trojanbots[.]online

The domain trojanbots.online was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows that the domain resolves to the IPv6 address 2606:4700:3036::ac43:c24e, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The SSL certificate associated with the site is identified as WE1, indicating the use of a publicly‑available TLS certificate rather than a brand‑specific credential.

Threat intelligence sources have recorded the domain on a single security blocklist and it has been blocked by the PhishDestroy service. A trust score of 0 out of 100 was assigned by Gridinsoft, reflecting a lack of confidence in the domain’s legitimacy. VirusTotal analysis reports that one of ninety‑three security vendors flagged the domain, demonstrating at least minimal detection by automated scanners.

The overall detection surface therefore includes a modest blocklist presence, a low trust score, and a single vendor flag, but the limited number of detections suggests that the campaign may have been short‑lived or not widely distributed. Defensive recommendations include adding the IPv6 address and the domain to local deny lists, monitoring for any resurrection of the domain or similar‑looking variants, and ensuring that endpoint protection solutions are updated to reflect the observed threat indicator. Because the site is offline, active probing is not possible, and no page title or brand impersonation information is currently available; analysts should treat the domain as a generic phishing infrastructure pending further evidence.