# trx-gas.app — MALICIOUS

> trx-gas.app was identified as a high-risk phishing domain and has been taken offline. Learn what to do if you encountered this site.

## Summary
PhishDestroy identifies trx-gas.app as a dangerous phishing domain that posed significant risks to user safety. This site was flagged for social engineering and appeared on multiple security blocklists, indicating a serious threat to visitors.

The phishing operation on trx-gas.app aimed to trick users into revealing sensitive information by masquerading as a trustworthy service. Attackers used deceptive tactics to capture credentials or personal data for fraudulent use.

If you visited trx-gas.app, immediately avoid entering any information. Run a full antivirus scan and monitor your accounts for unusual activity. Consider changing passwords and enabling two-factor authentication to enhance security.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.4.119
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["malavika.ns.cloudflare.com", "trevor.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Ermes", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Kaspersky", "SOCRadar", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb01c-13a2-7220-98a8-ff1bf1729956.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/00f03717-5c4f-468a-8b32-c106caf1f503
- PhishDestroy: https://phishdestroy.io/domain/trx-gas.app/
- LLM endpoint: https://phishdestroy.io/domain/trx-gas.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trx-gas.app/
Last updated: 2026-03-19