kometaloft[.]com

Analysis of kometaloft.com indicates that the domain was registered on 21 February 2026 via Hello Internet Corp and points to the IPv4 address 212.11.64.170. The IP is allocated to Global-Data System IT Corporation and is geolocated to Switzerland. The domain is served by the ns100.webnic.cc and ns101.webnic.cc nameservers. Gridinsoft assigns a trust score of 0 out of 100, and the site has been flagged by PhishDestroy and listed on a single security blocklist.

VirusTotal records show that one of ninety‑three scanning engines identified the domain as malicious. As of the report date, the domain has been taken offline, and its current HTTP status is unavailable. No additional public indicators such as Safe Browsing warnings, Open Threat Exchange tags, or SSL certificate details are present in the available data. The limited detection footprint suggests a short‑lived infrastructure, but the combination of a zero trust score, blocklist presence, and a vendor detection demonstrates a credible phishing threat.

Defenders should add 212.11.64.170 to network deny lists, enforce DNS filtering for kometaloft.com, and monitor future registrations using the same registrar or nameserver pair. Continuous telemetry from endpoint and email security solutions should be tuned to flag any credential‑harvesting attempts that reference this domain or its hosting provider. Organizations that have previously interacted with email campaigns containing similar domains should verify user credentials and consider mandatory password resets if compromise is suspected.