# setup-live-zdx-finance.pages.dev — SUSPICIOUS

> setup-live-zdx-finance.pages.dev hosts a counterfeit finance login page detected engaging in credential theft phishing. 0/95 VirusTotal detections. Inspect here.

## Summary
PhishDestroy identifies setup-live-zdx-finance.pages.dev as an active fake finance login phishing site designed to steal user credentials and financial data.

This domain was flagged with a live threat signature and currently operates under Cloudflare’s Pages.dev platform resolving to IP 172.66.47.13 via Google Trust Services SSL. VirusTotal scanning returned 0 detections out of 95 engines, indicating no blacklist presence yet despite active phishing payloads. The domain is newly registered and hosted on a dynamic Cloudflare edge IP without prior reputation history, making it particularly dangerous for unsuspecting users.

Credential theft phishing sites like this mimic reputable financial portals to harvest login credentials and sensitive financial inputs. Users who enter information risk direct account takeover, unauthorized transactions, and identity theft. Mitigation requires avoidance of embedded login forms, verification through official channels, and immediate account lockout if exposed. Always access financial services via verified bookmarks or official domains—never through redirects or third-party hosted forms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.13

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/setup-live-zdx-finance.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/setup-live-zdx-finance.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/setup-live-zdx-finance.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/setup-live-zdx-finance.pages.dev/
Last updated: 2026-04-04