kometacasino544[.]com

On July 24, 2026, the domain kometacasino544.com was observed hosting a crypto‑gambling phishing kit identified as the Gambler Scam. The site resolves to the IPv4 address 212.11.64.170, which is allocated to the Swiss entity Global‑Data System IT Corporation (ASN 42624) and therefore resides in Switzerland. Registration data show the domain was created on February 21, 2026 through the registrar Key‑Systems GmbH, and it uses Cloudflare nameservers fish.ns.cloudflare.com and hasslo.ns.cloudflare.com. No SSL certificate was detected, indicating the site operated over plain HTTP.

The page title returned by the server is "Kometa Casino", matching the declared scam type of crypto gambling. Threat intelligence feeds have recorded the domain on a single security blocklist, and the PhishDestroy service has marked it as blocked. VirusTotal analysis reports a single positive detection out of 93 scanning engines, reinforcing the malicious classification. Current operational status is offline, suggesting the phishing infrastructure has been taken down or is no longer serving content.

Defenders should continue to enforce blocks on the domain and its associated IP address, update URL filtering policies, and monitor the hosting infrastructure for any re‑use of the Cloudflare nameservers or ASN. Additional scrutiny of newly registered domains using the same registrar or similar naming patterns is advised, as the rapid creation date and use of a known gambling kit indicate a scripted campaign. Continuous aggregation of blocklist feeds and periodic rescans of the IP are recommended to detect any resurrection attempts.