# zksync-claim.space — SUSPICIOUS

> zksync-claim.space impersonates zkSync as a brand impersonation site with 0/95 VirusTotal detections. Investigate immediately to prevent crypto drainer risks.

## Summary
PhishDestroy identifies zksync-claim.space as a brand impersonation domain targeting zkSync users. This domain mimics official zkSync branding and infrastructure to deceive visitors into engaging with fraudulent activities, including potential crypto drainer schemes. The site leverages social engineering tactics to trick users into connecting wallets or revealing credentials, posing a significant threat to cryptocurrency holders seeking legitimate zkSync services. While no specific drainer kit has been confirmed, the mimicked interface and urgency-driven prompts align with common crypto scam patterns.

Technical indicators reveal this domain was registered on March 26, 2024, through Hosting Concepts B.V. d/b/a Registrar.eu. It resolves to IP address 168.231.124.74 and utilizes a Let's Encrypt SSL certificate for legitimacy. VirusTotal currently flags the domain with 0/95 detections, indicating it remains undetected by most antivirus engines. As of the latest scan, this domain is not blacklisted by Google Safe Browsing (GSB) and has no recorded entries on major threat intelligence platforms. The domain's recent creation and clean record suggest an emerging threat still in its operational infancy.

PhishDestroy classifies this domain as an active high-risk threat under investigation. The current status is unresolved, with no definitive blocklist inclusion despite clear impersonation intent. Immediate actions include adding the domain and IP to firewall and DNS blocklists, flagging the domain for GSB review, and monitoring for associated drainer infrastructure. Remaining risk is high due to the domain's undetected status and potential for rapid evolution into a fully operational crypto drainer. Users should avoid interaction and report any encounters to zkSync's official channels for further analysis.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: zkSync

## Domain Intelligence
- Registered: 2026-03-26 12:10:49
- Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
- IP: 168.231.124.74

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6ce1d52f-c18c-49de-b2fc-8b92b5ef2642
- PhishDestroy: https://phishdestroy.io/domain/zksync-claim.space/
- LLM endpoint: https://phishdestroy.io/domain/zksync-claim.space/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/zksync-claim.space/
Last updated: 2026-03-30