keeta[.]trade

Analysis of keeta.trade confirms its classification as an active investment scam domain, first registered on March 24, 2026. The domain is currently resolving to 188.114.97.3, an address assigned to a major content delivery network provider in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (carmelo.ns.cloudflare.com and grace.ns.cloudflare.com) and a Let's Encrypt SSL certificate, which are common among both legitimate and fraudulent sites. The domain is actively blocked by multiple security platforms, including PhishDestroy, MetaMask, and SEAL, and appears in 14 threat intelligence pulses, indicating widespread detection in the security community. The site returns an HTTP 200 status, suggesting it is operational, though the page title 'Problem loading page' may indicate a temporary issue or deliberate obfuscation. Technologies detected include Vue.js, HSTS, and HTTP/3, which do not inherently indicate malicious activity but are consistent with modern web infrastructure. The domain holds a trust score of 0/100, reflecting its confirmed fraudulent nature. Five security vendors flagged the domain in recent scans, though the absence of additional vendor data limits broader detection context. Defenders should treat this domain as a confirmed threat. The infrastructure, registration details, and threat intelligence indicators align with known investment scam patterns. Organizations are advised to block resolution to the IP address 188.114.97.3 and monitor for related domains registered through the same registrar or hosted on similar infrastructure. Further analysis of the site's content is recommended to identify specific lures or targeted brands, though no specific brand impersonation is currently confirmed from available data.