support-zeddex-swap-helps[.]pages[.]dev

PhishDestroy’s automated crawlers flagged the domain support-zeddex-swap-helps.pages.dev as an active generic phishing page posing as Zeddex Swap support. The page delivers a cryptocurrency drainer kit designed to siphon wallet funds under the guise of troubleshooting assistance. No exact brand impersonation string is visible in the payload path, indicating a generic but targeted lure aimed at Zeddex users seeking help.

Technical indicators confirm a high-risk configuration: the domain resolves to IP 172.66.47.125 via Cloudflare, Inc. as registrar. The SSL certificate is issued by Google Trust Services (GTS), and at the time of discovery only 1 out of 95 VirusTotal engines flagged the URL. No creation date is exposed through public WHOIS due to Cloudflare privacy protection. The site remains unlisted on major blocklists as of the latest scan, but the low detection rate signals a window of opportunity for threat actors.

The domain is currently active and propagating through social engineering channels targeting crypto users. PhishDestroy has issued an immediate takedown request to Cloudflare Trust & Safety and added the domain to its real-time blocklist. Despite these actions, the domain’s Cloudflare infrastructure and Google-issued SSL certificate lower the barrier for reuse in future campaigns. Users are advised to manually block 172.66.47.125 and avoid any Zeddex Swap support links outside official zeddex.com domains. The residual risk remains elevated due to the drainer kit’s modular nature and potential for rapid rebranding.