kentcasino195[.]com

Analysis of kentcasino195.com shows a recently registered domain created on September 2, 2025 and currently taken offline. The domain resolves to IP address 172.67.144.253, which belongs to Cloudflare (AS13335) and is geolocated in the United States. Nameserver records point to fish.ns.cloudflare.com and hasslo.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No SSL certificate is presented, meaning the site does not provide encrypted HTTPS connections. The page title returned from the host is "Kent Casino," and the site is associated with a Gambler Scam phishing kit that targets crypto gambling users.

The domain explicitly impersonates the brand "ankr," indicating a brand‑impersonation threat. VirusTotal reports indicate the domain was scanned by 95 security vendors, none of which flagged it as malicious, but the absence of detections does not constitute proof of safety. The domain is listed on one security blocklist and has been blocked by PhishDestroy, reflecting recognition by at least one anti‑phishing service. A Gridinsoft trust score of 0 out of 100 further suggests a high likelihood of malicious intent.

Registration was performed through Atak Domain, a registrar that has been used for malicious registrations in the past. While the site is offline, the infrastructure—Cloudflare hosting, lack of TLS, and the use of a known gambling‑themed phishing kit—matches patterns observed in crypto‑gambling scams. Defenders should continue to monitor the IP address 172.67.144.253 for any re‑use, enforce blocklist updates, and consider adding the domain to internal deny lists. Additional investigation of any residual DNS records or related subdomains is recommended to ensure the full threat vector is mitigated.