zksync-drop[.]info

PhishDestroy has identified zksync-drop.info as an elevated-risk domain engaged in brand impersonation targeting Facebook. This threat, currently offline, was designed to deceive users into believing they were interacting with legitimate Facebook services, likely to harvest credentials or personal information. The domain's page title, "Summer Vibes - Collection Été," suggests a seasonal lure to attract victims.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 5 out of 95 security vendors marking it as dangerous. The domain was created on February 21, 2026, and resolves to IP address 223.29.226.118. It holds an SSL certificate from R11 and appears on one security blocklist. These factors, combined with its recent creation and low trust scores, underscore its suspicious nature.

Users who encounter zksync-drop.info should avoid any interaction, including clicking links or entering data. As the domain is already offline, the immediate threat is contained, but vigilance is advised. PhishDestroy recommends monitoring for similar domains and reporting any suspicious emails or messages referencing Facebook promotions. Regular password updates and enabling multi-factor authentication on Facebook accounts provide additional layers of security against such impersonation attacks.