hub-zebec[.]com

This domain, hub-zebec.com, is flagged as a generic phishing site designed to impersonate Zebec DAO, a decentralized autonomous organization associated with cryptocurrency services. Analysis indicates the site likely functioned as a credential harvester or wallet drainer, targeting users of blockchain platforms. The page title, 'Zebec DAO,' directly mimics the legitimate organization, increasing the likelihood of successful social engineering attacks against unsuspecting victims seeking to interact with the DAO's services. Infrastructure analysis reveals the domain was registered on June 5, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently utilized in phishing campaigns. The domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare infrastructure, a common tactic to obfuscate the true origin of malicious sites. At the time of detection, the domain was flagged by 4 out of 95 security vendors on VirusTotal, with active listings on two security blocklists. The SSL certificate, issued by Google Trust Services, provided a false sense of legitimacy while the site employed HTTP/3 and Cloudflare technologies to evade basic detection mechanisms. As of the latest assessment, hub-zebec.com has been taken offline, likely in response to detection and blocking by security platforms. However, the domain's recent creation date and the use of a high-reputation registrar suggest the threat actors may attempt to re-deploy the phishing infrastructure under a new domain. Users who interacted with the site prior to its takedown remain at elevated risk of credential compromise or unauthorized wallet access. Organizations and individuals are advised to monitor for unauthorized transactions, revoke any connected wallet permissions, and implement multi-factor authentication where applicable to mitigate residual risk.