trxrent[.]me

Analysis of trxrent.me, observed as offline on 23 July 2026, indicates that the domain was registered on 21 February 2026 through NameCheap, Inc. The authoritative nameservers are lola.ns.cloudflare.com and miles.ns.cloudflare.com, confirming that the domain is behind Cloudflare's DNS and edge network. Resolve queries return the IPv6 address 2606:4700:3032::6815:246, which belongs to AS13335 Cloudflare, Inc., located in the United States. The site presented the page title “波场能量租赁 - 3 TRX获得1小时USDT转账能量 | TRX Rent”, a Chinese‑language phrase describing a TRX rental service, and is classified as a crypto‑focused airdrop scam that impersonates the Telegram brand. The SSL certificate is issued by Google Trust Services under the WE1 root, indicating a valid TLS certificate at the time of observation. VirusTotal recorded six detections out of ninety‑three scanning engines, and the domain appears on a single external security blocklist.

Gridinsoft assigned a trust score of zero out of one hundred, reflecting a high confidence of malicious intent. PhishDestroy has already blocked the domain. MX records include an entry pointing to eforward2.registrar-servers.com with priority ten; additional MX data is incomplete. The technology stack includes Cloudflare services and HTTP/3 support.

No further public content was captured because the site was taken offline before a full scrape could be performed. Given the combination of brand impersonation, cryptocurrency‑related terminology, a low trust score, multiple vendor detections, and active blocking by at least one anti‑phishing platform, defenders should continue to blacklist trxrent.me, monitor for any re‑registration attempts, and ensure that email gateways reject messages claiming to originate from this domain. Network sensors should also flag traffic to the associated Cloudflare IP range when associated with Telegram‑related phishing campaigns.