komocaz[.]com

Analysis indicates that the domain komocaz.com was registered on August 31, 2025 through Web Commerce Communications Limited and is currently taken offline. The authoritative nameservers are grant.ns.cloudflare.com and lucy.ns.cloudflare.com, pointing the domain to the Cloudflare edge IP 172.67.131.16, which is geolocated to the United States and belongs to AS13335 Cloudflare, Inc. No TLS certificate was observed, meaning connections are served without encryption. The site’s HTML title reads “Komocaz: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the classification of a crypto‑scam phishing campaign that uses the Gambler Scam kit. Threat intelligence shows the domain appears on a single security blocklist and has a Gridinsoft trust score of 0 out of 100, indicating a malicious reputation.

AlienVault OTX lists the domain in one pulse, and VirusTotal reports nine of ninety‑five scanned scanners flagging it as malicious. PhishDestroy also blocks the domain. The available data confirm the infrastructure is hosted behind Cloudflare, a common choice for fast‑flux and anonymization, and that the domain lacks any valid SSL/TLS certificate, which may be used to lure victims into insecure login flows.

Uncertainty remains regarding the exact content served before the takedown, as no live HTTP response or page capture is available. Defenders should continue to block komocaz.com at DNS and proxy layers, monitor for any re‑registration attempts, and add the associated IP address to existing deny lists. Additional scrutiny of related Cloudflare sub‑domains and any future TLS certificates is advised to detect potential resurrection of the campaign.