keowax[.]com

The domain keowax.com was identified as a brand impersonation threat targeting users of an online crypto casino or gambling platform. Analysis confirms the domain was designed to mimic a legitimate blockchain-based gambling service, as indicated by its page title, 'Keowax: Most Popular Online Crypto Casino Based on Blockchain.' The domain is currently offline, though prior activity suggests it was actively used for fraudulent purposes. Infrastructure analysis reveals the domain was created on November 27, 2025, and registered through NiceNIC International Group Co., Limited. It resolved to the IP address 172.67.186.225, hosted on Cloudflare’s network (AS13335) in the United States. Security vendors flagged the domain as malicious, with 17 of 95 VirusTotal engines detecting it as a threat. The domain also appeared on one security blocklist, reinforcing its classification as a high-risk asset. Notably, the domain lacked an SSL certificate, a common red flag for phishing or fraudulent infrastructure. The domain has since been taken offline, likely due to enforcement action by security providers or hosting services. Organizations and users are advised to treat any prior interactions with keowax.com as compromised. Network defenders should block the domain and its associated IP (172.67.186.225) at the perimeter. End users who accessed the site should monitor for unauthorized transactions or account activity, particularly in cryptocurrency wallets. Registrars and hosting providers are encouraged to scrutinize domains registered through NiceNIC with similar characteristics for potential abuse.