nemocas[.]com

This domain is flagged as a generic phishing threat under active investigation, specifically designed to impersonate Kent Casino for credential harvesting or financial fraud. Analysis indicates the infrastructure is tailored to deceive users into submitting sensitive information, such as login credentials or payment details, under the guise of a legitimate online casino platform. Infrastructure analysis reveals the domain nemocas.com was registered on July 15, 2025, through Web Commerce Communications Limited. It resolves to the IP address 212.11.64.170 and is currently offline. Despite zero detections out of 95 engines on VirusTotal, it appears on one security blocklist. The page title explicitly displays 'Kent Casino,' reinforcing its fraudulent intent. The unique seed identifier for this threat is 53421f. Mitigation steps include blocking the domain and its associated IP (212.11.64.170) at the network perimeter. Organizations should deploy endpoint protection rules to prevent access to newly registered domains (NRDs) created within the last 30 days, particularly those associated with high-risk registrars or hosting providers. Users should be educated to verify domain authenticity before entering credentials, especially for financial or gaming platforms. Security teams are advised to monitor for related indicators, such as the registrar (Web Commerce Communications Limited) or IP range (212.11.64.0/24), to preemptively identify similar threats.