813betkolik[.]com

Analysis of 813betkolik.com shows the domain was taken offline as of the report date, July 25, 2026. The domain was registered on February 27, 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335). DNS resolution points to IP address 188.114.97.3, which resolves to a United States location under Cloudflare’s network. Both authoritative nameservers are Cloudflare‑provided (ignacio.ns.cloudflare.com and serena.ns.cloudflare.com), and the site presented a simple HTTP response with the page title "Maintenance" and no TLS certificate, indicating an unsecured HTTP endpoint.

Threat intelligence indicates the site was used for a crypto‑gambling scam, a common vector for financial fraud. Security vendors have flagged the domain: 12 of 93 VirusTotal scanners raised alerts, and the domain appears on a single external blocklist. Additional defensive products have taken action: PhishDestroy lists the domain as blocked, while Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of malicious intent. No evidence of SSL/TLS, no known brand impersonation, and no further page content has been captured.

The lack of an active website limits current observable behavior, but the historical indicators suggest the domain was employed to lure victims into fraudulent gambling activities, likely leveraging cryptocurrency payments. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑activation or related subdomains, and flag any traffic to the associated IP address as suspicious. Threat hunters should also query threat‑intel feeds for any resurgence of the IP or Cloudflare‑hosted assets linked to similar scam campaigns.