keine-exchange[.]biz

keine-exchange.biz is currently under active investigation for generic phishing with a high risk of cryptocurrency theft. The domain masquerades as a legitimate exchange to harvest login credentials and private keys from unsuspecting traders. PhishDestroy identifies this site as a newly registered lure that capitalizes on the trust deficit in brand-new domains, leveraging a recently issued SSL certificate to appear credible at first glance. This domain was flagged with 0 detections out of 95 engines on VirusTotal, indicating it remains under the radar of signature-based detection. It resolves to IPv4 address 194.15.112.231 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain was created on May 27, 2025, making it exceptionally young and therefore high-risk. It does not yet appear on any major public blocklists such as PhishTank or OpenPhish, and its SSL certificate issued by DigiCert Inc provides no guarantee of legitimacy. Trust scores from domains like URLVoid or Scamadviser are not yet available, further exposing users to unmitigated risk. To mitigate exposure, users should immediately block keine-exchange.biz at the network and host levels using DNS sinkholing or firewall rules targeting 194.15.112.231. Never enter credentials or cryptocurrency wallet information on this domain. If accidental access occurs, revoke any exposed API keys, rotate passwords, and transfer funds to a new wallet. Report the domain to your antivirus vendor using the unique seed c5931f to accelerate detection updates. Exercise heightened scrutiny for any newly registered exchange domains and prefer established platforms with multi-year registration histories.