triustbnk[.]com[.]zentlegacyexchange[.]com

The domain triustbnk.com.zentlegacyexchange.com is associated with a brand impersonation scam, specifically targeting the brand across. This phishing domain was designed to mimic legitimate services and deceive users into providing sensitive information or engaging in fraudulent activities. The site has been taken offline, but users who previously interacted with it should remain vigilant, as the threat level is considered elevated.

Technical analysis reveals that triustbnk.com.zentlegacyexchange.com had limited detection, with only 1 of 95 vendors on VirusTotal identifying it as malicious. Its registrar is Web Commerce Communications Limited dba WebNic.cc, and it was created on February 21, 2026. The domain resolves to the IP address 172.245.14.131, located in the US under AS36352 HostPapa. It appeared on one security blocklist, specifically PhishDestroy, and was issued an SSL certificate by R11. The page title observed was 'Triust Bank - Dedicated to innovating, simplifying, and humanizing digital banking'.

Victims of phishing attempts from triustbnk.com.zentlegacyexchange.com should take immediate action to protect themselves. If cryptocurrency is involved, users should revoke token approvals and transfer funds to a new wallet. For credential or login phishing, changing passwords, enabling two-factor authentication, and monitoring for fraudulent activity are advised. Users can report such phishing incidents to relevant authorities or cybersecurity organizations to help prevent further scams.