tron-trust[.]com

This domain, tron-trust.com, is actively engaged in crypto asset theft targeting users of the Tron Network blockchain platform. Analysis indicates the site operates as a crypto drainer, designed to deceive victims into connecting wallets and authorizing malicious transactions that siphon digital assets. The domain remains active as of the latest verification, with no indication of takedown or remediation efforts. Infrastructure analysis reveals the domain was registered on February 27, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and has been flagged by 3 of 95 security vendors on VirusTotal. The domain appears on three distinct security blocklists, including those maintained by blockchain security entities and domain reputation services. The page title, 'Just a moment...', is a common obfuscation technique used to mask malicious intent during initial loading phases. The risk level for this domain is classified as elevated due to its active status, direct targeting of cryptocurrency users, and association with known malicious infrastructure. Organizations and individuals are advised to block the domain and its resolving IP at the network perimeter. End-users should verify wallet connection prompts against official Tron Network domains and revoke any suspicious authorizations via blockchain explorers. Continuous monitoring of wallet activity is recommended for those who may have interacted with the domain prior to detection.