kenebet[.]com

kenebet.com was observed on 2026-07-12 hosting a gambling-related phishing operation. The domain is listed as active with a risk level of under_investigation. The site presents the page title "kenebet.com" and is currently being blocked by PhishDestroy and appears on a single security blocklist. The domain was registered on 2026-02-21 through Gname.com Pte. Ltd. and uses the authoritative name servers ns1.eftydns.com and ns2.eftydns.com. DNS resolution returns the IPv4 address 15.197.130.221, which belongs to the Amazon.com, Inc. network (AS16509) located in the United States. The web service presents a Let’s Encrypt R12 certificate and responds with an HTTP 302 redirect, indicating the presence of a redirection layer. Gridinsoft assigns a trust score of 4 out of 100, reflecting a highly suspicious reputation. The classification as a gambling scam aligns with the provided intelligence, although the underlying content has not been publicly analysed. No detections are reported by VirusTotal (0/95), and the lack of additional blocklist listings suggests limited exposure at the time of writing. However, the low trust score, use of a free TLS certificate, and rapid creation date raise concerns about a short-lived infrastructure designed to evade attribution. Defenders should add 15.197.130.221 and the domain kenebet.com to outbound filtering rules and consider sinkholing the address space to interrupt any credential-harvesting traffic. Continuous monitoring of DNS queries for the associated nameservers and periodic re-scanning of the URL are recommended to detect possible content changes. Collaboration with the hosting provider may expedite takedown, given the Amazon AWS ownership.