gasfreetron[.]org

Analysis of gasfreetron.org indicates a high-risk phishing domain targeting cryptocurrency users. The domain was registered on July 4, 2026, through Spaceship, Inc., and remains active as of July 29, 2026. Infrastructure analysis reveals it resolves to IP address 186.2.175.35 and uses nameservers launch1.spaceship.net and launch2.spaceship.net. Only one of 91 security vendors on VirusTotal flags the domain as malicious, while PhishDestroy has already listed it on its blocklist.

The domain's registration age of 25 days and limited detection coverage suggest it may still be in the early stages of deployment or evading broader detection. No HTTP status, SSL certificate details, or page content analysis are currently available, leaving the exact phishing mechanism uncertain. Defenders should treat this domain as active and malicious, blocking resolution at the DNS level and monitoring for connections to 186.2.175.35.

Given the domain name's inclusion of 'tron' and the prevalence of cryptocurrency-themed phishing, it is likely designed to deceive users expecting TRON network rewards or airdrops. No brand or page title is confirmed, so the specific lure remains unverified. Security teams are advised to correlate logs for any interaction with this domain or its associated IP and review recent cryptocurrency-related user reports for potential compromise.