tronenergybank[.]com

Analysis indicates that the domain tronenergybank.com was registered on 2026-01-04 through Web Commerce Communications Limited dba WebNic.cc. The site resolves to IP 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The TLS certificate presented is identified as WE1, but no further certificate details are available. The public page title observed is “Free TRON Energy Rental — Zero‑Fee Transactions”, which aligns with the listed scam type of a crypto scam and the stated impersonation of the Binance brand. The domain has been added to at least one security blocklist and is currently listed as blocked by PhishDestroy.

Independent scanning on VirusTotal shows that 7 of 93 AV engines flagged the domain, reinforcing the malicious classification. The Gridinsoft trust score is 0 out of 100, indicating a lack of trust. The site’s status is reported as offline, suggesting that the malicious content may have been taken down or is temporarily inaccessible. Evidence gaps remain: no direct capture of the page content, login forms, or payloads has been published, and the exact nature of the “Free TRON Energy Rental” claim cannot be verified beyond the title. Consequently, it is unclear whether the domain was delivering malicious binaries, credential‑harvesting pages, or simply a fraudulent landing page.

Defenders should continue to block the domain and the associated IP address at network perimeter devices, update URL filtering lists, and monitor for new registrations that reuse the same registrar or host similar keyword combinations. Additional monitoring of Cloudflare‑hosted IP ranges for anomalous traffic patterns is advised. Incident response teams should treat any user‑submitted credentials or cryptocurrency addresses associated with Binance as potentially compromised if they originated from this domain.