official-zeddex-swap[.]pages[.]dev

This domain is currently under investigation for generic_phishing activity, specifically targeting decentralized finance (DeFi) users with fraudulent swap, perpetuals, and lending services. The risk level remains unconfirmed, but preliminary indicators suggest malicious intent, particularly given the domain's association with impersonation of legitimate DeFi platforms. Analysis reveals the following technical details: the domain resolves to IP address 188.114.96.3, registered through Cloudflare, Inc. on April 18, 2026. Despite its recent creation date, it has already been flagged by one security blocklist (PhishDestroy). VirusTotal reports 0 out of 95 detections, indicating no current antivirus signatures recognize it as malicious. The SSL certificate is issued by Google Trust Services, and the site employs HSTS, Cloudflare, and HTTP/3 technologies. Gridinsoft assigns a trust score of 0/100, further suggesting high risk. The page title, 'Zeddex Swap: Spot, Perps & Lending Explained | ZedDex DeFi,' closely mimics legitimate DeFi service branding to deceive users. Mitigation steps for this threat type include immediate blocking of the domain and its associated IP (188.114.96.3) at the network perimeter. Security teams should monitor for user interactions with the domain, particularly in environments where DeFi or cryptocurrency activities occur. Endpoint protection should be updated to include this domain in phishing filters, and users should be educated on recognizing impersonation tactics in DeFi platforms. Given the domain's current offline status, further investigation into its hosting infrastructure and registration details is recommended to identify potential related threats or campaigns.