Yes, it's apparently hosted behind some fastflux setup. That's neither new nor special, nor is it particularly expensive. Such setups are offered on various forums starting from a few hundred dollars a month.

> Their nodes both in Russia and spread all around the world would not be permitted by Russia to mirror random sites without authorization to do so.

This is simply not true. You can absolutely run a website like this in Russia without any authorization. Who would you even ask? The whole idea is bizarre.

You can take what I said out of context. Apparently OSINT are on it, not my problem.