# register-0x0.exchange — MALICIOUS — Crypto Drainer (Angel Drainer)

> Warning: register-0x0.exchange used Angel Drainer kit to target generic crypto users. Domain now offline; remain cautious with crypto sites.

## Summary
PhishDestroy identifies register-0x0.exchange as a low-risk crypto drainer targeting generic cryptocurrency users. The domain was involved in illicit activities aimed at draining crypto wallets by impersonating legitimate crypto services. Its use of the Angel Drainer kit indicates a specialized focus on extracting digital assets through phishing techniques.

The malicious infrastructure includes registration through OwnRegistrar, Inc. and resolution to IP address 188.114.97.3. The domain was listed on seven security blocklists, highlighting recognition by multiple threat intelligence sources. VirusTotal analysis flagged it by one out of ninety-five security vendors, reflecting limited but notable detection.

Currently, register-0x0.exchange is offline, mitigating immediate risk. Users are advised to remain vigilant against similar phishing domains and to verify authenticity before interacting with crypto-related websites. Continued monitoring of domains using the Angel Drainer kit is recommended to prevent future compromise.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Angel Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Angel Drainer

## Domain Intelligence
- Registrar: OwnRegistrar, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: N/A
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["G-Data"]
- Google Safe Browsing: clean
- Blocklists: 7 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "Polkadot", "SEAL", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198897c-b2fa-700a-9bcd-1cf18497ee6d.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7e2e75ad-f27b-4861-bf9e-0f8ede9d2c70
- PhishDestroy: https://phishdestroy.io/domain/register-0x0.exchange/
- LLM endpoint: https://phishdestroy.io/domain/register-0x0.exchange/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/register-0x0.exchange/
Last updated: 2026-03-19