zksyncxdashboard.com was registered on May 09, 2026 through Name.com, Inc. The domain resolves to the IPv4 address 185.158.133.1 and is currently hosted on nameservers ns1hwy.name.com, ns2fln.name.com, ns3fqs.name.com, and ns4jnz.name.com. Independent blocklists have listed the domain on three security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that three of ninety‑one scanned security vendors flagged the domain as malicious, confirming a detection signal across multiple AV engines. The threat classification is recorded as generic phishing, and the risk level has been assigned as high.
The domain remains active as of the report date, July 30, 2026. The available evidence indicates that the infrastructure is deliberately configured to support credential‑stealing campaigns, likely aimed at users of blockchain wallets given the involvement of MetaMask in the blocklist. No public page title, SSL certificate details, or HTTP response codes have been released, leaving the exact content of the landing page unverified. Consequently, the precise phishing vector and any payload delivery mechanisms cannot be confirmed at this time.
Defenders should add 185.158.133.1 to network deny lists, block all DNS queries for zksyncxdashboard.com, and ensure that endpoint protection solutions incorporate the three vendor detections reported by VirusTotal. Monitoring for similar domain patterns that combine zkSync with dashboard terminology is recommended, as the naming convention suggests a targeted campaign against cryptocurrency users. Continuous re‑evaluation of blocklist status and periodic rescans on VirusTotal are advised to capture any evolution of the threat.