keezyx[.]com

Analysis of keezyx.com indicates that the site was registered on 27 August 2025 through NameCheap and is presently taken offline. The domain resolves to IP 69.5.189.56, an address allocated to AS42624 (Global-Data System IT Corporation) in Switzerland. No TLS certificate was observed, meaning all traffic would be unencrypted. The page title “Keezyx: Most Popular Online Crypto Casino Based on Blockchain” aligns with the listed scam type of a crypto‑focused casino fraud. The infrastructure is associated with the publicly known “Gambler Scam” phishing kit, which is commonly used to lure victims into depositing cryptocurrency under false pretenses.

The domain is listed on one security blocklist and is actively blocked by PhishDestroy. VirusTotal scans report that ten out of ninety‑five AV engines flag the domain as malicious, reinforcing the suspicion. Nameserver configuration lists four generic nameservers (ns1‑ns4.nameserverhub.com), a pattern often seen in disposable or rapidly deployed malicious domains. Gridinsoft assigns a trust score of 1/100, the lowest possible rating.

The available evidence confirms a high‑confidence attribution to a crypto‑scam operation, but the lack of current HTTP response details and the offline status limit visibility into any active payloads or credential‑stealing forms. Defenders should immediately add keezyx.com and its resolved IP address to deny‑list rules at perimeter and DNS filtering layers, monitor for any new subdomains under the same registrar or nameserver set, and continue to watch for related “Gambler Scam” kit signatures in network traffic. Given the absence of TLS, any attempted connections would be observable and can be logged for further forensic analysis. Ongoing reconnaissance of NameCheap‑registered domains created after mid‑2025 that resolve to the same ASN may reveal additional malicious actors.