play[.]zeopox[.]com

The domain play.zeopox.com was observed on 2026-08-07 as part of an active generic phishing campaign. Automated scans indicate that the hostname resolves to the IPv4 address 64.7.198.11, which is currently listed on a single security blocklist. The same host is referenced by PhishDestroy, which has placed it in its blocklist for confirmed phishing use. VirusTotal analysis shows that 13 of 91 scanned security vendors have flagged the domain as malicious, providing additional corroboration of its threat status.

No further public intelligence, such as page title or SSL certificate details, has been released at this time. Infrastructure analysis suggests that the IP address is not shared with known benign services, but the limited number of blocklist appearances prevents a definitive attribution of hosting provider or autonomous system. The detection count on VirusTotal, while modest, aligns with the elevated risk rating assigned by the reporting entity.

Defenders should therefore treat any communications originating from play.zeopox.com as hostile and block network traffic to the domain and its resolved IP. Endpoint protection solutions that incorporate reputation feeds should be updated to include the domain and the associated IP address. Continuous monitoring of threat‑intel sources for additional indicators, such as new blocklist listings or further VirusTotal detections, is recommended to refine the risk posture as the campaign evolves.