zetaswap[.]fun

The domain zetaswap.fun is a confirmed phishing site engaged in brand impersonation targeting users of the Arbitrum cryptocurrency platform. It was designed to deceive victims into believing they were interacting with a legitimate service, specifically ZetaSwap, to facilitate cryptocurrency scams. As of the latest verification, zetaswap.fun has been taken offline, though it previously operated as an active threat.

Technical indicators confirm the malicious nature of zetaswap.fun. The domain was flagged by 1 of 95 security vendors on VirusTotal, including alphaMountain.ai, and appeared on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was registered on February 21, 2026, and resolved to the IP address 185.107.74.82, hosted by WEBO LLC in Sweden (AS200430). The SSL certificate was issued by R10, and the observed page title was 'ZetaSwap'. Gridinsoft assigned the domain a trust score of 0 out of 100, further indicating its fraudulent intent.

Users who interacted with zetaswap.fun should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, such as Google Safe Browsing, and consider notifying local cybersecurity authorities or the impersonated brand, Arbitrum, to assist in mitigating further risks.