keeta[.]fund

This domain is flagged as an elevated-risk brand impersonation threat targeting individuals through a fraudulent investment platform. Analysis indicates the site, keeta.fund, mimics legitimate trading services, offering forex, commodities, stocks, indices, cryptocurrencies, gold, and oil investments under the false pretense of a one-stop global investment solution. The specific threat type is financial fraud, designed to deceive victims into depositing funds or disclosing sensitive financial credentials.

Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain was registered on March 09, 2026, through Gname.com Pte. Ltd., and resolves to the IP address 188.114.96.3. It appears on four security blocklists and is flagged by one of ninety-five security vendors on VirusTotal. Additional detections include blocking by MetaMask, PhishDestroy, SEAL, and OISD. The domain employs an SSL certificate issued by PhishDestroy and utilizes technologies such as HSTS, Cloudflare Browser Insights, Cloudflare, and HTTP/3. Gridinsoft assigns a trust score of 21 out of 100, further corroborating its malicious classification. The page title, "Keeta: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil," reinforces its fraudulent intent by presenting a facade of legitimacy.

To mitigate risks associated with this threat, users should avoid interacting with the domain or any associated communications. Financial institutions and security teams should block the domain, IP address 188.114.96.3, and any related infrastructure at the network level. Individuals who may have engaged with the site should immediately cease all transactions, revoke any shared credentials, and monitor financial accounts for unauthorized activity. Reporting the domain to relevant anti-fraud authorities and security organizations can aid in broader takedown efforts. Given the domain's current offline status, continued vigilance is advised, as threat actors may re-establish operations under similar or altered infrastructure.