zentlegacyexchange[.]com

The domain zentlegacyexchange.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'across'. It operated as a cryptocurrency scam, presenting itself under the page title 'Zedxpress' to deceive users into interacting with fraudulent services. As of the latest verification, zentlegacyexchange.com has been taken offline, though it previously posed an elevated risk of financial loss for victims.

Technical indicators confirm the malicious nature of zentlegacyexchange.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appeared on 1 security blocklist (PhishDestroy). It was registered through Web Commerce Communications Limited dba WebNic.cc on 2026-02-21 07:01:08 and resolved to the IP address 172.245.14.131, hosted by AS36352 (HostPapa) in the US. The SSL certificate was issued by R11, and the Gridinsoft trust score for the domain was 0/100. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with zentlegacyexchange.com should take immediate safety steps to mitigate potential losses. Since this was a cryptocurrency scam, victims should revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. Additionally, monitor accounts for unauthorized transactions and report the domain to relevant platforms, such as the impersonated brand 'across', anti-phishing organizations, and local cybercrime authorities. Enabling two-factor authentication on all financial and cryptocurrency accounts is strongly recommended to prevent further compromise.