zkSync

Crypto & web3 Germanyzksync.ioRank 285 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
1
1 reported or listed
Registered lookalikes
40
5 listed by a source or an address list
Official domains
4
verified from zkSync's own sites and records

Certificate findings for zkSync

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to zkSync's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 6 findings, grouped by hostname

  1. apps-zksync.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    apps-zksync.xyz
    First seen
    2026-11-01 04:30 UTC
    First published
    2026-11-01 05:03 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 05:12 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 03:28 UTC to 2027-01-30 03:28 UTC
    Logged 2026-11-01 04:27 UTC in Google ParcelYard2027h1, entry 550,159,775
    SHA-256 a9aaf3df476703c35d548ba9b820119653966dd7d2dcbd4325ad41abaac509ba
    Public key SHA-256 6b4cc04c6630eaa9642aaa25586b60dff85912dba9cb1c565966b774683f75bb
    PhishDestroy
    Brand
    zkSync
    Addresses
    104.21.64.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8a80
    2606:4700:3033::6815:40fd
    Cloudflare
    Cloudflare (104.21.64.253, 172.67.138.128): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    apps-zksync.xyz
    Registered
    2026-03-10 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  2. mail.zksync-claim.space DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under zksync-claim.space, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    mail.zksync-claim.space
    First seen
    2026-10-29 09:46 UTC
    First published
    2026-10-29 09:51 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Reported
    PhishDestroy, listing zksync-claim.space and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 08:46 UTC to 2027-01-27 08:46 UTC
    Logged 2026-10-29 09:44 UTC in Google PlumbersArms2027h1, entry 504,165,337
    SHA-256 9dc47c17463fcb6723d59e3ea2e59d071ac761cae12d7195d9ded99c7407a141
    Public key SHA-256 ff793bb266780ca7ed39df17c2c717f670cddd8d92a07a80de2b95f4c8afd911
    PhishDestroy
    Brand
    zkSync
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    zksync-claim.space
    Registered
    2026-03-26 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  3. users-zksync.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    users-zksync.xyz
    First seen
    2026-10-29 05:16 UTC
    First published
    2026-10-29 05:41 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 05:51 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-29 04:14 UTC to 2027-01-27 04:14 UTC
    Logged 2026-10-29 05:13 UTC in Google ParcelYard2027h1, entry 500,253,726
    SHA-256 46931a612f14e78ae43a4c6b451a291092e7846a011b8a77b28b23a82eda3c58
    Public key SHA-256 6281de86c457f66545ce1ae5cc55f564ccd51d8ad14449e0752104e94cf08bf9
    PhishDestroy
    Brand
    zkSync
    Addresses
    104.21.70.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8a06
    2606:4700:3033::6815:46ab
    Cloudflare
    Cloudflare (104.21.70.171, 172.67.138.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    users-zksync.xyz
    Registered
    2026-03-07 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  4. zksyncwallet.org US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    zksyncwallet.org
    First seen
    2026-10-28 15:57 UTC
    First published
    2026-10-28 16:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 16:21 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-10-28 14:55 UTC to 2027-01-26 15:52 UTC
    Logged 2026-10-28 15:55 UTC in Google PlumbersArms2027h1, entry 491,628,556
    SHA-256 7af9119f21b2a377ecdcb1dfb924b1ba47bb100889c1af2e5eb8d6de5f23083d
    Public key SHA-256 e4b0778ecd5d5676c684dd105e214e64caf1bd4ae5fb499f0b6df0c7058964d7
    Brand
    zkSync
    Addresses
    104.21.87.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.147 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:57d5
    2606:4700:3031::ac43:9293
    Cloudflare
    Cloudflare (104.21.87.213, 172.67.146.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    zksyncwallet.org
    Registered
    2026-08-16 · Key-Systems GmbH
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

  5. user-zksync.xyz US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    user-zksync.xyz
    First seen
    2026-10-28 05:47 UTC
    First published
    2026-10-28 06:38 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 04:47 UTC to 2027-01-26 04:47 UTC
    Logged 2026-10-28 05:46 UTC in Google PlumbersArms2027h1, entry 484,087,206
    SHA-256 fa2b0c8d14607aa032903d72425a377499d9f308582f5a4ce9f8497ae06e6d50
    Public key SHA-256 41fa8ffa499e99104644cb4e3b56dab7519fed11c419a61b56efb7235bf370f2
    PhishDestroy
    Brand
    zkSync
    Addresses
    104.21.13.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:c5ad
    2606:4700:3037::6815:d28
    Cloudflare
    Cloudflare (104.21.13.40, 172.67.197.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    user-zksync.xyz
    Registered
    2026-03-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  6. www.zksync-claim.space DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under zksync-claim.space, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.zksync-claim.space
    First seen
    2026-10-26 20:16 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Reported
    PhishDestroy, listing zksync-claim.space and the names under it
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 791,399,040
    SHA-256 015ca0d0d0502d54c53f2b19cad91e8989ba0951108e4f7c0a4186c2793f4660
    PhishDestroy
    Brand
    zkSync
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    zksync-claim.space
    Registered
    2026-03-26 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:40 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches zkSync when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →