tronxminer[.]com

The domain tronxminer.com was registered on February 21, 2026 through Spaceship, Inc. and is currently active. DNS resolution points to IP address 91.204.209.6, which belongs to AS52148 operated by Enix Ltd in the United Kingdom. The host presents a valid Let's Encrypt R12 certificate and returns HTTP status 200 for the root request, with the page title reported as "Problem loading page". MX records consist of a single entry pointing to tronxminer.com itself, indicating a self‑hosted mail service.

Nameservers ns1.hostns.io and ns2.hostns.io are authoritative for the zone. Infrastructure analysis shows the web stack includes PHP, the Laravel framework, Bootstrap, LiteSpeed web server, and third‑party services such as Osano, jsDelivr, Google Analytics, and Google AdSense. The site is listed on one security blocklist, specifically PhishDestroy, which has flagged it as a crypto‑related scam. Gridinsoft assigns a trust score of 1 out of 100, reflecting a high likelihood of malicious intent.

VirusTotal has processed the domain with 93 scanning engines, none of which raised a detection; this absence of alerts does not constitute proof of safety and must be interpreted cautiously. The available evidence confirms the domain’s association with a crypto‑scam campaign, but the exact payload, phishing template, or targeted brand remain unverified because the page content beyond the title has not been captured. Defenders should treat the domain as malicious, block its IP and DNS entries at perimeter filters, add the domain to internal blocklists, and monitor for related activity from the same ASN or hosting provider. Continuous re‑scanning and content inspection are recommended to capture any future changes to the site’s behavior or payload.