proposal-zebec[.]network

This domain, proposal-zebec.network, operates as a crypto brand impersonation phishing site targeting users of the legitimate Zebec Network platform. Analysis indicates the domain mimics Zebec Network’s real-time crypto payroll and payment services, likely to harvest credentials, private keys, or facilitate unauthorized token transfers. The page title, 'Zebec Network | Real-Time Crypto Payroll & Payments,' directly replicates the legitimate service’s branding, increasing the likelihood of user deception. Given the domain’s focus on crypto-related functionality, the primary threat is likely credential theft or crypto drainer attacks, where victims unknowingly authorize malicious transactions. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on April 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with phishing and fraudulent domains. VirusTotal reports 17 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The domain previously resolved to IP address 188.114.97.3, a host with a history of supporting phishing infrastructure. Additionally, the domain was detected in one AlienVault OTX threat intelligence pulse, further corroborating its malicious intent. Users who interacted with proposal-zebec.network should assume potential compromise of sensitive data, including wallet credentials or private keys. Immediate actions include revoking any active smart contract approvals or token allowances granted to unknown addresses, rotating passwords for associated accounts, and monitoring transaction histories for unauthorized activity. If crypto assets were transferred, victims should report the incident to relevant blockchain explorers and law enforcement. All interactions with the domain should be treated as high-risk, and users are advised to verify the authenticity of any crypto-related service through official channels before engaging.