sapzone[.]io
sapzone.io 网络钓鱼与安全检查
“Crypto Exchange Aggregator: Swap Cryptocurrency Instant | swapzone.io”
sapzone.io — 隐形 · 可达 (HTTP 200). 诈骗类型:Fake Exchange. 证据摘要: VT 3/91 (alphaMountain.ai, CRDF, Gridinsoft); URLQuery 0; URLScan no malicious verdict; GSB no flag; BL 0; cloaking observed; PD 86/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy first observed sapzone.io on Mar 23, 2026. The captured page title is “Crypto Exchange Aggregator: Swap Cryptocurrency Instant | swapzone.io”. Stored page analysis classifies the content as fake exchange. Current evidence score: 86/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 3 detections among 91 engines: alphaMountain.ai, CRDF, Gridinsoft on Jul 12, 2026 at 02:10 UTC. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection on Mar 23, 2026 at 03:53 UTC. Google Safe Browsing returned no flag on Mar 23, 2026 at 00:45 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:47 UTC. PhishStats returned no feed match on Mar 23, 2026 at 00:46 UTC.
Cloaking was recorded with HTTP 200 on Aug 7, 2026 at 22:38 UTC. Latest classified outcome: live content observed; cause content served on Aug 7, 2026 at 00:42 UTC. The cloaking probe recorded redirect split conditional delivery at 4/100 on Aug 7, 2026 at 22:38 UTC: alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare. Registration records for the domain list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar and Nov 16, 2025 as the creation date. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction on Jul 29, 2026 at 02:24 UTC retained 0 format-validated wallet addresses and 3 Telegram indicators. TLS metadata lists Google Trust Services as the certificate issuer with validity through Jun 19, 2026; checked Mar 25, 2026 at 08:35 UTC.
Stored content provides classification context, but only one source contains a positive finding.
网络安全情报 Registrar context
威胁响应 Pipeline
公共封禁名单状态
Latest Classified Outcome 2026-08-07 02:42:54 UTC
所用技术 · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of sapzone.io · checked Mar 23, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。