trx-cross[.]com

As of July 24, 2026, the domain trx-cross.com is flagged as a crypto scam and is currently offline. The domain was registered through Global Domain Group LLC on November 12, 2025, and has been taken offline, with an HTTP status code of 503. Infrastructure analysis reveals that the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare, Inc. in the United States. The SSL certificate for the domain is issued by Google Trust Services / WE1, indicating a potentially legitimate certificate authority was used, which can sometimes be a tactic to lend false credibility to malicious sites.

The domain has been detected by 2 out of 95 security vendors, and it appears on one security blocklist, specifically PhishDestroy. This suggests that the domain has been recognized as a threat by some security systems, although the low detection rate may indicate it was not widely distributed or had a limited lifespan. Technologies detected on the domain include jQuery, cdnjs, Cloudflare Browser Insights, Cloudflare, and Clipboard.js, as well as the use of HTTP/3. The nameservers for trx-cross.com are bruce.ns.cloudflare.com and elisabeth.ns.cloudflare.com.

Given the current offline status and the presence on a security blocklist, defenders should remain vigilant and ensure that this domain is blocked to prevent potential access by users. The exact content of the site, as indicated by the page title 'FastTRX | Instant Cryptocurrency Exchange,' suggests it may have been designed to appear as a legitimate cryptocurrency exchange platform. However, without further analysis of the site's content, the specific methods used by the scam cannot be determined. It is recommended that security teams monitor for any signs of the domain being brought back online and take appropriate action to protect users from potential exposure to this crypto scam.