kntvsg[.]online

Analysis of kntvsg.online indicates that the site was purposefully created to leverage the Camelot brand for a crypto gambling operation. The domain was registered on October 15, 2025 through NameSilo, LLC and is hosted behind Cloudflare’s network (AS13335) with the IP address 104.21.33.164, located in the United States. DNS resolution is managed by eugene.ns.cloudflare.com and faye.ns.cloudflare.com, and the site does not present an SSL certificate, leaving traffic unencrypted. The HTTP response returned a page title of "Kent Casino," which aligns with the declared scam type of crypto gambling and suggests the operators are attempting to attract users seeking online casino services.

Reputation data shows that three of ninety‑five VirusTotal scanners flagged the domain, and a Gridinsoft trust score of zero underscores its malicious intent. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy, confirming that defensive feeds have identified it as a threat. Current status is offline, but the infrastructure—Cloudflare edge nodes and the lack of TLS—remains reusable for future campaigns.

Defenders should continue to monitor the associated IP address and Cloudflare nameservers for re‑use, enforce blocklist updates in web filters, and consider adding the domain to internal deny lists. Because the site is not presently serving content, threat hunters should focus on historical traffic logs for any connections to 104.21.33.164 and investigate any credential or cryptocurrency wallet disclosures that may have originated from the "Kent Casino" landing page. The combination of brand impersonation, crypto gambling lure, and low trust score makes kntvsg.online a high‑confidence indicator of targeted financial fraud aimed at Camelot users.