kazorabet[.]com

This domain, kazorabet.com, was observed being used in a brand‑impersonation campaign that promotes a cryptocurrency‑related scam. The site was registered on 21 February 2026 via Hello Internet Corp and is hosted behind Cloudflare’s network (AS13335) at the IPv4 address 188.114.96.3, which resolves to a United States location. The TLS certificate presented is identified as “WE1”, indicating a valid HTTPS service was in place before the site was taken offline. The page title returned by the server is “Kazorabet”, matching the domain name and providing no additional brand cues.

Security‑vendor aggregators have raised alerts: VirusTotal recorded four positive detections out of ninety‑three scanners, and AlienVault OTX references the domain in one threat‑intelligence pulse. The domain’s Gridinsoft trust score is 0 out of 100, reflecting an extremely low reputation. It is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy service. The campaign is classified as a “Crypto Scam” and the brand target is listed as “across”, indicating a broad impersonation approach rather than a single trademark.

No public evidence exists regarding the content of the landing page, login forms, or any credential‑harvesting mechanisms, and the site’s HTTP response code after the takedown is not available. Defenders should continue to block the IP address 188.114.96.3 and any sub‑domains associated with the Cloudflare ASN, enforce DNS‑based deny lists that include kazorabet.com, and monitor for future registrations that reuse the same registrar or similar naming patterns. Because the site is currently offline, any ongoing victim interaction is unlikely, but threat‑intel teams should retain the indicator set for correlation with phishing‑email campaigns that reference “Kazorabet” or related crypto‑scam terminology.