for the first nine months reached 80 percent of the 62,168 complaints recorded in all of 2025.
According to data analyst Evgeny Pankov, attackers are leveraging AI to automate domain registration, create phishing sites rapidly, and scale cyberattacks. To combat this, Russia began a phased implementation of domain administrator authorization via the ESIA system on September 1, 2026.