keyfund[.]net

The domain keyfund.net was registered on April 02, 2026 through NameCheap, Inc. It is hosted on the IP address 198.54.116.2, which resolves to a United States location associated with NameCheap's infrastructure. The authoritative nameservers are dns1.namecheaphosting.com and dns2.namecheaphosting.com, and the site presents a Sectigo Limited / Sectigo Public Server Authentication CA DV R36 SSL certificate, indicating the use of encrypted transport.

Open-source threat feeds have repeatedly flagged keyfund.net. AlienVault OTX references the domain in 22 separate pulses, indicating recurring observations across multiple campaigns. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy filtering service. VirusTotal analysis shows that 4 of 95 security vendors have raised detections against the domain, reinforcing its malicious reputation.

Current scanning shows the web server returns HTTP 403, suggesting that direct content delivery is being denied, yet the domain remains resolvable and reachable. Gridinsoft assigns a trust score of 35 out of 100, reflecting a low confidence rating. The SSL certificate, issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36, is valid and confirms the use of encrypted transport despite the underlying malicious intent.

Given the convergence of multiple independent indicators, defenders should treat keyfund.net as a high‑risk phishing infrastructure. Immediate mitigation steps include adding the domain to outbound and inbound deny lists, updating intrusion detection signatures, and monitoring for any future resolution changes. Continuous re‑evaluation is advised, as threat actors may modify hosting or certificate details while maintaining the same domain.