zksync[.]airdrpalerts[.]sbs

This domain, zksync.airdrpalerts.sbs, poses a significant risk as a brand impersonation scam targeting zkSync. The site is designed to trick users into believing they are interacting with the legitimate zkSync brand, potentially leading to the disclosure of sensitive information or financial loss.

Analysis indicates that 11 out of 95 security vendors on VirusTotal flag this domain as malicious. The domain was registered through Dynadot LLC on October 25, 2025. Infrastructure analysis reveals that the domain resolves to the IP address 192.178.155.147, which is located in the United States and associated with AS15169 Google LLC. Despite the IP's association with Google, the site does not have a valid SSL certificate, indicating a lack of security and authenticity.

If a user has visited zksync.airdrpalerts.sbs, they should immediately change any passwords or sensitive information that may have been entered on the site. It is also recommended to run a full system scan for any potential malware that may have been installed. Users should remain vigilant and report any suspicious activity to the official zkSync support channels or their local cybersecurity authorities.