keysers[.]live

This domain, keysers.live, is currently under investigation for generic phishing activity targeting users with fraudulent gaming reward offers. Analysis indicates the site masquerades as a legitimate gaming benefits platform, though no specific brand impersonation has been confirmed at this time. The domain remains offline following detection, but prior activity suggests an intent to deceive users into disclosing credentials or installing malicious payloads under the guise of premium rewards. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, a Cloudflare-protected endpoint leveraging HTTP/3 for traffic obfuscation. Despite its recent creation, the domain has already been flagged by 1 security blocklist, though VirusTotal reports 0 detections across 95 vendors. Additional technical indicators include a Google Trust Services SSL certificate and a Gridinsoft trust score of 0/100, reinforcing its suspicious nature. The page title, 'Keyser - Benefits in Every Battle | Premium Gaming Rewards,' aligns with common phishing lures designed to exploit user interest in gaming incentives. Current status confirms the domain has been taken offline, though the infrastructure remains intact and could be reactivated. Organizations and users are advised to block the domain and its associated IP (188.114.97.3) at the network level. Security teams should monitor for related domains registered via NiceNIC or resolving to the same IP range, as these may indicate coordinated campaigns. End-users should be cautioned against interacting with unsolicited gaming reward offers, particularly those delivered via email or social media, and should verify the legitimacy of such platforms through official channels before engagement.