# eqonex.io — MALICIOUS

> eqonex.io is flagged for potential phishing. Learn why this new domain is under close watch by cyber experts at PhishDestroy.

## Summary
PhishDestroy identifies eqonex.io as a domain under investigation for generic phishing activities. The domain was created recently on November 30, 2025, raising concerns typical of phishing setups using fresh registrations.

Technically, eqonex.io resolves to IP 172.67.215.127 and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal scans show zero detections, but the domain's recent creation and registrar choice warrant caution and deeper analysis.

Currently, eqonex.io remains active and under continuous monitoring. Despite clean scan results, users are advised to stay vigilant. PhishDestroy will update its risk assessment as new intelligence emerges regarding this suspicious domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Ethereum
- Page title: Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | EQONEX

## Domain Intelligence
- Registered: 2026-03-03 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.215.127
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: duke.ns.cloudflare.com meilani.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Fortinet", "Netcraft", "SOCRadar", "URLQuery"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb4b8-d48a-76ec-b109-5ccd9fbceb52.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3bb7db4c-84cc-4f25-81f2-a22382763a3f
- PhishDestroy: https://phishdestroy.io/domain/eqonex.io/
- LLM endpoint: https://phishdestroy.io/domain/eqonex.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eqonex.io/
Last updated: 2026-03-19