For several month we have been facing continuous phishing attacks. The attackers are using cloudflare + Russian registrars + Russian hosting.

Can you guess who never cut the service (but other two react very quickly)?