rash787kent[.]com

Analysis of rash787kent.com indicates that the domain is being used for a brand‑impersonation campaign targeting the Camelot brand with a crypto gambling narrative. The site was registered on September 18, 2025 and is hosted on a Cloudflare edge node (IP 104.21.55.245) that belongs to AS13335, a Cloudflare network located in the United States. Registration was performed through Atak Domain, and the authoritative nameservers are fish.ns.cloudflare.com and hasslo.ns.cloudflare.com. No TLS certificate is presented, meaning the site operates without HTTPS protection. The page title observed during a brief fetch returned "Kent Casino," which aligns with the known scam type of crypto gambling and matches the Gambler Scam phishing kit identified in the intelligence set.

The domain’s trust metrics are uniformly negative: Gridinsoft assigns a score of 0 / 100, and the domain appears on a single security blocklist. It has been flagged by PhishDestroy and is currently listed as offline, with the status noted as "taken offline" as of the report date. VirusTotal records show that the domain was scanned by 95 AV engines, and at the time of scanning no detections were reported; this absence of detections should not be interpreted as a safety indication. The infrastructure suggests a typical abuse of Cloudflare’s CDN to mask the true origin of the malicious content while leveraging a reputable brand name to entice victims into a cryptocurrency gambling scheme.

Defenders should treat rash787kent.com as a confirmed malicious resource. Network sensors should block traffic to the IP address 104.21.55.245 and to the domain itself. Email and web filtering solutions should add the domain to blocklists, and any detection rules that reference the Gambler Scam kit or the "Kent Casino" page title should be updated accordingly.