zksync-blog-git-adding-to-prividium-the-tm-matter-labs-651a8986[.]vercel[.]app
“ZKsync: The Elastic Network”
zksync-blog-git-adding-to-prividium-the-tm-matter-labs-651a8986.vercel.app — सामग्री अनुपलब्ध (HTTP 404). ब्रांड प्रतिरूपण: ZkSync; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 15/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CyRadar); Google Safe Browsing flagged; PhishDestroy score 95/100. रजिस्ट्रार: Vercel.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain zksync-blog-git-adding-to-prividium-the-tm-matter-labs-651a8986.vercel.app is actively engaged in brand impersonation targeting zkSync, a Layer 2 scaling solution for Ethereum. Analysis confirms the domain is currently operational and designed to deceive users into believing it is an official zkSync communication or resource. This activity aligns with tactics used to distribute crypto drainers or harvest credentials under false pretenses. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.67, hosted on Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common feature in both legitimate and malicious domains to avoid immediate suspicion. Security telemetry indicates the domain is flagged by 15 of 95 vendors on VirusTotal, with Google Safe Browsing explicitly categorizing it as phishing. Additionally, the domain appears on one security blocklist, and its page title, 'ZKsync: The Elastic Network,' mimics official zkSync branding to enhance credibility. Current status remains active, posing an ongoing risk to users unfamiliar with zkSync’s legitimate domains. Organizations and individuals are advised to block the domain and its resolving IP at the network level. Users should verify all zkSync-related communications through official channels, particularly those involving wallet connections or transaction prompts. Security teams are recommended to monitor for related infrastructure, such as subdomains or newly registered domains with similar naming patterns, and update detection rules to include this indicator of compromise.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
तकनीकें · 13 identified
Salesforce is a cloud computing service software (SaaS) that specializes in customer relationship management (CRM).
www.salesforce.com 100% विश्वासGoogle Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.
developers.google.com 100% विश्वासAmazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100% विश्वासStripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.
stripe.com 100% विश्वासReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% विश्वासSendGrid is a cloud-based email delivery platform for transactional and marketing emails.
sendgrid.com 100% विश्वासMixpanel provides a business analytics service. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its toolset contains in-app A/B tests and user survey forms.
mixpanel.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासAmazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application.
aws.amazon.com 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of zksync-blog-git-adding-to-prividium-the-tm-matter-labs-651a8986.vercel.app · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।