claim-zeuz[.]trade

The domain claim-zeuz.trade was registered on February 21, 2026 and is currently taken offline. DNS resolution points to IP address 104.21.76.234, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The site presents a page title of "zeuz" and uses an SSL certificate identified as WE1. Infrastructure analysis shows the domain appears on two security blocklists and has been explicitly blocked by the PhishDestroy and ScamSniffer filtering services.

A Gridinsoft trust score of 0 out of 100 further indicates a lack of credibility. VirusTotal scans report that two of ninety‑five security vendors flagged the domain, reinforcing the suspicion of malicious activity. The intelligence categorizes the threat as a crypto scam, specifically a crypto drainer, which typically seeks to illicitly acquire cryptocurrency assets from victims. While the domain is offline, the presence of blocklist entries, low trust score, and vendor detections provide concrete evidence of its malicious intent.

Uncertainty remains regarding the exact payload or phishing page content because the site is not presently reachable for direct analysis. Defenders should add claim-zeuz.trade to deny‑list rules, enforce DNS‑based blocking, and monitor traffic to the associated Cloudflare IP for any residual activity. Continuous re‑evaluation is advised in case the domain is re‑activated or the underlying infrastructure is repurposed for further crypto‑draining campaigns.