# zeowax.com — SUSPICIOUS

> zeowax.com is a crypto drainer impersonating trusted platforms. Flagged by 4 of 95 VirusTotal vendors. Verify before engaging. Use PhishDestroy.

## Summary
PhishDestroy identifies zeowax.com as an active crypto drainer posing as legitimate platforms, currently classified with an elevated threat level. This domain operates under the guise of a trustworthy service to deceive users into connecting their cryptocurrency wallets, where malicious scripts drain assets upon interaction. The operation remains live and continues to propagate via URLs shared in unsolicited communications or embedded in compromised ads or social posts.  

This domain was flagged by 4 out of 95 VirusTotal security vendors, with evidence of prior blocking by the OISD network. It is registered through Gname.com Pte. Ltd., resolves to IP address 188.114.96.3, and was created on March 11, 2026. With a registered domain age of only days, it displays characteristics typical of fast-flux or newly weaponized domains used in cryptocurrency theft campaigns. Despite the presence of a Let’s Encrypt SSL certificate, this offers no meaningful trust indication given the domain’s recent creation and association with malicious behavior.  

The site remains active and should be avoided entirely. If you suspect exposure, disconnect your wallet immediately, revoke any unauthorized permissions, and scan devices for malware. Report the domain to PhishDestroy for confirmation and community protection. Always verify URLs and use hardware wallets or trusted decentralized apps (dApps) from official sources. Never click unverified links in messages or ads.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-11 16:01:33
- Registrar: Gname.com Pte. Ltd.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/59cf1a3a-c45e-4003-8622-95a7e690c934
- PhishDestroy: https://phishdestroy.io/domain/zeowax.com/
- LLM endpoint: https://phishdestroy.io/domain/zeowax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/zeowax.com/
Last updated: 2026-04-13