zetswap[.]net

Analysis of zetswap.net indicates a confirmed cryptocurrency investment scam, classified under generic phishing with an elevated risk level. The domain, registered on March 14, 2026, through REGRU-RU, is currently offline as of the report date. Infrastructure analysis reveals Cloudflare hosting (AS13335) with an IP resolution of 172.67.135.110, located in the United States. Nameservers are configured as deb.ns.cloudflare.com and piotr.ns.cloudflare.com, consistent with Cloudflare's infrastructure. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently malicious issuer.

The page title, 'Zetswap | Cryptocurrency trading and invest platform,' explicitly identifies the site as targeting cryptocurrency users, aligning with the labeled scam type. Detection data shows the domain appears on one security blocklist and is flagged by PhishDestroy. VirusTotal reports 2 of 94 security vendors marking the domain as malicious, providing partial but not universal confirmation of its threat status. Technologies detected on the domain include jQuery, jQuery Migrate, Cloudflare Browser Insights, and HTTP/3, none of which are inherently malicious but are frequently used in both legitimate and fraudulent sites.

Defenders should treat this domain as a confirmed phishing threat, particularly for users involved in cryptocurrency trading. The domain's offline status may indicate takedown efforts or temporary suspension, but historical resolution data should be reviewed for potential re-emergence. Network-level blocking of 172.67.135.110 and monitoring for related domains under the same registrar or hosting provider is recommended. No additional brand impersonation or specific phishing kit details are available from the provided intelligence.