Look closely at the name: DevikaR0UTE is spelled with a zero, not the letter O. The site, devikar0ute.net, is in Spanish and offers “Un panel único para analizar tus inversiones en varios exchanges a la vez” — one panel to analyse your investments across several exchanges. Australia’s ASIC put it on its investor alert list in October 2026. The domain was registered on 24 September 2026, about a month before.
“Conecta un exchange”
The main call to action is “Conecta un exchange” — connect an exchange — “sin compromiso de continuidad”. To connect an exchange, a user hands over API keys or login details. With trading or withdrawal permissions, those keys give a stranger control of the account. Analytics dashboards are a common front for exactly this: the “AI” is the hook, the exchange access is the prize.
DevikaR0UTE
devikar0ute.net
ASIC
- Address: Calle Pacífico, 27, 29016 Málaga, España
- Phone: +17688856938 (a +1 North American number)
- Email: help@devikar0ute.net
- Prices / plans: None shown
- Domain registered: 24 September 2026
A Spanish office with a North American phone
A firm based in Málaga would normally use a +34 number. DevikaR0UTE lists a +1 number. The hero image behind the headline is a screenshot of a different English-language site, with its own menu showing “Infrastructure”, “Blog” and “Submit low”. The copyright line has no year and no company name.
Connected an exchange to DevikaR0UTE?
Tell us which exchange and when. Revoke the API key immediately and check for withdrawals you did not make.
Change your exchange password and turn on two-factor authentication.
How API-key theft works
Exchanges let users create API keys so outside tools can read balances. If the user ticks “trade” or “withdraw” when creating the key, the outside tool can also move funds. Thieves use this to place wash trades into thin markets they control, draining the account without a single direct withdrawal. A genuine analytics tool needs read-only access and says so plainly. DevikaR0UTE’s site promises that credentials are used only to read market data, but there is no company, licence or audit to back that promise.
The verdict: a one-month-old site asking for exchange access, flagged by ASIC. Do not connect anything.
Sources: ASIC investor alert via IOSCO I-SCAN (October 2026); devikar0ute.net (checked 26 October 2026); RDAP record. General information only.
