trontoken[.]pro

This domain, trontoken.pro, is flagged as a brand impersonation threat specifically targeting the OKX exchange. The page title 'Create Tron Token - Tron Token Generator' indicates an attempt to lure users into creating or interacting with malicious token contracts, potentially as part of a crypto drainer scheme. The domain impersonates OKX by leveraging a similar naming convention and likely mimicking legitimate token creation interfaces to harvest credentials or prompt unauthorized transactions.

Technical indicators confirm elevated risk. VirusTotal reports 3 out of 95 security vendors flagging this domain as malicious. The domain was registered through Name.com, Inc. on February 21, 2026, and resolves to IP address 188.114.96.3, which is associated with Cloudflare infrastructure. SSL certificate is issued by Google Trust Services. The domain appears on 1 security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score is 0/100, indicating high risk. Technologies detected include Cloudflare Browser Insights, Cloudflare, and HTTP/3, which can obscure origin server details.

Current status shows the domain has been taken offline. No further active risk remains from this specific domain, but users should remain vigilant against similar domains targeting OKX or using 'tron' in the name. Analysis recommends avoiding interaction with any unsolicited token generation services and verifying official OKX platforms through trusted channels. The domain's rapid creation and takedown within days underscore the transient nature of such threats.