It definitely is. In Germany, somebody was selling fraudulent public transit e-tickets on an .su domain for a while last year.

Not sure who the “.su” was supposed to appeal to, but they were slightly cheaper than officially licensed ones, which probably helped more than the TLD :)