zeddex-eng-us[.]pages[.]dev

This domain, zeddex-eng-us.pages.dev, is flagged for brand impersonation targeting cryptocurrency users through a fraudulent exchange login portal. The page title, 'Home | Zeddex Exchange Login | Advanced Crypto Trading Platform,' mimics legitimate trading platforms to deceive victims into entering credentials or transferring funds. Analysis indicates this is an investment scam, likely designed to harvest login details or facilitate unauthorized transactions under the guise of a trusted crypto service. No specific drainer kit signatures have been identified, but the infrastructure aligns with common phishing frameworks used in financial fraud campaigns.

Technical indicators confirm the domain's malicious nature. VirusTotal reports 1 out of 95 security vendors flagging the domain, while it resolves to the IP address 172.66.46.211, hosted on Cloudflare infrastructure in Canada. The domain was registered on May 06, 2026, through Cloudflare Pages, a service frequently abused for hosting phishing content due to its ease of deployment and SSL provisioning. Google Safe Browsing (GSB) does not currently list the domain, but it appears on one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of legitimacy to unsuspecting users.

As of the latest verification, zeddex-eng-us.pages.dev remains active and unmitigated. The domain has been blocked by at least one security provider, but no takedown action has been observed. The risk level remains high due to the domain's operational status, the convincing mimicry of a crypto exchange, and the potential for credential theft or financial loss. Users are advised to avoid interacting with the domain, verify exchange URLs through official sources, and employ browser-based phishing filters. Organizations should update blocklists to include this domain and monitor for related infrastructure, such as the IP 172.66.46.211, which may host additional malicious content.