zenithpay[.]org[.]coinexpressprofittrading[.]xyz

The domain zenithpay.org.coinexpressprofittrading.xyz hosted a webpage titled "Zenith Pay" and was identified as an impersonation scam targeting the Mastercard brand. The site posed as a legitimate payment or financial service, likely aiming to deceive users into providing sensitive financial information or credentials under the guise of a trusted brand.

Technical analysis confirms the site is malicious. VirusTotal detected 5 out of 95 security vendors flagged the domain as malicious, including CyRadar, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, and SOCRadar. The domain was created on 2026-02-21 and uses SSL certificate type R10. GridinSoft trust rating is 0 out of 100, and the domain risk score is 63, indicating a high probability of malicious activity.

The site is currently offline and inaccessible. Based on the low trust rating, high risk score, and multiple security vendor flags, the threat level is assessed as high. Users should avoid any interaction with this domain, as it was designed for impersonation and potential credential theft.