cyber-tank[.]ru

Analysis shows that cyber-tank.ru is an active high‑risk domain created on 21 February 2026 and hosted at IP 186.2.175.37, which belongs to AS59692 IQWeb FZ‑LLC in Belarus. The domain uses Cloudflare nameservers (marjory.ns.cloudflare.com, terry.ns.cloudflare.com) and presents a valid Let's Encrypt R13 certificate, indicating encrypted HTTPS support. HTTP requests return a 403 status, preventing direct content retrieval, but the page title "Форум Kraken WOT игроки" and the recorded scam type "Crypto Scam" suggest a deliberate attempt to impersonate the Kraken brand and lure cryptocurrency users. Technical fingerprints include Yandex.Metrika and DDoS‑Guard, both typical of sites seeking analytics and protection while operating maliciously. The domain is listed on three security blocklists, has a Gridinsoft trust score of 0/100, and three of ninety‑three VirusTotal scanners have flagged it as malicious. Blocklists such as PhishDestroy, MetaMask, and SEAL already classify it as hostile. Current uncertainty lies in the exact page content and user‑interaction mechanisms, which cannot be confirmed due to the 403 response. Defenders should immediately block cyber-tank.ru at network perimeter and DNS layers, add it to endpoint allow‑lists, and monitor for any related C2 traffic or credential submissions targeting Kraken users. Continuous observation of the associated IP and ASN is advised, as well as periodic re‑scans to detect any changes in payload or hosting infrastructure.