zeta-zex[.]pages[.]dev

This domain is flagged as a crypto drainer operation specifically targeting users of Zeta Markets, a decentralized derivatives exchange. The page title 'Zeta Markets | Token' indicates an attempt to impersonate the legitimate platform, likely to trick victims into connecting wallets or approving malicious smart contracts that siphon funds. Analysis reveals the domain is designed to exploit trust in the Zeta Markets brand, a common tactic in crypto-related fraud schemes. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on May 06, 2026, an unusually future creation date suggesting potential manipulation or misconfiguration. It resolves to IP 188.114.97.3, a Cloudflare-hosted address in Canada, and is currently blocked by two security blocklists: PhishDestroy and ScamSniffer. Despite its active status, the domain shows 0/95 detections on VirusTotal, indicating it may not yet be widely flagged by security vendors. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of legitimacy. Users who visited zeta-zex.pages.dev should immediately revoke any wallet approvals or smart contract interactions conducted on the site. Check connected dApps and wallet permissions for unauthorized access, particularly for contracts linked to the domain. If funds were transferred or wallet credentials entered, consider the wallet compromised and transfer remaining assets to a new, secure wallet. Monitor transaction history for unexpected token approvals or outgoing transfers. Report the domain to relevant crypto security platforms to aid in broader detection efforts.