kometa[.]lat

The domain kometa.lat is a confirmed phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform ankr. This scam operates as a gambling-themed fraud, presenting itself as 'Kometa Casino' to deceive visitors. As of the latest verification, kometa.lat has been taken offline, but it previously posed an elevated risk to users by mimicking legitimate services to facilitate financial or credential theft.

Technical analysis reveals that kometa.lat was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Gridinsoft, and SOCRadar. It appears on one security blocklist, PhishDestroy, and was registered through NameCheap, Inc. on February 21, 2026. The domain resolved to the IP address 217.156.8.31, hosted by ALEXHOST SRL in Moldova (AS200019), and used Cloudflare nameservers (eugene.ns.cloudflare.com and faye.ns.cloudflare.com). No SSL certificate was observed, and Gridinsoft assigned it a trust score of 0/100. AlienVault OTX recorded the domain in one threat intelligence pulse, further confirming its malicious nature.

Users who interacted with kometa.lat should take immediate action to secure their accounts. If credentials were entered, change passwords for the affected platform and enable two-factor authentication. Monitor accounts for unauthorized transactions or suspicious activity. For cryptocurrency-related scams, revoke any token approvals granted to the site and consider transferring funds to a new wallet. Report the domain to relevant authorities, such as the impersonated brand (ankr), local cybercrime units, or platforms like Google Safe Browsing and PhishTank to aid in broader mitigation efforts.