potok-cash[.]tech

Analysis of potok-cash.tech shows a domain created on 21 February 2026 and registered through REG.RU. The domain resolves to the IPv6 address 2a00:f940:2:2:1:1:0:273, which belongs to AS197695, a Russian network operated by the registrar. Authoritative name servers are ns1.hosting.reg.ru and ns2.hosting.reg.ru, and the MX records point to mx1.hosting.reg.ru (priority 10) and mx2.hosting.reg.ru (priority 20). An HTTP request returns status 200 and the page title "Проект ПотокCash – Главная страница". Detected server software includes Nginx, while client‑side libraries include jQuery and Slick. The site presents a valid SSL certificate issued by a recognized public certificate authority. Threat intelligence indicates the domain is listed on two security blocklists and has been flagged by PhishDestroy and ScamSniffer as a phishing resource. VirusTotal scans show four of ninety‑three security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the high‑risk assessment. The current status is active. While the exact content of the page has not been examined, the combination of registration details, hosting infrastructure, blocklist presence, and vendor detections provides sufficient evidence to classify the domain as a high‑risk phishing site. Defenders should block the domain at perimeter controls, add it to internal deny lists, and monitor related traffic for potential credential‑harvesting activity.