zedxpress[.]com

zedxpress.com was registered on 21 February 2026 and is presently taken offline. The domain resolves to IP 172.245.14.131, which belongs to AS36352 HostPapa and is geolocated in the United States. Registration was performed through Atak Domain Bilgi Teknolojileri A.S., a registrar known to host a variety of short‑lived domains. The site presented the page title “Zedxpress”, but no additional content has been captured.

Analysis by VirusTotal shows that three of ninety‑three scanning engines flagged the domain, indicating some level of malicious behavior. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the suspicion. The domain is listed on a single public blocklist and has been blocked by the PhishDestroy service. An SSL certificate identified as “R11” was observed, but the certificate details provide no further indication of legitimacy.

The intelligence categorizes the activity as a crypto scam and notes that the domain impersonates the brand “Across”. Because the site is no longer reachable, active payloads cannot be confirmed, and the exact phishing kit or malicious payload remains unknown. Defenders should continue to monitor for any resurgence of the domain or related infrastructure, enforce blocklisting of 172.245.14.131 at the network perimeter, and add zedxpress.com to internal URL filtering policies. Additional scrutiny of any future registrations using the same registrar or hosting provider is advised, as well as periodic re‑scans with multi‑engine services to capture any changes in detection status.