zekex[.]com
Análisis de phishing y seguridad de zekex.com
“zekex”
zekex.com — Contenido no disponible (HTTP 404). Suplantación de marca: Generic; Tipo de estafa: Social Media Phishing. Resumen de las pruebas: VirusTotal 5/95 (alphaMountain.ai, CyRadar, Fortinet, Gridinsoft, SOCRadar); URLScan malicious verdict; 1 external blocklist match (ScamSniffer); PhishDestroy score 70/100. Registrador: Gname.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain zekex.com indicates it is being used for a social media phishing campaign and is currently offline. The site returned an HTTP 404 status when probed, and its page title was observed as "zekex". Registrant information shows the domain was registered through Gname.com Pte. Ltd. on September 25, 2005. DNS resolution points to IP address 154.37.219.243, which belongs to NetLab Global (ASN 979) and is geolocated in Hong Kong. SSL certificates for the host are issued by Google Trust Services under the WR1 intermediate, confirming the use of a valid Google‑managed certificate chain.
Technical fingerprints reveal a stack built on Wix, React, Google Cloud services, Lodash, HTTP/3, and HSTS, with delivery via Google Cloud CDN. Nameserver configuration includes a.share-dns.com, a11.share-dns.com, b.share-dns.net, and b11.share-dns.net. Reputation signals are highly negative: Gridinsoft assigns a trust score of 1 / 100, and five of ninety‑five VirusTotal scanners flagged the domain. The domain appears on two external blocklists and is explicitly listed by PhishDestroy and ScamSniffer as malicious.
While the page content was not captured, the combination of a social‑media phishing classification, low trust score, and multiple vendor detections suggests active abuse. Uncertainties remain around the exact phishing landing page and any post‑offline activity, as the site is presently unreachable. Defensive recommendations include adding the IP 154.37.219.243 and the domain zekex.com to network deny lists, monitoring the associated nameservers for potential re‑use, and updating web‑gateway and email filtering rules to block URLs referencing the domain. Continuous re‑assessment is advised in case the infrastructure is re‑activated or shifted to new hosting assets.
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 7 identified
Website builder platform with hosted publishing — low barrier to entry makes it a common phishing hosting.
JavaScript library for building user interfaces with component-based architecture.
Suite of cloud computing services running on Google infrastructure.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Content delivery network built on Google global edge infrastructure.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of zekex.com · checked Mar 2, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.