kav-bettek[.]vip

Analysis of the domain kav-bettek.vip indicates that it was registered on 21 February 2026 through NiceNIC International Group Co., Limited and immediately pointed to the Cloudflare network (nameservers dan.ns.cloudflare.com, kim.ns.cloudflare.com). DNS resolution returns the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The site presented an SSL certificate issued by Google Trust Services under the WE1 label, confirming that TLS termination was performed by Cloudflare. HTTP requests receive a 523 status code, indicating that the origin server is unreachable, and the domain is currently listed as offline.

The page title retrieved from the site reads “Kavbet – Kavbet Giriş Rehberi | Hızlı Erişim ve Akıcı Oyun Deneyimi”, suggesting that the operator attempted to masquerade as the Kavbet gambling platform. The associated scam type is recorded as “Crypto Gambling”, aligning with the gambling‑oriented phrasing in the title. Reputation data show a Gridinsoft trust score of 0 / 100 and detection by two of ninety‑five VirusTotal scanners, confirming malicious classification by a minority of AV engines. The domain appears on one external blocklist and is actively blocked by PhishDestroy, reinforcing its status as a threat vector.

Detected technologies include Cloudflare Browser Insights, Cloudflare, and HTTP/3, all typical of Cloudflare‑protected infrastructure. While the site’s content has not been captured, the combination of low trust scores, partial VirusTotal detections, and explicit gambling‑related branding points to a phishing or credential‑harvesting campaign targeting users of the legitimate Kavbet service. Defenders should add kav-bettek.vip to blocklists, monitor DNS queries for the associated Cloudflare IP range, and enforce URL filtering to prevent user access.