zcashfoundation[.]com

The domain zcashfoundation.com is currently under investigation for brand impersonation targeting the cryptocurrency platform Across. Analysis indicates the site was designed to deceive users by presenting itself as an official Zcash Foundation entity, though no direct affiliation with the legitimate organization exists. The domain has been taken offline, but prior activity suggests potential crypto-related fraud or credential harvesting attempts. Infrastructure analysis reveals the domain was registered through Squarespace Domains LLC on April 18, 2025, and resolved to the IP address 172.66.167.150. Detection metrics show 0 detections out of 95 VirusTotal vendors, though it appears on one security blocklist. The site employed WordPress, MySQL, PHP, and other common web technologies, with a Let's Encrypt SSL certificate. Gridinsoft assigned a trust score of 0/100, further indicating high-risk characteristics. The page title, 'Home - Zcash Foundation,' reinforces the impersonation attempt. At present, zcashfoundation.com is offline, but users who may have interacted with the domain should monitor for unauthorized transactions or account access. Security teams are advised to block the domain and associated IP in perimeter defenses. Organizations should educate users on verifying official domains and scrutinizing SSL certificates, particularly for crypto-related services. Continued monitoring of newly registered domains impersonating blockchain entities is recommended to mitigate similar threats.