zeopox[.]com

This domain, zeopox.com, is flagged as an active brand impersonation threat targeting Base, a prominent blockchain platform. Analysis indicates the site operates as a fraudulent online crypto casino, leveraging blockchain terminology to deceive users into engaging with malicious financial transactions. No direct evidence of a drainer kit was observed, but the domain’s structure and content align with known crypto-scamming tactics, including fake reward schemes and wallet-draining mechanisms. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on May 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with abusive registrations. It resolves to IP address 104.21.32.230, hosted on Cloudflare infrastructure in Canada, a common obfuscation tactic. The SSL certificate is issued by Let’s Encrypt (serial E7), providing a false sense of security. Detection metrics show 18 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on three independent security blocklists. Google Safe Browsing has not yet classified the domain, leaving a gap in automated protection. The domain remains active as of the latest assessment, with no takedown or sinkholing observed. Response actions by security entities include blocking by PhishDestroy, MetaMask, and SEAL, indicating cross-industry recognition of the threat. Despite these measures, the domain continues to resolve and serve content, posing a residual risk to users unaware of its fraudulent nature. Recommendations include immediate blocking at the network and endpoint levels, user education on blockchain-based scams, and monitoring for related domains using similar naming conventions or infrastructure patterns.