kent216[.]com

This domain, kent216.com, was registered on March 12 2026 through the REGRU-RU registrar. The site is currently offline but historical observations indicate it was used to host a gambling‑oriented phishing kit identified as the Gambler Scam, targeting users interested in crypto gambling. The page title retrieved from the live snapshot reads "Официальный сайт Кент Казино — Kent Casino онлайн, live и бонусы", indicating an attempt to masquerade as the Kent Casino brand. Infrastructure analysis shows the domain resolved to IP address 45.10.243.99, which belongs to AS57724 operated by DDOS‑GUARD LTD and is physically located in Russia. The hosting provider also supplied DDoS‑Guard services, as reflected by the presence of the DDoS‑Guard technology tag.

Google Tag Manager was detected, suggesting the use of third‑party analytics or script injection. No TLS certificate was presented, meaning the site served content over plain HTTP, a common characteristic of low‑cost phishing deployments. Reputation checks reveal that the domain appears on one security blocklist and has been flagged by PhishDestroy. VirusTotal recorded a single positive detection out of 94 scanned engines, confirming at least one vendor identified malicious behavior. The nameserver configuration includes both generic example.com entries and a self‑referencing ns1.kent216.com entry pointing to the same IP address, a pattern often observed in fast‑flux or disposable hosting setups.

While the offline status limits real‑time verification, the combination of a brand‑specific page title, the Gambler Scam kit fingerprint, and the Russian‑based DDoS‑Guard infrastructure suggests a deliberate attempt to lure cryptocurrency gamblers into divulging credentials or depositing funds. Defenders should add kent216.com to block lists, monitor DNS queries for the associated IP and nameservers, and enforce outbound filtering for HTTP traffic to the IP range 45.10.243.0/24.