67evav55[.]com

The domain 67evav55.com was registered on February 21, 2026 through URL Solutions, Inc. and is currently hosted on a Cloudflare edge node (IP 104.26.0.231, AS13335, United States). DNS resolution uses the Cloudflare‑provided authoritative nameservers ros​alyn.ns.cloudflare.com and thaddeus.ns.cloudflare.com. An HTTP request to the host returns a 200 OK status, and the TLS handshake presents a certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid SSL chain. The site advertises itself with the page title “Sportsbook and Crypto Casino Vave [BTC, ETH, USDT]”, which aligns with the classified scam type of crypto gambling. Technical fingerprinting shows the presence of HSTS and Cloudflare security headers, confirming that the infrastructure is intentionally leveraging Cloudflare’s protection services.

Threat intelligence indicates that the site employs the publicly documented “Gambler Scam” phishing kit, a template commonly used to lure victims into depositing cryptocurrency under the pretense of gambling or casino rewards. The domain appears on a single security blocklist, PhishDestroy, and VirusTotal reports a single positive detection out of 93 scanning engines, reinforcing the suspicion that the site is actively used for malicious purposes. No additional blocklist appearances or safe‑browsing alerts are recorded, leaving the broader ecosystem exposure uncertain. Defenders should treat 67evav55.com as a high‑risk indicator.

Network sensors and URL filtering solutions ought to block outbound connections to the IP address 104.26.0.231 and to the domain itself. Email gateways should flag any messages containing links to this domain, especially those referencing cryptocurrency transactions or gambling offers. Continuous monitoring of Cloudflare‑associated IP ranges for similar activity is recommended, given the ease of re‑using the same edge infrastructure for new malicious domains.