official-zeddex-swap-5qa[.]pages[.]dev

PhishDestroy identifies official-zeddex-swap-5qa.pages.dev as an active cryptocurrency swap phishing site impersonating ZedDex. The domain is currently under investigation while threat analysts verify indicators of compromise and fraudulent transaction patterns. This scam leverages cloud hosting and deceptive page routing to harvest credentials and cryptocurrency deposits from unsuspecting users under the guise of a legitimate decentralized exchange interface.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it remains undetected by most automated security tools. It was registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and uses a Google Trust Services SSL certificate. The Cloudflare Pages domain (official-zeddex-swap-5qa.pages.dev) was created recently, with infrastructure hosted on Cloudflare’s edge network to evade geographic blocking and takedown efforts. Despite zero detections, the absence of brand legitimacy and the use of obfuscated routing paths raise high confidence in its malicious intent.

As of today, this phishing domain remains active and poses a direct threat to users searching for ZedDex or similar crypto trading platforms. PhishDestroy recommends that users immediately block 188.114.96.3 and report the domain to Cloudflare abuse channels. Avoid accessing any links or entering credentials on this domain. If compromised, revoke connected wallet permissions, change passwords, and report fraudulent transactions to relevant authorities. Monitor financial accounts for unauthorized activity related to crypto transactions.