autokerber[.]ru

The domain autokerber.ru was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 186.2.175.37, which belongs to AS59692 IQWeb FZ-LLC and is geolocated to Belarus. The site presented a page titled "Научись рисовать с нуля: школа КРАКЕН принимает всех," a title unrelated to the advertised brand, indicating the content has not been publicly verified beyond this metadata. Threat intelligence classifies the activity as a crypto‑related scam that impersonates Binance, aligning with the supplied brand target.

Two of ninety‑five VirusTotal scanners flagged the domain, confirming a minority of security vendors detected malicious characteristics. The SSL certificate is identified as R13, but no further details on its issuance or validity are provided. The domain appears on a single security blocklist and is blocked by the PhishDestroy filtering service, suggesting some defensive products have already taken action.

While the offline status limits immediate exposure, defenders should maintain the block on 186.2.175.37, monitor for re‑hosting attempts, and add autokerber.ru to internal allow‑list exclusions for phishing‑related traffic. Continuous observation of VirusTotal and other reputation feeds is recommended to capture any future detections or changes in classification. The combination of brand impersonation, crypto scam labeling, and limited vendor detections warrants an elevated risk rating and proactive mitigation.