claim[.]zksnyc[.]in

Analysis of claim.zksnyc.in indicates that the domain was registered on February 21, 2026 and is presently taken offline. The site resolved to the Amazon Web Services IP address 75.2.60.5, which belongs to ASN 16509, a US‑based Amazon.com, Inc. hosting infrastructure. The TLS certificate presented is issued by the R3 intermediate authority, typical of Let’s Encrypt certificates, confirming that HTTPS was enabled while the domain was active. The page title returned by the HTTP response is “zkSync | Scaling the Ethos and technology of Ethereum”, which does not reference the targeted brand but suggests an attempt to associate the domain with Ethereum scaling solutions.

The domain is flagged as a crypto‑related scam that impersonates the Aave brand. Independent scanning on VirusTotal recorded nine detections out of ninety‑three antivirus engines, and the Gridinsoft trust score is zero out of one hundred, indicating a high confidence of malicious intent. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. The combination of a low trust score, multiple vendor detections, and explicit impersonation of Aave aligns with the classification of a crypto‑scam infrastructure.

Uncertainty remains around the exact content that was served before the takedown, as no visual or functional analysis is available. The page title alone does not confirm the presence of credential‑stealing forms or malicious payloads, and the single blocklist entry limits insight into broader distribution. Defenders should continue to block the IP address 75.2.60.5 and the domain name at DNS and proxy layers, monitor for any re‑registration attempts, and add the domain to internal watchlists.