trx-aml[.]org

This domain, trx-aml.org, poses a threat through brand impersonation. It mimics Binance, a well-known cryptocurrency exchange, by presenting itself as a site for "Tron AML Check — TRON Risk Screening & Compliance." This false representation aims to deceive users into thinking they are on a legitimate platform, potentially leading to disclosure of sensitive information or financial losses.

Detection analysis indicates the domain is a threat with 11 out of 95 security vendors on VirusTotal flagging it as malicious. This domain was created on February 21, 2026, and registered through Tucows Domains Inc., which provides essential context on its legitimacy. The site's infrastructure was hosted in the US, resolving to IP address 172.67.212.184 under the Autonomous System AS13335 of Cloudflare, Inc., and utilized an SSL certificate issued by Google Trust Services.

If you visited this domain, it is recommended to immediately disconnect from the internet to prevent further data exfiltration. Check for unauthorized transactions or changes in your accounts, particularly related to cryptocurrency. Update any passwords you might have used or shared, and consider enabling additional security features like multi-factor authentication to safeguard your accounts. Report any suspicious activity to the platform you believe was impersonated, in this case, Binance, to ensure your security measures are intact and alert them about the impersonation attempt.