zonawallet[.]com

zonawallet.com poses as a legitimate cryptocurrency wallet service, aiming to deceive users into providing sensitive information. Despite its offline status, the domain has already been flagged by 2 out of 93 vendors on VirusTotal and appears on 4 public blocklists, including PhishDestroy and Polkadot.

The domain was registered through Metaregistrar BV and hosted on IP address 162.240.161.101 in the US, under the organization Unified Layer. It was created on December 11, 2025, and PhishDestroy identified it as a threat on December 23, 2025. The absence of an SSL certificate suggests a lack of security measures, further indicating its malicious intent.

This domain exploits the growing interest in cryptocurrency by impersonating a wallet service. The page title "Zona Wallet : Send | Receive Cryptocurrency Instantly" is designed to lure users into trusting the site. Although it is currently offline, the presence of this domain on multiple blocklists underscores its potential danger to cryptocurrency enthusiasts. PhishDestroy's early detection highlights the importance of proactive monitoring to mitigate such threats.