934kavbet[.]com

934kavbet.com is currently listed as offline but remains a flagged indicator of a crypto‑gambling phishing campaign. The domain was registered on 27 February 2026 through NiceNIC International Group Co., Limited and resolves to 172.67.138.151, an address owned by AS13335 Cloudflare, Inc. The hosting environment presents Cloudflare Browser Insights, Cloudflare services and HTTP/3 support, and the TLS certificate is issued by Let’s Encrypt (E8). An HTTP request returns status 403 and the only visible page title is “Attention Required! | Cloudflare”.

The site is blocked by PhishDestroy and appears on one external security blocklist. VirusTotal analysis shows that 2 of 93 scanning engines flagged the domain, providing limited but corroborating evidence of malicious intent. The scam classification is recorded as “Crypto Gambling”, indicating that the operator likely attempts to lure victims into fraudulent gambling services, possibly to harvest cryptocurrency credentials. Evidence is limited to infrastructure and blocklist signals; no detailed page content, credential‑stealing forms, or specific target brands have been observed.

Consequently, the precise phishing vector and victim profile remain uncertain. Defenders should treat the domain as hostile: add 172.67.138.151 to network‑level deny lists, enforce DNS sink‑holing for 934kavbet.com, and incorporate the domain into endpoint and email filtering rules. Continuous monitoring of Cloudflare‑hosted IP ranges for similar newly registered domains is advised, as the infrastructure can be reused for future campaigns.