zkcall[.]app

The domain zkcall.app is identified as a cryptocurrency phishing site targeting users of blockchain and decentralized communication platforms. Analysis confirms the domain was actively impersonating legitimate services under the guise of 'zk-Call & Digital Co.' to deceive victims into disclosing wallet credentials or installing malicious software. The domain is currently offline, but historical activity warrants continued monitoring. Infrastructure analysis reveals the domain was registered on February 22, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu and resolved to the IP address 188.114.97.3. Security vendors flagged the domain in 2 of 95 VirusTotal scans, while independent threat intelligence platforms such as Gridinsoft assigned it a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by cryptocurrency wallet providers and phishing detection systems. Detected technologies include Node.js, React, Next.js, and Cloudflare, suggesting a modern, obfuscated frontend designed to evade basic detection mechanisms. Current status indicates the domain has been taken offline, likely due to enforcement actions or abandonment by threat actors. However, the infrastructure remains a latent risk, as the domain could be reactivated or repurposed for future campaigns. Organizations and individuals are advised to block the domain and its associated IP at the network level, monitor for residual DNS queries, and alert users who may have interacted with the site prior to its takedown. Security teams should review logs for connections to 188.114.97.3 and correlate with known phishing indicators to identify compromised endpoints.