securexpo[.]com

This domain, securexpo.com, is flagged as a credential phishing site specifically targeting users of the DezentraCore cryptocurrency wallet. Analysis of the page title and infrastructure suggests an attempt to impersonate the DezentraCore brand, likely to harvest wallet credentials or private keys. No direct evidence of a drainer kit was observed, but the use of Vue.js and Unpkg indicates dynamic content delivery consistent with phishing frameworks. Technical indicators confirm elevated risk: the domain was created on June 04, 2012, but repurposed for malicious activity, resolving to IP 188.114.97.3. It is registered through Gname.com Pte. Ltd. and secured with a Let's Encrypt SSL certificate. VirusTotal detection shows 3/95 security vendors flagging the domain, while Gridinsoft assigns a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. Technologies detected include Cloudflare, HTTP/3, and Cloudflare Browser Insights, which may obscure malicious traffic patterns. As of the latest scan, securexpo.com has been taken offline, reducing immediate exposure. However, the domain remains registered and could be reactivated. Users who interacted with the site should assume credential compromise and revoke access to any linked wallets or accounts. Security teams should monitor for related domains using the same registrar or IP range, as threat actors may migrate infrastructure. The 2012 creation date suggests prior benign use, increasing the risk of false trust if the domain resurfaces under new ownership.