kentvs729casino[.]com

The domain kentvs729casino.com was observed as an active impersonation site targeting the Camelot brand and was taken offline as of the report date. It was registered on August 29, 2025 through Atak Domain Bilgi Teknolojileri A.S., a registrar known for low‑cost bulk registrations. DNS resolution points to 212.11.64.170, an address located in Switzerland and allocated to ASN 42624 (Global-Data System IT Corporation). The site presents an SSL certificate identified as R12, which offers no indication of extended validation and is typical of disposable phishing kits. File analysis links the site to the publicly available 'Gambler Scam' phishing kit, which is commonly used to lure victims into crypto‑gambling fraud.

The HTTP response includes the page title 'Kent Casino', which does not match the targeted brand, suggesting the operators attempted to reuse a generic gambling landing page. Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal scans returned 2 positive detections out of 95 security vendors, indicating that at least two independent engines flagged the domain as malicious. The domain also appears on a single known blocklist and is actively blocked by PhishDestroy.

No additional public threat‑intel feeds such as OTX or Google Safe Browsing are currently reporting the domain, and no detailed content analysis beyond the page title has been released, leaving the exact phishing flow and credential collection mechanisms undocumented. Defenders should add the IP address 212.11.64.170 to network block lists, enforce DNS filtering for kentvs729casino.com, and monitor for any future re‑use of the same hosting infrastructure. Continuous re‑scanning on multi‑engine platforms is advised to capture any emerging detections.