trxgb[.]org

Analysis of trxgb.org indicates a crypto scam operation impersonating the TRON blockchain network, currently offline as of July 25, 2026. The domain was registered on December 22, 2025, through Internet Domain Service BS Corp and uses Cloudflare nameservers (maleah.ns.cloudflare.com and miles.ns.cloudflare.com), resolving to IP 172.67.188.241 within Cloudflare’s US-based AS13335 infrastructure. No SSL certificate was detected, increasing exposure to interception risks. The page title, 'USDT ⇄ TRX Tausch & TRON Energie mieten | Schnell, sicher, zuverlässig,' explicitly targets TRON users with promises of USDT-TRX swaps and TRON energy rental, aligning with known crypto fraud patterns. Detection data remains limited but consistent with malicious intent: three security vendors on VirusTotal flagged the domain, and it appears on one security blocklist.

Gridinsoft assigned a trust score of 0/100. The domain was blocked by PhishDestroy, though the exact timestamp of takedown is not provided. While the site is currently offline, defenders should treat prior resolutions to 172.67.188.241 as a threat indicator. The absence of an SSL certificate and reliance on Cloudflare infrastructure are common traits among low-effort scam domains, though not definitive proof of fraud.

Organizations monitoring for TRON-related threats should include trxgb.org in domain blocklists and alert users to the impersonation risk. Security teams may cross-reference the IP 172.67.188.241 and registrar details for related malicious domains. Due to the domain’s recent creation and limited detection history, continuous monitoring for re-emergence or associated infrastructure is recommended. No evidence suggests this domain is part of a larger phishing kit or campaign beyond the observed TRON impersonation.