⚠️
Este dominio ha sido señalado como malicioso
Detected by 8 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
Domain security & threat intelligence

zeroexch[.]io

Análisis de phishing y seguridad de zeroexch.io

“Crypto Exchange No KYC | Anonymous Bitcoin & Ethereum Swap | ZeroExch”

Threat verdict Critical 84/100 evidence score
Availability Last known active Latest stored reachability observation
Risk signals
VirusTotal: 8/91 detections Brand impersonation: Ethereum Last known active
8/91 VT Nov 19, 2025 Ethereum Brand Impersonation CDN + more
Resumen del informe

zeroexch.io: VirusTotal registra 8 detecciones de 91. Consulta DNS, SSL, registrador, listas de bloqueo y datos sobre amenazas.

El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.

Evidence Summary
CRITICAL
Ref
39E3E9AC
Score
84/100
Mode
Evidence v1

PhishDestroy first recorded zeroexch.io on Nov 19, 2025. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 84/100.

The latest stored availability state is “Last known active” (HTTP 200) on Aug 2, 2026 at 00:56 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 8 detections from 91 scanners in the stored check on Jul 26, 2026 at 04:57 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 3, 2026 at 05:14 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 1, 2026 at 18:05 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 20:31 UTC. That result is not evidence of safety. A URLScan capture is stored from Feb 28, 2026 at 02:30 UTC.

Stored context lists registrar NiceNIC International Group Co., Limited, IP address 2606:4700:3033::6815:4df6, registration date Sep 17, 2025, apparent target Ethereum. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal
VirusTotal
8 det.
URLScan
URLScan
TLS certificate
Expired or unverified -100d
Edad
11 mo
Observed status
Last known active 200
PhishDestroy
DestroyList
Listed
Cobertura de los datos VirusTotal 8 / 91 URLQuery checked — no match OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict verdict unavailable Bloqueos de DNS not checked TLS expired or unverified WHOIS 11 mo old Screenshot external capture Cadena de redireccionamientos not probed
Inteligencia de seguridad de red Registrar Integrity Alert
High-Risk Registrar NiceNIC
PhishDestroy audit found that over 90% of domains registered through NiceNIC are associated with illegal content. This registrar systematically ignores abuse reports and its primary clientele consists of CIS-region scam operators. We have not identified a single legitimate project hosted on this registrar.
NiceNIC Verdict Full Investigation

Proceso de respuesta ante amenazas Pipeline

Discovery
Checks
Reports
Availability
14/16
Detección e ingesta preventivas
Amenaza detectada
1/1 ✓
Amenaza detectada
zeroexch.io detectados y puestos en cola para su análisis completo
Nov 19, 2025
Threat Intelligence Checks
URLScan.io Capture · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · High-Risk Registrar: NiceNIC · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded · Cloudflare Radar Scan · Content Observed Unavailable · Content Observed Unavailable
12/12 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
Feb 28, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
Web Archive
Preserved in Wayback Machine — historical evidence archived
VirusTotal
8 / 91 vendors flagged on VirusTotal
Jul 26, 2026
Google Safe Browsing
Mar 03, 2026
High-Risk Registrar: NiceNIC
90%+ illegal content — registrar ignores abuse reports. Read our verdict
Brand Impersonation
Impersonation of Ethereum
Forensic Evidence Collected
Stored evidence from URLScan.io, stored screenshot
Feb 28, 2026
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Cloudflare Radar Scan
Scanned via Cloudflare Radar — network analysis completed
Mar 07, 2026
Content Observed Unavailable
Monitoring recorded an unavailable response (HTTP 523); the cause was not independently established
Feb 27, 2026
Content Observed Unavailable
Monitoring recorded an unavailable response; the cause was not independently established
Feb 27, 2026
Notification Records
Complaint Draft Available
PENDING
Complaint Draft Available
No submission is recorded. You can create a draft, review it, and submit it yourself to the appropriate authority.
Publicación y disponibilidad
DestroyList Published · Monitoring Continues
1/2
Lista de destrucción publicada
Nov 19, 2025
Monitoring Continues
The domain remains reachable or access-restricted; future checks may update this observation

