access-ndaxx[.]zapier[.]app

access-ndaxx.zapier.app is a subdomain of zapier.app. PhishDestroy first observed the hostname on Aug 28, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 17 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, Sophos, VIPRE, Webroot on Aug 28, 2026 at 13:30 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 28, 2026 at 14:20 UTC. Spamhaus DBL: DBL_ABUSED_PHISH on Aug 28, 2026 at 14:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 28, 2026 at 14:07 UTC. URLScan captured the page on Aug 28, 2026 at 13:26 UTC.

The collector marked the hostname reachable on Aug 28, 2026 at 13:26 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 64.239.109.1 on AS16509 (Amazon.com, Inc.). The IP and ASN identify shared Vercel edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer.

The record contains 5 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.