zillswift[.]pages[.]dev

zillswift.pages.dev is flagged by 11 out of 93 vendors on VirusTotal as a malicious domain. This site impersonates Binance, a major cryptocurrency exchange, and is designed to deceive users into divulging sensitive financial information. The domain is currently active and hosted on an IP address managed by Cloudflare, Inc. in the United States.

The domain uses the title 'Multiverse Deep Sync - One wallet, multiverse support,' which suggests a sophisticated cryptocurrency-related service. However, this is a front for phishing activities targeting Binance users. The page aims to exploit the trust associated with Binance to lure victims into providing their login credentials or other sensitive data.

Despite being listed on only one public blocklist, zillswift.pages.dev presents a significant threat due to its high platform risk score of 93/100. The site's SSL certificate is issued by Google Trust Services, adding a layer of perceived legitimacy to unsuspecting users. This highlights the importance of robust detection mechanisms, as the domain was first detected by PhishDestroy in February 2026, indicating its recent emergence in the threat landscape.