kentkcs299[.]space

The domain kentkcs299.space was observed as an impersonation of the Camelot brand, presenting a page titled "Kent Casino" and employing a crypto gambling lure. Registration data indicates the domain was created on October 14, 2025 through the Atak Domain registrar. DNS resolution points to the IP address 104.21.63.34, which is owned by Cloudflare, Inc. (AS13335) and located in the United States. The domain is served via Cloudflare's eugene.ns.cloudflare.com and faye.ns.cloudflare.com name servers, but no SSL certificate was detected during the scan, leaving the HTTPS configuration undefined.

Threat intelligence shows the site appeared on a single security blocklist (PhishDestroy) and received two positive detections out of ninety‑five vendors on VirusTotal, reflecting limited but notable consensus among scanners. The Gridinsoft trust score is 0 out of 100, indicating a lack of trustworthiness. The site has been taken offline at the time of reporting, and no active HTTP response was recorded. Evidence points to the use of a known "Gambler Scam" phishing kit, aligning with the crypto gambling classification.

Uncertainty remains regarding the current hosting infrastructure, as the offline status prevents verification of any content changes or additional mitigation actions. Defenders should continue to block the domain and its associated IP address at network perimeters, monitor for re‑registration or similar domain patterns, and update detection signatures to include the observed page title and kit fingerprint. Integration of the registrar and DNS information into threat‑intel feeds will aid in early identification of future campaigns that reuse the Atak Domain registrar or Cloudflare name servers for comparable impersonation attempts.