Phishing sites impersonating ZkSync

PhishDestroy has recorded 69 phishing domains impersonating ZkSync since 2025-08-30, 1 of them in the last 30 days. The most used registrars are Dynadot and Cloudflare; the most common TLDs are .app and .xyz. The official ZkSync domain is zksync.io: any other site asking for your login or wallet is not ZkSync.

69
Domains, all time
1
Last 30 days
25
Online at last check
8
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 12026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 12026-10-20: 02026-10-21: 02026-10-22: 0
ZkSync phishing domains detected per day: 3 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake ZkSync site

Official domain: zksync.io.

Words most often added to the brand in reported domains: airdropsalert, matter, labs, beefyhubs, blog, portal, airdrpsalert, beefyapps, git, sync.

  • Type the address yourself or use a bookmark; phishing links for ZkSync arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • ZkSync does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest ZkSync phishing domains

The 50 most recently detected domains impersonating ZkSync
DomainFirst detectedStatus at last checkRegistrar
get-zksync.app2026-10-19OnlineNICENIC
zksyncwallet.org2026-08-31OnlineKey-Systems
zksyncxdashboard.com2026-07-30OfflineName.com
zksyncerayield.xyz2026-07-11OnlineGMO Internet
event-zksync.xyz2026-06-15OnlineDynadot
users-zksync.xyz2026-06-15OnlineDynadot
user-zksync.xyz2026-06-15OnlineDynadot
zksync-os-dapp-portal.web.app2026-06-07OnlineGoogle
kavaverifybot.pages.dev2026-04-27OnlineCloudflare
kavaverifyrbot.pages.dev2026-04-19OnlineCloudflare
zksync-tax.pages.dev2026-04-03OnlineCloudflare
zksync-claim.space2026-03-30OnlineRegistrar.eu
ezsync.pages.dev2026-03-24OnlineCloudflare
apps-zksync.xyz2026-03-17OnlineDynadot
zksync07.vip2026-02-26OfflineGname.com
zksync-blog-lydxr2e6m-matter-labs-651a8986.vercel.app2026-02-26OnlineTucows Domains
kavasbotsverify.pages.dev2026-02-26OnlineCloudflare
app-altvenusio-git-hotfix-zksync-bridge-limits-venus-protocol.vercel.app2026-02-26OnlineTucows Domains
zksync-drop.info2026-02-26Offline—
zkswapfinance.pages.dev2026-02-26OfflineCloudflare
zkswap.fun2026-02-26OnlineNameCheap
zks.web3zksync.info2026-02-26Offline—
zksync-blog-git-video-update-matter-labs-651a8986.vercel.app2026-02-26OnlineTucows Domains
kavarolesbot.pages.dev2026-02-26OfflineCloudflare
vote-zknation.xyz2026-02-24UnknownNiceNIC
zksync.airdropsalert.us2025-12-24OfflineDynadot
zksync.airdropalerts.pro2025-12-21OfflineDynadot
zksync.airdropsalert.app2025-12-04OfflineCloudflare
zksync-enterprise-df1wkzlnd-matter-labs-651a8986.vercel.app2025-12-03Taken downVercel
zksync-enterprise-pxn6m30gh-matter-labs-651a8986.vercel.app2025-12-02OnlineVercel
zksync.beefyapps.sbs2025-11-22OfflineDynadot
zksync-blog-8629nddwp-matter-labs-651a8986.vercel.app2025-11-21OnlineVercel
zksync-blog-git-adding-to-prividium-the-tm-matter-labs-651a8986.vercel.app2025-11-20Taken downVercel
zksync.beefyapp.cfd2025-11-17OfflineDynadot
zksync.beefyapps.lol2025-11-17OfflineDynadot
zksync.beefyapps.cfd2025-11-17OfflineDynadot
zkssync-walletc.webflow.io2025-11-15Taken downMarkMonitor
zksync.life2025-11-13Taken downCloudflare
zksync.airdropsalert.xyz2025-11-13OfflineDynadot
zksync.airdropsalert.cfd2025-11-13OfflineDynadot
zksync.airdropsalert.sbs2025-11-13OfflineDynadot
zksync.beefyhub.cfd2025-11-12OfflineDynadot
zksync.run2025-11-09OfflineCloudflare
zksync.airsdropalert.click2025-11-09Taken downDynadot
zksync.airdropsalert.bar2025-11-08OfflineDynadot
zksync.airdrpsalerts.info2025-11-07OfflineCloudflare
zksync.beefyhubs.lat2025-11-03OfflineDynadot
zksync.beefyhubs.bond2025-11-03OfflineDynadot
zksync.top2025-11-01OfflinePublicDomainRegistry.com
zksync.beefyhubs.sbs2025-11-01OfflineDynadot

All 69 ZkSync reports

Where they are registered and hosted

Registrars

  1. Dynadot30
  2. Cloudflare14
  3. Vercel4
  4. Tucows Domains3
  5. GMO Internet2
  6. NiceNIC2
  7. NameCheap2
  8. GoDaddy.com1

Top-level domains

  1. .app11
  2. .xyz7
  3. .dev7
  4. .cfd6
  5. .info4
  6. .sbs4
  7. .com3
  8. .bond3

Hosting networks

  1. GOOGLE, US26
  2. CLOUDFLARENET, US16
  3. Cloudflare, Inc.11
  4. AMAZON-02, US8
  5. CLOUDFLARENET - Cloudflare, Inc., US2
  6. WEST263GO-HK West263 International Limited, HK1
  7. AMAZON-AES, US1
  8. SLAYER-AS SLAYER GROUP LIMITED, GB1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is ZkSync; share of all PhishDestroy reports: 0.03%.