Estado de la lista de bloqueados pública

Recopilación de evidencias

Stored Capture
2025-11-19 23:20 UTC
Malicious · 8/91 engines
Forensic screenshot of zeroexch.io showing the phishing page layout
IP: 2606:4700:3033::6815:4df6
NiceNIC International Group Co., Limited
318d old

Inteligencia de dominios

Domainzeroexch.io
Telegram IoCs 2 extracted https://t.me/zeroexch https://t.me/zero_exch
Server / ASN cloudflare · AS13335 CLOUDFLARENET, US
IP Address 2606:4700:3033::6815:4df6 CDN
GeoUS San Francisco, US
NetworkASAS13335 · AS13335 Cloudflare, Inc.
Origin IP is hidden behind a CDN proxy. Reverse-IP on the edge IP returns unrelated tenants — origin discovery requires passive-DNS or CT cross-reference.
RegistrationCreado Sep 17, 2025 (318d) Expires Sep 17, 2026
Elapsed Since First Report 100 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Estado HTTP200
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Primera detecciónNov 19, 2025
Nameserverscash.ns.cloudflare.compiper.ns.cloudflare.com
TLS Fingerprint62b7494e8107a6e2a6f52f7c6dbbddf9d11c550b…
Favicon Hashfavicon86bc867e931effa0d5f286eec8afbdb3
Page Title
Crypto Exchange No KYC | Anonymous Bitcoin & Ethereum Swap | ZeroExch
TLS Certificate
Expired or unverified · Issued by Google Trust Services / WE1
Tecnologías · 2 identified
Cloudflare
CDN

Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.

www.cloudflare.com
HTTP/3
Miscellaneous

Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.

Detected via Cloudflare Radar · Wappalyzer engine
Denunciar este dominio Envía pruebas y ayuda a proteger a los demás

Análisis de VirusTotal

8 / 91 security vendors flagged this domain
View on VT
alphaMountain.ai
BitDefender
Chong Lua Dao
Fortinet
G-Data
Gridinsoft
Lionic
Sophos

Evidencias archivadas

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Datos y informes externos Open external tools

¿Te ha afectado esta página web?

No estás solo y no hay nada de qué avergonzarse. Los estafadores son delincuentes sofisticados que se aprovechan de la confianza ajena. Denunciar tu experiencia es el arma más eficaz contra el fraude: tu denuncia puede evitar que otras personas se conviertan en víctimas y ayudar a las fuerzas del orden a tomar medidas. El silencio es la mayor ventaja del estafador. Rómpelo.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

¡Cuidado con los estafadores que se hacen pasar por empresas de recuperación de datos! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. Más información sobre el fraude en las ayudas de recuperación →

Informa a las autoridades locales

Selecciona tu país para obtener contactos oficiales en materia de ciberdelincuencia, or create a complaint draft →

Selecciona tu país...
Más de 180 países
Zero-PII: tus datos nunca salen del navegador Review and submit it yourself

About This Report: zeroexch.io

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “Crypto Exchange No KYC | Anonymous Bitcoin & Ethereum Swap | ZeroExch”, which may be designed to impersonate Ethereum.

zeroexch.io has been flagged by 8 security vendors as of August 1, 2026.

Si crees que esta información es incorrecta, puedes presentar un recurso. Para obtener más información sobre nuestra metodología, visita nuestra Página de preguntas frecuentes.

Comprobar cualquier dominio

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Escanear ahora

Denunciar un intento de phishing

Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad

Report

Flujo de amenazas en tiempo real

Recent phishing reports and observed availability changes

Monitor

Mantente informado, mantente a salvo

Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.

Flujo de amenazas en tiempo real Reclamar este anuncio
HTML · IFRAME

Incrustar este informe

Comparte esta información sobre amenazas en tu página web o blog

embed.html
<iframe
  src="https://phishdestroy.io/es/embed/domain/zeroexch.io"
  title="PhishDestroy threat report for zeroexch.io"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>