zeta-coin[.]pages[.]dev

This domain, zeta-coin.pages.dev, is currently under investigation for operating a cryptocurrency token phishing scheme. Analysis indicates the site mimics Zeta Markets, a legitimate decentralized exchange, to deceive users into disclosing wallet credentials or transferring digital assets to attacker-controlled addresses. The page title, 'Zeta Markets | Token,' reinforces the deception by presenting itself as an official token distribution or staking portal, a common tactic in crypto-related fraud campaigns.

Technical indicators confirm the domain's suspicious nature. As of the latest scan, the site has received 0 detections out of 95 security engines on VirusTotal, suggesting it has not yet been widely flagged by automated systems. The domain was registered through Cloudflare, Inc. on April 29, 2026, and resolves to the IP address 188.114.96.3, located in Canada and associated with Cloudflare's infrastructure. While the domain appears on only one security blocklist, the SSL certificate is issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting users. The use of Cloudflare's registrar and hosting services is consistent with phishing operators seeking to obscure their infrastructure and evade detection.

Users who have visited zeta-coin.pages.dev or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any cryptocurrency wallets that may have been linked to the site and revoke any suspicious token approvals using a blockchain explorer or wallet management tool. Monitor connected accounts for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security platforms and cryptocurrency abuse databases to assist in broader takedown efforts. Given the domain's recent creation and low detection rate, heightened vigilance is advised when encountering similar crypto-related offers or token distribution pages.