trx-bridge-crypto[.]com

trx-bridge-crypto.com was registered on 21 February 2026 through Sollutium EU sp. z o.o. The domain resolves to the IP address 104.21.17.212, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are ns1.zomro.net and ns2.zomro.ru. TLS is provided by a Let’s Encrypt R13 certificate, and the web server reports Nginx with HTTP Strict Transport Security enabled, returning HTTP 200 for the root URL. Automated analysis by Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal records 13 detections out of 95 scanned security vendors. The domain appears on four independent blocklists and is specifically listed by PhishDestroy, Polkadot, Enkrypt, and Codeesura. These indicators collectively confirm active malicious use. The site advertises “Tron Bridge Crypto to Solana, Base and ETH with No KYC” in its page title and claims to facilitate cross‑chain transfers without identity verification. By referencing Solana, the page constitutes a brand‑impersonation campaign targeting users of that blockchain ecosystem. The classification as a cryptocurrency scam aligns with the observed page title and the high risk level assigned to the domain. Defenders should add trx-bridge-crypto.com to DNS and URL filtering rules and consider blocking the associated Cloudflare IP range if not already restricted. Monitoring of the ns1.zomro.net / ns2.zomro.ru name servers may reveal additional domains employing the same infrastructure. Updating intrusion detection signatures to flag HTTP responses containing the exact page title can improve early detection. Continuous re‑evaluation is advised, as further payloads or credential‑harvesting pages could be deployed beneath the same front‑end.