vote-zebechq[.]pages[.]dev

The domain vote-zebechq.pages.dev is currently identified as a credential theft threat, associated with the Zebec Network brand. The site presents itself as a legitimate platform for real-time crypto payroll and payments, potentially misleading users into providing sensitive information. There is no indication of a known drainer kit being utilized in this instance, but the nature of the content suggests a focus on extracting user credentials.

Technical indicators reveal that the domain has a VirusTotal score of 1/95, meaning only one of the 95 security vendors has flagged it as malicious. The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.98, which is located in the US under AS13335, also associated with Cloudflare, Inc. The domain currently appears on two security blocklists, namely PhishDestroy and ScamSniffer, indicating its recognition as a threat within the security community. The precise creation date of the domain is not provided, but its active status warrants immediate attention.

Currently, the domain vote-zebechq.pages.dev is active and poses a high risk to users. Given its presence on security blocklists and the minimal flagging by VirusTotal, users are advised to exercise caution and avoid interaction with this domain. Organizations should implement security measures to block access to this domain and educate users on the risks of credential theft, particularly in the context of cryptocurrency-related scams.