zenithglobalcmc[.]com[.]ng

PhishDestroy identifies zenithglobalcmc.com.ng as an active crypto drainer phishing site. The domain mimics legitimate financial services to trick users into connecting wallets, approving malicious token transfers, or surrendering private keys. No specific brand is impersonated in public feeds, but the drainer kit uses Let’s Encrypt SSL to appear trustworthy and is designed to siphon crypto assets on user interaction.

Technical indicators include a VirusTotal detection ratio of 2/95 security vendors, a hosting IP of 163.61.188.5, and an SSL certificate issued by Let’s Encrypt. The domain was registered through a privacy-protected registrar and has not been listed on Google Safe Browsing (GSB) as of this assessment. Public blocklists currently show zero detections beyond VirusTotal, indicating low prior exposure.

The domain remains active and poses an elevated risk to cryptocurrency users. No takedown has been observed; therefore, users should avoid visiting zenithglobalcmc.com.ng entirely. To mitigate risk, verify unknown domains using PhishDestroy before any wallet connection or data entry. Remaining risk is considered elevated due to active hosting, low detection coverage, and the presence of a crypto drainer toolkit.