kingbet9[.]co[.]com

The domain kingbet9.co.com is currently flagged as a high‑risk, active brand‑impersonation site targeting users looking for online betting services. Registration data shows the domain was created on August 16, 1997 and is registered through Moniker Online Services LLC. The authoritative name servers are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com and ns4.nic.co.com, indicating a standard .co.com namespace configuration. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site is fronted by Cloudflare and serves traffic over HTTP/3, with an SSL certificate issued by Google Trust Services under the WE1 profile, confirming the use of a legitimate certificate authority.

An HTTP 301 redirect is observed, and the page title returned by the server reads "Kingbet9: Your Ultimate Online Betting Experience in Australia," suggesting a focus on gambling‑related content. The known scam type is a crypto scam, and the underlying phishing kit is identified as a Gambler Scam, reinforcing the gambling narrative. Reputation checks reveal a Gridinsoft trust score of 0 / 100, and the domain appears on four security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, providing additional corroboration of malicious intent.

Although the impersonated brand is listed only as "across," no specific brand name is disclosed in the available intelligence, leaving the exact victim profile uncertain. Defenders should immediately block kingbet9.co.com at DNS and proxy layers, monitor traffic to its Cloudflare‑hosted IP for anomalous patterns, and enforce URL filtering based on the observed page title and kit signature. Continuous re‑evaluation is advised, as the domain remains active and may evolve its payload or targeting vectors.