zetamarket[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation site specifically targeting Aptos, a blockchain platform. Analysis indicates the site mimics legitimate services to deceive users into disclosing credentials or transferring assets, a tactic commonly associated with crypto-related fraud. Infrastructure analysis reveals the domain zetamarket.pages.dev was registered on February 05, 2025, through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, hosted under AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1). VirusTotal detection shows 2 out of 95 security vendors have flagged the domain as malicious. The domain appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. The page title, 'Zeta Markets,' suggests an attempt to impersonate a legitimate trading or financial service. Mitigation steps for this threat type include immediate blocking of the domain and its associated IP (188.114.96.3) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to the domain. Users should be alerted to the impersonation risk, particularly those interacting with Aptos-related services, and advised to verify domain authenticity before entering credentials or initiating transactions. Monitoring for similar domains registered under Cloudflare or resolving to the same IP range is recommended to identify potential follow-up campaigns.