agnzetrta[.]com

This domain is flagged as an active credential phishing threat targeting users through a fraudulent AI-powered document analysis platform. The site mimics legitimate productivity tools to harvest login credentials, corporate access tokens, or financial information under the guise of providing AI-driven insights. Analysis indicates the domain was specifically designed to exploit trust in automation and cloud-based services, potentially targeting business professionals or enterprise users. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 91.92.243.36, which has been linked to other phishing campaigns. At the time of assessment, 5 out of 95 security vendors on VirusTotal had flagged the domain as malicious, and it appeared on one security blocklist. The page title, 'QuickInsight AI — AI-Powered Document Analysis & Insights,' was crafted to appear legitimate and align with trending enterprise software offerings. If you visited agnzetrta.com or entered any credentials on the site, immediate action is required. First, revoke any active sessions or tokens associated with the account used. Reset passwords for all accounts where the same credentials may have been reused, prioritizing email, financial, and corporate systems. Enable multi-factor authentication where available to prevent unauthorized access. Monitor accounts for unusual activity, such as unrecognized logins or transactions. If corporate credentials were exposed, notify your organization’s security team to assess potential lateral movement or data exfiltration risks. Finally, scan your device for malware, as phishing sites may deploy additional payloads to maintain persistence.