VirusTotal
15 / 94
“Buy”
zentra-ix.digital — Contenido no disponible. Suplantación de marca: Ethereum; Tipo de estafa: Impersonation. Resumen de las pruebas: VirusTotal 15/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 3 alerts; Google Safe Browsing flagged; PhishDestroy score 100/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
15 / 94
3 threat-system alerts
Denunciar3/14
Threat flag recorded
Denunciarchecked — no match recorded
no community references
Denunciarprovider verdict: clean
Denunciarinforme almacenado
Denunciar Análisis finalizado
Denunciar| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | zentra-ix.digital |
phishing | Phishing Block |
| Hagezi Threat Feed | zentra-ix.digital |
malicious | Sinkholed |
| DNS4EU | zentra-ix.digital |
malicious | Sinkholed |
The domain zentra-ix.digital was registered on March 03, 2026 through Web Commerce Communications Limited and is currently taken offline. DNS resolution points to the IP address 188.114.97.3, which is hosted by Cloudflare (AS13335) in the United States. The authoritative nameservers are joaquin.ns.cloudflare.com and julissa.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented for the site, meaning traffic would be served over plain HTTP.
The page title returned from the host is "Buy," but the content of the landing page has not been publicly disclosed, limiting the ability to describe any visual or functional elements. Security telemetry shows that the domain appears on a single blocklist and has been blocked by PhishDestroy. Google Safe Browsing categorises the URL as a social engineering threat, and VirusTotal reports that 15 of 94 scanned security vendors flag the domain as malicious. The Gridinsoft trust score is the lowest possible, 0 out of 100, reinforcing the malicious assessment.
Detected web technologies include Chart.js, jsDelivr, Facebook Pixel, cdnjs, Cloudflare services, and HTTP/3, all of which are commonly leveraged by threat actors to deliver malicious payloads or track victim interaction. Given the combination of a newly created domain, lack of encryption, a low trust score, multiple vendor detections, and confirmation from both Google Safe Browsing and PhishDestroy, the infrastructure should be considered high‑risk. Defensive teams are advised to add 188.114.97.3 to network deny lists, enforce blocking of the domain at perimeter and endpoint security layers, and monitor any outbound traffic that may attempt to resolve the domain or its associated IP. Continuous re‑evaluation is recommended, as the offline status may change and additional indicators could emerge from future scans.
Observaciones almacenadas de rastreadores frente a navegadores para este servidor, además de una comprobación en tiempo real de la huella digital para sistemas de distribución de tráfico al estilo Keitaro.
Nota del escáner: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='zentra-ix.digital', port=80): Max retries exceeded with url: / (Caused by NewConnectionErr
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
La reputación de Edge-IP no se atribuye a este dominio.
julissa.ns.cloudflare.comLocation describes the IP network.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of zentra-ix.digital · checked Mar 3, 2026
15 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
52 dominios similares almacenados
Reportado por 1 miembro de la comunidad; visto por primera vez el 03/03/2026
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Template-based draft · optional AI wording assistance requires separate consent
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraEnvía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarInformes de phishing recientes y cambios de disponibilidad observados
MonitorizarSupervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.