trontx[.]cc

This domain, trontx.cc, operates as a crypto drainer scam specifically targeting users of the TRON (TRX) blockchain. The site falsely advertises "Buy & Rent TRX Energy for Free Transactions" to lure victims into connecting their cryptocurrency wallets. Once connected, malicious scripts automatically drain funds by executing unauthorized transactions, a common tactic in crypto-focused phishing attacks. The threat is particularly dangerous due to its narrow targeting of TRX users, who may be enticed by promises of free energy or transaction benefits. Analysis of the domain reveals multiple red flags. Only 1 out of 95 security vendors on VirusTotal currently flag trontx.cc, indicating low detection rates despite its active malicious status. The domain was registered on July 07, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with fraudulent domains. Infrastructure analysis shows the site resolves to IP address 188.114.97.3, and it uses an SSL certificate issued by Google Trust Services, which does not validate the legitimacy of the site's content. No additional blocklist entries were identified beyond the single VirusTotal detection, suggesting the domain remains under-monitored. Users who have visited trontx.cc or connected a wallet to the site should immediately take action. Disconnect the wallet from all dApps and revoke any suspicious smart contract approvals using a blockchain explorer. Transfer remaining funds to a new, secure wallet and monitor all connected accounts for unauthorized transactions. If credentials were entered, assume they are compromised and update passwords for all associated accounts. Report the domain to relevant blockchain security platforms and consider submitting the URL to additional threat intelligence feeds to improve detection rates.