jomcas[.]bet

The domain jomcas.bet has been identified as a phishing site involved in brand impersonation, specifically targeting the 'foundation' brand. This site was designed to deceive users into believing they were interacting with a legitimate entity, potentially leading to financial or personal data loss. The current status of jomcas.bet is offline, which mitigates the immediate threat it poses.

Technical indicators for jomcas.bet reveal that 3 of 95 security vendors on VirusTotal, including Fortinet, Seclookup, and SOCRadar, have flagged it as malicious. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created on August 01, 2025. It resolves to the IP address 69.5.189.56, located in Switzerland under AS42624 Global-Data System IT Corporation. The site appears on one security blocklist, PhishDestroy, and does not have an SSL certificate. The page title observed was 'JOMCAS | Play at the best online casino based on Blockchain', indicating a potential scam related to cryptocurrency.

For individuals who interacted with jomcas.bet, it is critical to take immediate safety measures. If cryptocurrency was involved, users should revoke token approvals and transfer funds to a new wallet. For any credential or login information shared, changing passwords, enabling two-factor authentication, and monitoring accounts for fraudulent activity are recommended. Victims can report such phishing scams to local authorities or cybersecurity organizations to help prevent future incidents.