pr[.]zetxperts[.]net

The domain pr.zetxperts.net is identified as a high-risk phishing domain primarily used as a crypto drainer. This domain does not appear to impersonate any specific brand but is associated with a page title 'Trading Software,' which may be used to lure victims into providing their crypto wallet credentials. The threat is significant, as crypto drainer phishing sites are designed to steal cryptocurrency from users by tricking them into entering their private keys or seed phrases on a malicious website.

Infrastructure analysis reveals that pr.zetxperts.net has been flagged by 14 out of 95 security vendors on VirusTotal, indicating a considerable level of detection. The domain is registered through NameCheap, Inc., and resolves to the IP address 172.67.215.204, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain was created on March 02, 2026, and currently has a Google Safe Browsing status flagging it as a phishing site. Additionally, the domain appears on three known security blocklists, further corroborating its malicious nature. The SSL certificate for this domain is issued by Google Trust Services / WE1, which is unusual for a legitimate site and may be an attempt to appear more trustworthy.

As of the latest assessment, pr.zetxperts.net is offline. However, the infrastructure and historical data suggest that the domain was actively used for malicious activities before being taken down. Users are advised to avoid interacting with this domain and to ensure that their devices and browsers are updated with the latest security patches. Despite the current offline status, the risk remains if the domain is reactivated. Security teams should monitor for any resurgence of activity and consider implementing DNS filtering to block access to this domain.