tronfast[.]net
“TronFast - Swap TRX USDT, Rent TRX Energy, Buy TRON Energy”
证据摘要
Analysis of tronfast.net indicates a brand‑impersonation campaign targeting Ledger wallet users. The domain was registered on December 24, 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335). DNS resolution points to 104.21.73.67, an IP located in the United States and managed by Cloudflare. Nameserver records list conrad.ns.cloudflare.com and maleah.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services.
No TLS certificate is present, and the site currently returns an offline HTTP status, suggesting that the operator has taken the site down or is rotating infrastructure. The page title observed before takedown – “TronFast - Swap TRX USDT, Rent TRX Energy, Buy TRON Energy” – aligns with a cryptocurrency‑focused front end, yet the underlying scam vector is identified as wallet/seed phishing, specifically impersonating the Ledger brand. VirusTotal analysis shows six of ninety‑three security vendors flagging the domain, and the site appears on a single external blocklist.
PhishDestroy has already added the domain to its blocklist, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious classification. Given the observed indicators, defenders should immediately block resolution to 104.21.73.67 for the FQDN tronfast.net, update intrusion detection signatures with the domain name and its associated Cloudflare IP, and monitor for re‑registration or re‑appearance on alternative hosting. Continuous verification of DNS changes and periodic re‑scans with multi‑vendor services are advised to detect any redeployment of the phishing infrastructure.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
已存储的结果证据
处置结果与下线归因
- 结果
unknown- 可用性
unreachable- 原因
origin_unreachable- 机制
http_5xx- 置信度
- 20%
- 首次观测
- 最新观测
预计不可用时间
直至不可用的时间: 16.93 h证据 SHA-256 a1dbd7e6e685
检测时间线
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
-
可用性
首次存储值:未知
993d00c35140 -
可用性
未知 → 非活动
b7b45fc4d27a -
可用性
非活动 → 未知
83374d9d652c
社区报告
由 1 名社区成员报告;首次发现于 2025年12月27日
- 已存储报告
- 1
- 已报告的唯一 URL
- 1
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
仿冒域名
已存储 151 个仿冒域名
显示全部(88)
显示 151 个中的 100 个
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控