tronscan[.]my[.]canva[.]site

This domain is currently under investigation and has been classified as a generic phishing threat, meaning it is designed to deceive users into believing it is a legitimate service. The site impersonates Tronscan, a TRON blockchain explorer, and its page title explicitly claims to be the "Tronscan® - TRON BlockChain Explorer | Official Site." Despite this, the domain is not affiliated with the real Tronscan and poses a risk of credential theft or malware distribution.

Technical indicators paint a clear picture of suspicious activity. VirusTotal reports 0 detections out of 95 scanners, which is not uncommon for newly registered phishing domains that have not yet been widely flagged. The domain was created on April 07, 2026, and is registered through Gandi SAS. It resolves to IP address 103.169.142.250, and its SSL certificate is issued by Google Trust Services (WE1). Despite the lack of antivirus detections, the domain has already been added to one security blocklist, and it has been confirmed as offline. PhishDestroy assesses that the combination of a recently created domain, a misleading title, and a low blocklist presence indicates an active threat that was quickly neutralized.

Users who may have encountered this domain should take immediate precautions. Since the site impersonates Tronscan, anyone who entered their Tronscan credentials or other personal information should change their passwords immediately and enable two-factor authentication on their accounts. It is also advisable to run a full antivirus scan on any device that accessed the site. Moving forward, always verify the official URL of blockchain services like Tronscan by checking their official documentation or social media channels. PhishDestroy recommends reporting any similar suspicious domains to security teams or blocklist operators to help prevent future attacks.