trx-power[.]com

Analysis of trx-power.com indicates a brand-impersonation phishing domain targeting TRON (TRX) cryptocurrency users, currently offline as of July 25, 2026. The domain was registered on October 16, 2025, through Global Domain Group LLC and resolves to IP 104.21.0.171, hosted on Cloudflare's network (AS13335). Nameservers luciane.ns.cloudflare.com and rob.ns.cloudflare.com further confirm Cloudflare infrastructure. The SSL certificate, issued by Google Trust Services (WE1), remains valid, though the site returns an HTTP 503 status, suggesting deliberate takedown or backend failure.

The page title, 'USDT to TRX Conversion & TRON Energy Purchase | Fast, Secure, Reliable,' explicitly references TRON-related services, aligning with the 'Wallet/Seed Phishing' classification in available threat intelligence. Detection data is limited but consistent: Gridinsoft assigns a trust score of 0/100, and the domain appears on one security blocklist (PhishDestroy). Three of 95 security vendors on VirusTotal flagged the domain at the time of scanning, though the absence of broader detection does not imply safety. Defenders should treat this domain as elevated risk due to its explicit targeting of cryptocurrency users, use of Cloudflare to obscure hosting origins, and registration via a registrar frequently associated with phishing domains.

While the site is currently offline, the infrastructure remains intact, and reactivation is possible. Monitoring for DNS changes, SSL certificate reissues, or renewed resolution to the same IP is recommended. If encountered in logs or proxy data, this domain should be blocked at the network level, and any associated wallet addresses or seed phrases should be flagged as compromised. The exact phishing mechanism (e.g., fake wallet interface, seed phrase harvesting) is not confirmed, as the site content has not been analyzed.