zedatrades[.]com

Analysis of zedatrades.com, created on February 21, 2026 and currently taken offline, identifies a confirmed cryptocurrency‑related scam. The domain resolves to the IP address 172.67.183.100, which belongs to AS13335 operated by Cloudflare, Inc., placing the hosting infrastructure in the United States. Registration was performed through Dynadot Inc, and the authoritative nameservers are houston.ns.cloudflare.com and jasmine.ns.cloudflare.com. The site’s SSL certificate, identified as WE1, is active, indicating that encrypted HTTPS traffic was available while the domain was live.

The page title returned by the web server reads “Cryptocurrency - Cryptocurrency trading and invest platform,” matching the declared scam type of a crypto investment fraud. The domain is listed on one public security blocklist and has been flagged in a single AlienVault OTX pulse, demonstrating that threat‑intel sources have recognized it as malicious. VirusTotal scans show that 10 of 93 security vendors reported the domain as malicious, providing additional corroboration of its threat profile. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of high risk.

The domain is also recorded as blocked by PhishDestroy, further confirming that defensive platforms have taken remedial action. Impersonation of the brand “across” is noted, suggesting the site may have been used to lure victims by referencing that brand, although the specific content used for impersonation has not been publicly disclosed. Defenders should add 172.67.183.100 and the domain name to URL filtering and DNS sinkhole lists, ensure that any inbound or outbound traffic to the site is denied, and monitor for any residual connections that may arise from cached or hard‑coded references. Because the site is offline, ongoing surveillance of its hosting provider and associated Cloudflare IP ranges is advisable to detect possible re‑use of the same infrastructure for future campaigns.