zeuscoin[.]top

The domain zeuscoin.top is a phishing site engaged in brand impersonation targeting users of the cryptocurrency wallet MetaMask. It was designed to deceive victims into believing they were interacting with the legitimate MetaMask platform, likely to steal login credentials or cryptocurrency-related information. As of the latest verification, zeuscoin.top has been taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical indicators confirm the malicious nature of zeuscoin.top. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and G-Data, and appeared on 2 security blocklists (PhishDestroy and ScamSniffer). It was registered through PDR Ltd. on August 8, 2025, and resolved to the IP address 104.21.16.1, hosted by Cloudflare, Inc. in the United States. The SSL certificate was issued by WE1, and the observed page title was 'ZEUS'. Despite these red flags, Google Safe Browsing did not flag the domain, and no drainer kit was identified.

Users who may have interacted with zeuscoin.top should take immediate safety steps. If credentials were entered, change passwords for MetaMask and any associated accounts, enable two-factor authentication (2FA), and monitor for unauthorized transactions or fraudulent activity. For cryptocurrency-related phishing, revoke any token approvals granted to suspicious sites and consider transferring funds to a new wallet. Report the domain to relevant platforms, such as MetaMask’s official support channels, anti-phishing organizations, or local cybersecurity authorities to help prevent further abuse.