kobaltcoin[.]com

Analysis of kobaltcoin.com indicates that the domain was registered on August 28, 2025 through Web Commerce Communications Limited dba WebNic.cc. The site resolved to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc., and is geolocated to the United States. An SSL certificate identified as WE1 was present at the time of observation. The page title returned by the server reads “Kobaltcoin: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the classified scam type of a crypto casino.

VirusTotal records show a single positive detection out of 93 security vendors, and the domain appears on one security blocklist. Independent scoring from Gridinsoft assigned a trust rating of 1 out of 100, reflecting an extremely low confidence level. The domain has been taken offline and is currently blocked by the PhishDestroy feed. While the available data confirm the presence of a crypto‑themed phishing kit and a low trust score, the specific content of the landing page, login flow, or any credential harvesting mechanisms have not been captured in the present dataset.

Defenders should continue to block traffic to 188.114.96.3 and enforce deny‑list policies for the kobaltcoin.com FQDN. Ongoing monitoring of the registrar WebNic.cc and Cloudflare‑hosted infrastructure is recommended, as similar campaigns frequently recycle these services. Threat intelligence feeds should be updated to reflect the current offline status, but remain vigilant for potential re‑activation or reuse of the same hosting resources under a different domain.