cedjtas[.]ahss[.]store

The domain cedjtas.ahss.store has been identified as a brand impersonation threat specifically targeting the ankr platform. This domain is currently offline, but while active it presented itself as a Creditas-branded page, likely designed to deceive users into revealing sensitive credentials or connecting cryptocurrency wallets. The impersonation of ankr, a legitimate blockchain and crypto infrastructure provider, indicates a high risk for users in the decentralized finance space.

Analysis of the domain reveals several technical indicators of malicious intent. It was registered on February 21, 2025, through NETWORK SOLUTIONS, LLC., and resolves to IP address 62.60.226.175. The domain is flagged by 2 out of 95 security vendors on VirusTotal, and appears on one security blocklist. Its SSL certificate was issued by Google Trust Services (WR2), which is standard for many legitimate sites but does not guarantee safety. The low detection rate on VirusTotal suggests the domain evaded many security tools, underscoring the importance of manual verification.

Given the current offline status, the immediate threat is neutralized, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with this domain—especially by entering credentials or connecting wallets—should change their passwords and revoke any permissions immediately. Always verify URLs through official channels before engaging with platforms like ankr. For ongoing protection, consult PhishDestroy's database for real-time updates on phishing domains. Stay safe by double-checking every link and never trusting unsolicited redirects.