zealousswap[.]xyz

This domain, zealousswap.xyz, is flagged as a high-risk crypto drainer impersonating a decentralized exchange (DEX) for the Kaspa blockchain. The site presents itself as 'Zealous Swap - Kaspa DEX with Sustainable Liquidity Infrastructure,' a likely attempt to deceive users into interacting with malicious smart contracts designed to drain cryptocurrency wallets. Analysis indicates the use of a crypto drainer kit, a common tool in phishing campaigns targeting users of blockchain platforms, particularly those involved in decentralized finance (DeFi) or token swapping activities. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Dynadot Inc, and resolves to the IP address 172.67.143.138, hosted on Cloudflare's network (AS13335). The domain is currently flagged by 1 out of 95 security vendors on VirusTotal, and appears on three independent security blocklists. The SSL certificate is issued by Google Trust Services (WE1), a common practice among malicious domains to appear legitimate. No detections were reported by Google Safe Browsing (GSB) at the time of analysis, though this does not preclude the domain's malicious intent. The domain remains active and continues to pose a significant risk to users, particularly those engaging with Kaspa-based DeFi platforms. Response actions include blocking by PhishDestroy, MetaMask, and SEAL, though the domain's hosting on Cloudflare infrastructure complicates takedown efforts. Users are advised to exercise extreme caution when interacting with decentralized exchange platforms, verify domain authenticity through official sources, and avoid connecting wallets to unverified smart contracts. Organizations should update blocklists to include this domain and monitor for related infrastructure, such as associated IP addresses or SSL certificates, to mitigate further exposure.