kentbiglevs[.]space

Analysis indicates that the domain kentbiglevs.space was registered on 13 October 2025 through Atak Domain and delegated to the Cloudflare authoritative nameservers eugene.ns.cloudflare.com and faye.ns.cloudflare.com. DNS resolution points to the IPv4 address 104.21.9.83, which is announced by AS13335 Cloudflare, Inc. and resolves to a location in the United States. The site did not present an SSL/TLS certificate, confirming that it was reachable only over plain HTTP. When the site was live, the HTTP response contained the page title “Kent Casino”.

Threat‑intel attribution links the infrastructure to the publicly‑available Gambler Scam phishing kit, a template frequently employed for crypto‑gambling fraud. The domain is explicitly marked as impersonating the Camelot brand, and the declared scam type is Crypto Gambling. VirusTotal scanning recorded a single positive detection out of ninety‑five engines, and Gridinsoft assigned a trust score of 0 / 100, both reinforcing a malicious classification. The domain appears on one external blocklist and has been taken offline by the PhishDestroy mitigation service.

No additional signals such as Safe Browsing or Open Threat Exchange entries are present in the current dataset. Given the elevated risk associated with brand impersonation and the use of a high‑reputation CDN to conceal the attacker’s origin, defenders should proactively block the domain name and its resolving IP address, extend monitoring to the broader Cloudflare address space for similar patterns, and enforce strict verification of any unsolicited communications claiming to originate from Camelot. Although the site is currently offline, continued surveillance is recommended to detect potential re‑deployment on new hosts or variations of the same phishing kit.