zebec[.]my

zebec.my was observed for the first time on July 21 2026, the same day it was registered through Dynadot LLC. The domain is currently active and resolves to the Cloudflare‑served address 104.21.35.204. Its authoritative nameservers are jill.ns.cloudflare.com and sam.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. VirusTotal has indexed the domain with scans from 91 antivirus vendors; to date none of the engines have raised a detection. The domain appears on three independent phishing‑related blocklists—PhishDestroy, MetaMask and SEAL—and is therefore already being filtered by those services.

No additional public threat‑intelligence sources such as Google Safe Browsing, OTX, or SSL certificate transparency logs are referenced in the available data, and no page title or brand targeting information has been published. Consequently, the exact phishing lure, credential‑stealing page design, or targeted victim demographic remain unknown. The lack of a reported detection does not imply benign intent, and the presence on multiple blocklists confirms a high‑risk classification.

Defenders should proactively block or sinkhole zebec.my at network perimeters, add the IP address 104.21.35.204 to deny‑list rules, and monitor DNS queries for related Cloudflare nameservers. Continuous re‑scanning on VirusTotal and periodic checks of blocklist feeds are recommended to capture any future changes in malicious behavior. Organizations should also consider user‑education campaigns that reinforce vigilance against unsolicited communications that reference the zebec.my domain.