claim-zeebit[.]com

Analysis of claim-zeebit.com shows a domain registered on September 5 2025 through NiceNIC International Group Co., Limited. The site is currently offline, returning an HTTP 523 status, which indicates that the origin server is unavailable. DNS resolution points to IP 104.21.24.206, an address owned by Cloudflare, Inc. (AS13335) located in the United States, and the domain is served via Cloudflare with HTTP/3 enabled. The authoritative nameservers are athena.ns.cloudflare.com and damian.ns.cloudflare.com, confirming the Cloudflare front‑end.

TLS is provided by a Google Trust Services certificate (WE1), so encrypted connections are possible but do not imply legitimacy. Reputation signals are overwhelmingly negative: Scamadviser assigns a trust score of 1 / 100, Gridinsoft rates the domain 0 / 100, and six of ninety‑five VirusTotal scanners flag the domain as malicious. The domain appears on two security blocklists and is explicitly blocked by PhishDestroy and ScamSniffer. Intelligence tags the scam type as a “Fake Airdrop” and attributes the underlying phishing kit to a “Gambler Scam.” The page title observed during the brief crawl reads “Zeebit.io – Fully Decentralized & Provably Fair On‑Chain Casino,” suggesting an attempt to masquerade as a cryptocurrency casino.

The threat actor also claims to impersonate Discord, aligning with the brand‑target indicator. While the exact content of the landing page cannot be confirmed due to the offline status, the convergence of low trust scores, multiple vendor detections, blocklist listings, and the fake‑airdrop narrative strongly indicates a malicious infrastructure. Defenders should block claim-zeebit.com at the DNS and proxy layers, monitor for any outbound connections to the associated IP address, and educate users that unsolicited Discord‑related airdrop offers from this domain are fraudulent. Continuous telemetry collection is advised to capture any re‑activation of the domain or related infrastructure.