# keasox.com — MALICIOUS

> keasox.com is a crypto drainer impersonating crypto wallets. Flagged by 5 of 95 VirusTotal vendors. Check safety on PhishDestroy immediately.

## Summary
PhishDestroy identifies keasox.com as an active crypto drainer domain with an elevated risk level, currently used for malicious cryptocurrency theft operations.


This domain was flagged by 5 of 95 VirusTotal security vendors as malicious, indicating confirmed phishing infrastructure. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP 188.114.96.3 and was created on April 08, 2026. The SSL certificate is issued by Let's Encrypt, and the domain impersonates legitimate crypto wallet login interfaces to facilitate unauthorized fund transfers.


With an elevated threat status and confirmed malicious activity, users are strongly advised to avoid interacting with keasox.com. PhishDestroy recommends blocking the domain at the network level and verifying any crypto-related links through its real-time threat intelligence platform. Immediate action should be taken to check wallet access logs and revoke any unauthorized permissions granted to this domain. Users who have already entered credentials on this site should transfer remaining funds to a new wallet and enable multi-factor authentication on all crypto accounts.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-08 19:15:45
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7f5f167d-86b1-4ebc-99b8-56d28357950a
- PhishDestroy: https://phishdestroy.io/domain/keasox.com/
- LLM endpoint: https://phishdestroy.io/domain/keasox.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/keasox.com/
Last updated: 2026-04-11