began-zeddex-swap-eng-us[.]pages[.]dev

PhishDestroy identifies the domain began-zeddex-swap-eng-us.pages.dev as an active phishing threat designed to mimic legitimate cryptocurrency swap services. This fraudulent site lures victims with the promise of low-fee token exchanges, only to harvest login credentials or drain connected wallets. The domain resolves to IP address 188.114.96.3, a Cloudflare-hosted address that obscures its true origin while providing SSL encryption via Google Trust Services certificates to appear legitimate. With zero detections on VirusTotal at the time of analysis, this site represents a stealthy threat that evades immediate detection. This domain was flagged through domain safety monitoring with confirmed indicators: VirusTotal 0/95 detections, Cloudflare registration, and hosting on 188.114.96.3. The SSL certificate issued by Google Trust Services further legitimizes its appearance despite malicious intent. The combination of zero AV detections, Cloudflare’s anonymizing infrastructure, and the use of a reputable SSL issuer creates a dangerous phishing vector that particularly targets cryptocurrency users seeking transactional services. If you visited began-zeddex-swap-eng-us.pages.dev, immediately disconnect any connected crypto wallets and revoke permissions through your wallet interface. Scan your device with updated antivirus software and change passwords used on the site. Report the domain to your antivirus provider and consider reviewing blockchain transactions for unauthorized transfers. Monitor financial accounts for suspicious activity and use hardware wallets for future transactions to prevent credential harvesting.