kometagate8[.]space

Analysis of kometagate8.space, created on October 13, 2025 and currently taken offline, shows multiple indicators of malicious activity targeting the Camelot brand. The domain resolves to the IP address 188.114.96.3, which is hosted in the United States under AS13335 Cloudflare, Inc. No TLS certificate was presented, meaning the site operated without HTTPS protection. The HTTP response returned the page title “Kometa Casino,” aligning with the reported scam type of Crypto Gambling. Registration was performed through the Atak Domain registrar and the domain uses Cloudflare nameservers cesar.ns.cloudflare.com and nucum.ns.cloudflare.com.

Threat intelligence sources confirm the use of a known “Gambler Scam” phishing kit, and the Gridinsoft trust score of zero further underscores the lack of legitimacy. VirusTotal scans flagged the domain in nine of ninety‑five security vendors, and the domain appears on at least one public blocklist. PhishDestroy has already blocked the site, and AlienVault OTX lists it in a single threat‑intel pulse.

The infrastructure impersonates the Camelot brand, suggesting a targeted brand‑impersonation campaign. While the site is currently offline, defenders should continue to monitor the associated IP address and Cloudflare nameservers for re‑use, add the domain to internal blocklists, and ensure that any user‑facing applications that reference Camelot credentials enforce strict domain validation. Because the domain lacks an SSL certificate and has been flagged by multiple vendors, it should be treated as high‑risk until a definitive takedown is confirmed.