kardibed[.]com

The domain kardibed.com was registered on December 13, 2025 through MAT BAO CORPORATION and currently resolves to the Cloudflare‑owned address 172.67.189.77, which is located in the United States under ASN 13335. The site was presented with the page title “Kardibed: Most Popular Online Crypto Casino Based on Blockchain,” indicating a crypto‑casino theme that aligns with the classified scam type of a Crypto Scam. No TLS certificate was observed, meaning the site was served over plain HTTP, a typical characteristic of low‑effort phishing infrastructure. Reputation scoring from Gridinsoft assigned a trust score of 1 out of 100, reflecting extreme suspicion.

VirusTotal analysis recorded 16 detections out of 93 scanned engines, confirming that multiple security vendors flagged the domain as malicious. The domain also appears on one public security blocklist and has been actively blocked by the PhishDestroy service. The operational kit has been identified as a “Gambler Scam” kit, which commonly exploits gambling‑related lures to harvest cryptocurrency credentials.

As of the report date, the site has been taken offline, yet the DNS entry still points to the Cloudflare IP, allowing the possibility of rapid re‑deployment on the same address. Defenders should therefore enforce blocking of the domain and its resolving IP at perimeter and endpoint layers, monitor for any re‑appearance of the hostname or similar hostnames registered by the same registrar, and incorporate the observed indicators—page title, lack of SSL, low trust score, and the specific detection count—into threat‑intel feeds. Continuous observation of the Cloudflare IP for new domains exhibiting comparable characteristics is also advised, as the underlying hosting provider may be reused for future phishing campaigns.