zop75[.]com

This domain is flagged for elevated-risk brand impersonation, specifically targeting Ledger, a cryptocurrency hardware wallet provider. The threat involves fraudulent representation of the brand to deceive users into disclosing sensitive credentials or financial information, likely through a fake support or product page. The domain’s content, including the page title 'Home - zop 7.5 mg zopiclone tablet,' suggests an attempt to obfuscate its true purpose, possibly to evade automated detection systems or mislead victims into believing it is a legitimate pharmaceutical site.

Analysis indicates the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 31.184.236.246 and is currently offline. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Ubuntu, Yoast SEO, Apache HTTP Server, jQuery Migrate, and jQuery. The domain appears on one security blocklist and is flagged by 3 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious domains. Additional trust scores include a Gridinsoft trust rating of 0/100, further corroborating its malicious classification.

Mitigation steps for this brand impersonation threat include immediate blacklisting of the domain and its associated IP (31.184.236.246) across all network security controls. Organizations should monitor for any attempts to access this domain or related infrastructure, particularly within environments where Ledger products are discussed or used. User awareness training should emphasize the risks of interacting with unsolicited communications or websites claiming to represent cryptocurrency brands. Additionally, security teams should review logs for connections to the domain’s IP or any subdomains and investigate potential credential exposure or unauthorized transactions linked to this campaign.