kometaswit[.]com

Analysis as of July 23, 2026 indicates that the domain kometaswit.com is being used for a phishing operation and has been taken offline. The domain was registered on February 21, 2026 through Web Commerce Communications Limited dba WebNic.cc and is served by the authoritative nameservers ns100.webnic.cc and ns101.webnic.cc. VirusTotal submitted the domain to 93 scanning engines, of which a single vendor raised a detection, confirming malicious intent despite the low overall count.

Independent threat‑intelligence feeds have added the domain to a security blocklist, and the PhishDestroy service has actively blocked access to it. The Gridinsoft trust score of 0 out of 100 further reinforces the conclusion that the site is untrusted. No additional public evidence such as SSL certificate details, HTTP response codes, page title, or content analysis is available, leaving the specifics of the phishing payload or targeted brand undefined.

Defenders should immediately block kometaswit.com at network perimeter and endpoint filters, update internal blocklists, and monitor for any related C2 infrastructure that may share the same registrar or nameserver configuration. Continuous re‑evaluation is advised in case the domain is re‑registered or new indicators emerge.