# zotplay.com — MALICIOUS

> Zotplay.com is a high-risk phishing site impersonating Elon Musk’s crypto casino. Avoid interaction and do not share personal info. The site is offline now.

## Summary
PhishDestroy identifies zotplay.com as a high-risk phishing domain promoting a fake crypto casino allegedly linked to Elon Musk. The primary threat is generic phishing aimed at stealing sensitive user data and credentials.

Supporting evidence includes 13 out of 95 security vendors flagging the domain on VirusTotal and its presence on one security blocklist. The domain was registered recently on March 5, 2026, via Spaceship, Inc., and resolved to IP 172.67.169.93. The fraudulent site leveraged blockchain buzzwords and celebrity association to lure victims.

Currently, zotplay.com is taken offline, mitigating immediate risk. Users are advised to avoid the domain entirely, refrain from providing any personal or financial information, and ensure their devices are protected with updated security tools. Continuous monitoring for similar threats is recommended.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 666)
- Page title: Zotplay: Elon Musk’s Official Crypto Casino Powered by Blockchain

## Domain Intelligence
- Registered: 2026-03-05 03:07:01
- Registrar: Spaceship, Inc.
- Country: US
- IP: 172.67.169.93
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["brit.ns.cloudflare.com", "emerson.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Netcraft", "SOCRadar", "Sophos", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/B5FRc6hg/a4cf326108f7.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/zotplay.com
- Wayback Machine: https://web.archive.org/web/https://zotplay.com
- PhishDestroy: https://phishdestroy.io/domain/zotplay.com/
- LLM endpoint: https://phishdestroy.io/domain/zotplay.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/zotplay.com/
Last updated: 2026-03-19