zoth[.]cam

This domain, zoth.cam, poses a targeted crypto drainer threat by impersonating the Across Protocol, a cross-chain bridging platform. The site presents itself as the "Official Zoth Atlas Platform" with a deposit interface designed to harvest wallet credentials and initiate unauthorized transactions, draining cryptocurrency assets from victims. Analysis of the page structure and metadata indicates the primary objective is to deceive users into connecting their wallets under the pretense of legitimate token deposits, a common tactic in crypto-focused phishing campaigns. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, through Global Domain Group LLC, a registrar frequently associated with fraudulent registrations. It resolves to the IP address 104.21.58.112 and appears on four distinct security blocklists. Detection engines report a VirusTotal score of 6/95, with vendors explicitly flagging the domain for brand impersonation and crypto-related fraud. Additional automated detection systems, including wallet protection tools, have blocked access to this domain, further corroborating its malicious intent. Users who visited zoth.cam or interacted with its deposit interface should immediately revoke any connected wallet permissions and transfer assets to a secure wallet. It is critical to audit all recent transactions for unauthorized activity, particularly those involving cross-chain bridges or token swaps. If credentials were entered, assume compromise and monitor associated accounts for signs of exploitation. Security teams should update blocklists to include this domain and its resolving IP, while users are advised to verify the authenticity of any platform claiming affiliation with Across Protocol through official communication channels only.