Is kta.vc a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The site presents itself as "Keeta", a one-stop global investment platform that offers online trading across forex, commodities, stocks, indices, cryptocurrencies, gold and oil. It is served from a dedicated subdomain of a rarely used top-level domain. The captured page carries very little readable text, and its main interactive elements are two password-bearing forms. Its apparent purpose is a retail trading and investment portal where visitors register, log in and fund an account.

Scam/Impersonation Risk

Material contradictions are present. The domain is confirmed on a blacklist: multiple independent security engines, including several top-tier vendors, currently flag it as malicious, and a further set of engines rate it suspicious. This is decisive and outweighs every favourable technical attribute. The site markets a multi-asset "one-stop" trading proposition. That is a category in which fake brokerage and investment portals commonly harvest credentials and deposits. Here the two password forms on the captured page are the interaction surface of concern. Behavioural testing found no wallet-drainer activity, no clipboard manipulation, no hidden forms and no cloaking. It did record a heavy volume of outbound background requests and form submissions to third-party hosts, including a few to destinations outside the recognised-service allowlist. Together with the blacklist status, this means data entered on the page could leave the site's own environment. No conflicting legal identities and no confirmed brand impersonation were observed. The concern rests on the reputation findings and the credential-collection surface, not on an identified impersonated brand. Evidence:

• Homepage: the page title advertises forex, commodities, stocks, indices, cryptocurrencies, gold and oil trading, but the captured body text is only about 115 characters.
• Homepage: two password forms were detected during behavioural testing. It also recorded 35 external XHR calls and 27 external POSTs, of which 5 XHR calls and 1 POST went to non-allowlisted destinations.
• Domain provenance: registered 2026-04-27 (~0.5 years old). The web archive holds a single snapshot, from 2021, spanning 1 year tracked. That capture predates the current registration, so there is no continuous history under the present registration.

Regulatory Verification Notes

The captured content contains no readable licensing statement, regulator reference, legal-entity name or registration number. The capture was too thin to assess disclosure transparency, and the independent identity check could not connect the site to any real-world operator. No third-party broker-reputation record matched the site, and that absence is neutral. A trading platform that solicits deposits would ordinarily have to show a verifiable authorisation, and none can be attributed to this site. The registrant details are privacy-protected, which is treated here as an administrative matter rather than a finding. Evidence:

• Legal and identity pages: no company name, licence or regulator reference appears in the captured content.
• Registration: the domain was registered through GNAME.COM PTE. LTD., expires 2027-04-27, and has a redacted registrant.
• Hosting and transport: served from AS13335 (Cloudflare, Inc., US). The TLS certificate was issued by YE1 at DV level and is valid to 2027-01-19.

What to Verify Next

Any claim to be a regulated broker should be checked directly against the official public register of the relevant financial regulator. The check should search by the legal entity name, which the site does not currently supply. Whether a legitimately operating brand named Keeta publishes this exact domain should be confirmed through channels reached independently of this site, such as the brand's official presence found by search or known offline contact. Because the domain is flagged, the site's own links, forms and downloads should not be used to carry out any of these checks. Evidence:

• Homepage: no regulator, licence number or legal entity is stated, so the registry search has no identifier to start from.
• Technical record: the domain has been registered for only a short time under the present registration, and the only archive capture predates it.

Summary Verdict

The overall posture is clearly adverse. Confirmed security-engine detections and an unattributable operator identity outweigh the valid certificate, the stable page responses and the clean hosting-network reputation. The site cannot be regarded as trustworthy in its current state.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers. The true origin server was not observable, so the hosting location cannot be independently confirmed. The transport certificate is valid and the hosting network has a clean abuse record. These are mitigating factors only. They protect the connection and say nothing about the operator's intent, and they cannot offset the reputational detections.

Closing Assessment

Login, credential entry, account registration and any deposit or financial transaction should be avoided. If the domain was reached through an unsolicited message or advertisement, that message should be treated as suspect and any funds or credentials already supplied should be treated as exposed. Organisations should consider blocking the domain pending its removal from the threat listings.