zebec[.]news

This domain, zebec.news, is flagged as an active generic_phishing threat targeting users of the Zebec decentralized autonomous organization (DAO). The site presents itself as the legitimate Zebec DAO platform, likely aiming to harvest cryptocurrency wallet credentials or distribute malicious smart contracts. No specific drainer kit signatures have been confirmed, though the infrastructure aligns with common phishing toolkits observed in prior crypto-themed campaigns. Infrastructure analysis reveals the domain was registered on May 29, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 188.114.96.3, which is associated with Cloudflare services, potentially masking the true hosting origin. Detection metrics indicate 6 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain appears on three independent security blocklists and is actively blocked by multiple cryptocurrency wallet protection mechanisms. Technologies detected include Cloudflare Browser Insights and HTTP/3, suggesting modern evasion techniques. As of the latest assessment, zebec.news remains operational, though mitigated by widespread blocklisting. Users are advised to verify domain authenticity through official Zebec DAO communication channels and avoid interacting with any unsolicited links. The elevated risk level persists due to the domain's active status and the potential for credential theft or financial loss. Organizations should update blocklists to include this domain and monitor for related infrastructure, such as newly registered domains under the same registrar or IP range.