trxny[.]org

This domain, trxny.org, is flagged as a generic phishing site specializing in cryptocurrency fraud. Analysis indicates the site mimics legitimate USDT to TRX token swap platforms, likely deploying a wallet-draining kit to intercept private keys or seed phrases during simulated transactions. The page title, 'USDT to TRX Conversion,' directly aligns with common crypto-swap phishing lures, suggesting a targeted campaign against users of decentralized exchanges or cross-chain bridges. Infrastructure analysis reveals multiple high-risk indicators: the domain was registered on March 13, 2026, through Internet Domain Service BS Corp, a registrar frequently associated with malicious registrations. It resolves to the IP address 188.114.96.3, a Cloudflare-protected endpoint that obscures the true hosting origin. The domain is detected by 3 security blocklists and holds a VirusTotal score of 3/95, with detections from cryptocurrency-focused security tools. Additional technical artifacts include the use of Google Analytics and Cloudflare Browser Insights, which may facilitate user tracking and behavioral fingerprinting prior to exploitation. As of the latest assessment, trxny.org has been taken offline, likely due to enforcement actions from security providers or hosting interventions. However, residual risk persists: the domain remains registered and could be reactivated or repurposed for future campaigns. Users who interacted with the site should assume credential or wallet compromise and take immediate remediation steps, including revoking smart contract approvals, rotating private keys, and monitoring transaction histories for unauthorized activity. The elevated risk level is justified by the domain's cryptocurrency focus, Cloudflare obfuscation, and confirmed presence on multiple threat intelligence feeds.