zkcclaims[.]network

PhishDestroy identifies zkcclaims.network as a crypto drainer threat, a type of malicious site designed to steal cryptocurrency wallet credentials and assets. The domain is currently offline, but it was actively used to target users by mimicking legitimate platforms. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, and resolves to IP address 172.67.191.111.

Security analysis shows that zkcclaims.network has been flagged in one AlienVault OTX threat pulse and appears on one security blocklist. VirusTotal reports 0 detections out of 95 vendors, indicating it may not yet be widely recognized as malicious. The SSL certificate is issued by Google Trust Services (WE1), and the page title displayed was "Just a moment..." which is a common Cloudflare challenge page, often used by malicious sites to delay analysis. Despite low detection rates, the threat intelligence strongly suggests a crypto drainer operation.

Given that the domain is now offline, the immediate risk is reduced, but users should remain cautious. PhishDestroy recommends avoiding any interaction with zkcclaims.network or similar domains. If you have previously visited this site or entered any credentials, it is crucial to secure your cryptocurrency wallets immediately and monitor for unauthorized transactions. Always verify URLs through trusted sources like PhishDestroy before entering sensitive information.