minecraft-download-zombie-apocalypse[.]pages[.]dev

PhishDestroy identifies minecraft-download-zombie-apocalypse.pages.dev as an active crypto drainer impersonating Minecraft content. The domain leverages a fake download page to trick users into connecting crypto wallets and signing malicious transactions that drain assets. This threat is classified as a high-risk crypto drainer due to its direct targeting of blockchain users under the guise of a game-related download. The domain is currently active and under investigation, with no confirmed takedown as of the latest scan.

This domain resolves to IP 172.66.45.30 and is registered through Cloudflare, Inc., using a Google Trust Services SSL certificate for added legitimacy. VirusTotal currently reports 0/95 detections, indicating it has evaded detection by most antivirus engines at this time. The domain is hosted on Cloudflare Pages, a legitimate platform often abused for phishing campaigns due to its fast deployment and built-in DDoS protection. Despite its recent creation and lack of blocklist presence, the domain’s naming convention and thematic content suggest a deliberate attempt to exploit Minecraft players seeking game-related downloads or mods. No historical blocklist entries were found, and domain reputation scores remain neutral due to its infancy.

To mitigate exposure to this crypto drainer, users should avoid interacting with any links or downloads from this domain, especially those claiming to offer Minecraft-related content or mods. Block the domain at the network level using DNS filtering or local hosts file entries. If a wallet connection was attempted, revoke any unauthorized permissions immediately using tools like revoke.cash or wallet-specific security features. Report the domain to Cloudflare via their abuse portal and submit samples to threat intelligence platforms like VirusTotal for further analysis. Exercise caution with any unsolicited game-related downloads, verifying sources through official Minecraft channels before proceeding.