# tronscaner.pro — SUSPICIOUS

> PhishDestroy identifies tronscaner.pro as a fake TRON blockchain scanner site pushing a generic phishing drainer kit.

## Summary
PhishDestroy identifies tronscaner.pro as a fake TRON blockchain scanner domain pushing a generic phishing drainer kit designed to steal cryptocurrency wallet credentials and assets.

Domain metrics show this active threat has a VirusTotal detection score of 1/95 security vendors, registered via WebNic.cc on March 19, 2026, resolving to IP 109.120.150.187 with a Let's Encrypt SSL certificate. No Google Safe Browsing classification was present, and the domain has not yet been widely blocklisted.

The domain remains active and poses an elevated phishing risk, particularly to users seeking legitimate TRON blockchain scanning tools. Users are advised to block access at the network level and avoid any interaction with this domain. Remaining risk is elevated due to active hosting and low detection coverage.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 19:09:27
- Registrar: Web Commerce Communications Limited dba WebNic.cc
- IP: 109.120.150.187

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a514a125-bb4f-4ff8-950f-200b33a04b90
- PhishDestroy: https://phishdestroy.io/domain/tronscaner.pro/
- LLM endpoint: https://phishdestroy.io/domain/tronscaner.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tronscaner.pro/
Last updated: 2026-03-21