kometamells[.]com

This domain, kometamells.com, is flagged as an active credential-phishing threat based on infrastructure analysis and confirmed blocklist presence. Registered on February 21, 2026, through MAT BAO CORPORATION, the domain resolves to 212.11.64.170, an IP address hosted in Switzerland under AS42624 (Global-Data System IT Corporation). The domain currently returns an HTTP 403 status, indicating access restrictions, though this does not preclude malicious activity. It is served by Cloudflare nameservers (fish.ns.cloudflare.com, hasslo.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. No SSL certificate is present, increasing the likelihood of interception or impersonation attempts. The domain appears on one security blocklist and is specifically flagged by at least one vendor as phishing-related, though VirusTotal reports three detections out of 93 vendors, suggesting partial confirmation of malicious intent. The page title, matching the domain name, provides no additional context about the target brand or specific phishing lure, leaving the exact content unconfirmed. Defenders should treat this domain as high-risk, block resolution at the DNS level, and monitor for connections from internal networks. Given the lack of SSL and the use of Cloudflare, network traffic analysis may reveal attempts to harvest credentials or distribute malware. Further investigation into associated IP ranges and registrar actions is recommended to disrupt the infrastructure.