vodka234[.]com

Analysis of the domain vodka234.com, observed on July 24, 2026, indicates that it was registered on March 12, 2026 through the REGRU-RU registrar. The site was hosted on IP address 45.10.243.99, which belongs to AS57724 DDOS‑GUARD LTD and is geolocated in Russia. The domain’s DNS configuration lists ns1.example.com, ns1.vodka234.com (repeated), and ns2.example.com, with the primary nameserver resolving to the same IP address. No SSL certificate was detected, meaning the site operated over plain HTTP.

The page title retrieved from the site reads “Водка казино онлайн — официальный сайт Vodka, моментальные выплаты и live‑игры”, suggesting a fake online casino offering instant payouts and live games. The presence of the DDoS‑Guard technology tag aligns with the hosting provider’s infrastructure. Security monitoring shows that the domain was blocked by PhishDestroy and appears on a single security blocklist. VirusTotal scanning recorded one positive detection out of 94 security vendors, confirming at least one vendor flagged the domain as malicious.

The current operational status is offline, which reduces immediate exposure but does not eliminate the risk of residual artifacts such as cached pages or URLs that may still be used in phishing campaigns. Defenders should continue to monitor for any resurgence of the domain, enforce blocklist rules in perimeter defenses, and consider adding the domain to internal threat intelligence feeds. Additional verification of the exact phishing content, such as the specific URL paths or credential‑capture mechanisms, remains unknown due to the site’s offline state, and further analysis should be pursued if the domain becomes active again.