zolotonexus[.]com

This domain, zolotonexus.com, is flagged as an elevated-risk brand impersonation threat specifically targeting users of the Ankr platform. Analysis indicates the site presented itself as an autonomous equity engine under the page title 'ZOLOTO NEXUS | Autonomous Equity Engine,' a likely attempt to deceive visitors into believing it was affiliated with Ankr’s legitimate services. No direct evidence of a crypto drainer kit was observed, but the domain’s infrastructure and branding suggest intent to mislead users into disclosing sensitive information or transferring assets under false pretenses.

Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered through Tucows Domains Inc. on December 13, 2025, and resolved to the IP address 75.2.60.5. Security vendors on VirusTotal flagged the domain at a 3/95 detection rate, while it appeared on one security blocklist. The SSL certificate was issued by DigiCert Inc, and technologies such as Netlify, jsDelivr, and HSTS were detected on the site. Despite these red flags, the domain was only blocked by a single security entity prior to being taken offline.

As of the latest assessment, zolotonexus.com has been taken offline, reducing immediate exposure risk. However, residual threats persist due to the domain’s recent activity and the potential for re-emergence under a similar infrastructure. Users who interacted with the domain are advised to monitor accounts for unauthorized transactions, revoke any connected wallet permissions, and verify the legitimacy of any communications referencing Ankr. Organizations should update blocklists to include this domain and its associated IP address to prevent future access attempts.