kent502[.]casino

On July 25, 2026 analysts observed that the domain kent502.casino is currently offline but remains listed on a single security blocklist and has been blocked by PhishDestroy. The domain resolves to IP address 5.45.94.12, which belongs to AS58061 (Scalaxy B.V.) located in the Netherlands. No SSL certificate is presented for the host, and authoritative name server information is not available. The site’s HTML title, as recorded before takedown, reads "Кент казино | Официальный сайт для игры без регистрации - моментальный вход и лучшие слоты в Kent Casino," indicating a Russian‑language gambling page.

The infrastructure is associated with a Gambler Scam phishing kit and is classified as a crypto‑gambling operation that impersonates the Telegram brand. Gridinsoft’s trust scoring system assigns the domain a score of 0 out of 100, reflecting a high confidence in malicious intent. The registrar listed for the domain is NameSilo, LLC. No detections were reported by VirusTotal, but the absence of vendor flags does not constitute proof of safety.

The combination of a brand‑targeted impersonation, low trust score, and alignment with a known gambling phishing kit suggests a deliberate attempt to lure Telegram users into fraudulent crypto‑gaming schemes. Defenders should continue to block the resolved IP address, maintain the domain on existing blocklists, and monitor for any re‑appearance of the host or related infrastructure. Additional vigilance is advised for traffic attempting to resolve or connect to kent502.casino, and any future redeployment should be flagged for immediate containment pending further investigation.