auth-zeddex-swap-eng-us[.]pages[.]dev

This domain, auth-zeddex-swap-eng-us.pages.dev, is actively posing as a cryptocurrency exchange platform to conduct phishing attacks targeting users of digital asset services. Analysis indicates the site mimics legitimate exchange interfaces, likely harvesting login credentials, private keys, or prompting unauthorized transactions under the guise of a secure trading environment. The page title, 'Zeddex Swap - Secure and Fast Cryptocurrency Exchange Platform,' reinforces the deception by presenting a false sense of legitimacy to unsuspecting visitors seeking financial services. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on April 12, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.44.108, located in Canada. It is currently flagged by 1 out of 95 security vendors on VirusTotal, appears on at least one security blocklist, and is actively blocked by enterprise phishing protection systems. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as encryption is commonly exploited in phishing campaigns to appear trustworthy. Users who have visited auth-zeddex-swap-eng-us.pages.dev or interacted with its content should take immediate action to mitigate potential compromise. Disconnect any connected wallets or sessions, revoke permissions from associated decentralized applications, and monitor accounts for unauthorized transactions. If credentials were entered, reset passwords across all platforms where the same or similar credentials may have been reused. Report the domain to relevant security teams and consider scanning local devices for malware, as phishing sites may deploy additional payloads. Exercise heightened caution with unsolicited links or communications referencing cryptocurrency services.