zebec-network[.]cloud

On August 01, 2026 the domain zebec-network.cloud was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and immediately flagged as a high‑risk generic phishing operation. The domain resolves to the IPv4 address 192.162.199.139 and is served by the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com. Infrastructure analysis shows a Gridinsoft trust score of 0 out of 100, indicating an extremely low reputation.

The domain appears on three public security blocklists and is actively blocked by the browser extensions PhishDestroy, MetaMask, and SEAL, suggesting that multiple anti‑phishing tools have identified malicious activity associated with the host. VirusTotal reports that seven of ninety‑one scanning engines have flagged the domain, reinforcing the suspicion of malicious intent despite the relatively low detection count. The threat is classified as generic phishing, with the specific objective of credential harvesting, and the current status is listed as active.

No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any additional payload characteristics, leaving those aspects of the attack surface uncertain. Defenders should prioritize immediate blocking of zebec-network.cloud at DNS and proxy layers, add the associated IP address 192.162.199.139 to network‑level deny lists, and monitor for any outbound connections to the host. Security teams are advised to update intrusion detection signatures to include the domain and its name‑server pattern, and to maintain vigilance for any related indicators that may emerge from further sandbox or threat‑intel feeds.