trongate[.]app

The domain dalamgate.app is currently flagged as a high-risk phishing threat, impersonating a decentralized exchange on TRON. Analysis indicates this domain was created on March 07, 2026, and remains active as of July 12, 2026. The domain resolves to the IP address 172.67.156.23 and utilizes various technologies including Unpkg, jsDelivr, and Cloudflare, which are common in web application deployments. The presence of Cloudflare could indicate an effort to obfuscate true hosting details or to mitigate potential security threats. The SSL certificate is issued by Let's Encrypt, a widely used certificate authority that may lend a veneer of legitimacy to the site, but does not guarantee its safety.

Threat intelligence sources such as AlienVault OTX cite this domain in 24 threat pulses, reinforcing its profile as a phishing site. Furthermore, the domain appears on four security blocklists and has been flagged by five out of 95 security vendors on VirusTotal. A poor trust score of 0/100 from Gridinsoft corroborates the high-risk assessment and identifies it as potentially harmful. It has also been blocked by various security solutions including SEAL, MetaMask, PhishDestroy, and BLP-Malware, which suggests active monitoring and response to attempts to exploit users.

Given the current risk and the behaviors associated with this domain, defenders should consider implementing enhanced filtering and blocking rules for any traffic associated with dalamgate.app. It is advisable to educate users about the risks associated with entering sensitive information on sites that impersonate legitimate services. Continuous monitoring of this domain's activities, along with periodic reviews of threat intelligence reports, will be essential in identifying any evolving tactics used by the operators of this phishing scheme.