# keorax.com — MALICIOUS

> Keorax.com is a medium-risk phishing domain pretending to be Elon Musk’s crypto casino. Avoid this offline site to protect your data and funds.

## Summary
PhishDestroy identifies keorax.com as a medium-risk generic phishing domain masquerading as "Elon Musk’s Official Crypto Casino Powered by Blockchain." This fraudulent site aims to deceive users into divulging sensitive information or crypto assets by exploiting Elon Musk’s name and the popularity of blockchain gambling.

The domain keorax.com resolves to IP 172.67.220.142 and was registered through NiceNIC International Group Co., Limited on March 2, 2026. It currently appears on one security blocklist and is flagged by 6 out of 95 security vendors on VirusTotal. The site is now offline, reducing immediate threat but indicating prior malicious activity.

Users should remain vigilant and avoid any communication or transactions involving keorax.com. Never trust unsolicited links claiming high-profile endorsements, and verify site legitimacy before sharing personal or financial details. Keeping security software updated and consulting reputable sources like PhishDestroy enhances protection against such phishing scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Keorax: Elon Musk’s Official Crypto Casino Powered by Blockchain

## Domain Intelligence
- Registered: 2026-03-02 15:00:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.220.142
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: camilo.ns.cloudflare.com keyla.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["Fortinet", "G-Data", "Kaspersky", "Netcraft", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/Kjjyh75G/3bf82f504cfa.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9744cfdc-679c-4d75-9ead-da8bcfb7e3e8
- PhishDestroy: https://phishdestroy.io/domain/keorax.com/
- LLM endpoint: https://phishdestroy.io/domain/keorax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/keorax.com/
Last updated: 2026-03-19