---
title: "Is tron-exchange.net a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "tron-exchange.net"
verdict: "Critical Risk"
title: "Is tron-exchange.net a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/tron-exchange.net
assessed: 2026-10-21
---

# Is tron-exchange.net a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** tron-exchange.net shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk

Assessed 2026-10-21 by automated analysis. Classification confidence 75%.

| Field | Value |
| --- | --- |
| What this site appears to be | A TRON-network DEX page offering TRC20 token swaps, liquidity pools, and TRX staking, requiring wallet connection to transact. It claims non-custodial operation, audits, a bug bounty, and referral fee earnings, but gives no verifiable audit references, contract addresses, or operator identity. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 17 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 11% confidence (AbuseIPDB, 5 reports; shared hosting inflates reports) | Clear |
| Domain age | 3 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (1 snapshot) | Clear |
| Certificate | Encrypted connection (Issued by YR2) | Noted |

## The page as captured


![Screenshot of the tron-exchange.net homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/tron-exchange.net/screenshots/first.png)

_What tron-exchange.net served when TrustSniffer captured it on 2026-10-21. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "TRON Exchange", a decentralized exchange interface for swapping TRC20 tokens on the TRON network. Visitors see a swap terminal, liquidity pools, TRX staking, a referral programme and a wallet-connection prompt. The headline claims are "fastest, cheapest" trading, sub-cent fees, finality in under three seconds, more than 2,000 supported tokens, and "$7.4B+" in total volume. Its apparent business model is protocol swap fees of 0.1% on standard pairs and 0.01% on stablecoin pairs. These fees are said to be split between liquidity providers and a protocol treasury, with additional referral and staking incentives.


### Scam/Impersonation Risk

The evidence shows hard contradictions that call for a clearly cautionary stance. Several well-known security vendors independently flag the domain as malicious, and a substantial number of other engines mark it malicious or suspicious. This amounts to a confirmed **blacklist** condition, and it outweighs every stabilising factor on the site. No brand impersonation and no conflicting legal identities were detected. The risk therefore rests on the external threat detections and on the nature of the offering. The homepage asks visitors to connect a wallet and sign transactions, a high-stakes action that exposes a user's funds. Yet it offers no named audit firm or audit report, no contract addresses, no operator identity and no contact channel. The reassurances it does give are unsupported assertions: "We never have access to your funds", non-custodial operation, audits and a bug bounty. The "$7.4B+" volume figure and the "2,000+ TRC20 tokens" counter cannot be checked against anything on the page, so they function as unverifiable social proof. The sandbox also recorded the page sending POST and XHR traffic to external destinations outside the expected set, which fits a pattern of third-party data flows that is not explained anywhere on the site. The page also names a long list of wallet brands, including Ledger, MetaMask, Trust Wallet and Binance Web3 Wallet. This lends borrowed credibility but is not evidence of any partnership. Evidence:

- Homepage: the stat counters ("$7.4B+ Total Volume", "2,000+ TRC20 Tokens", "<3s Finality") and the claims of audits and a bug bounty carry no references or links.
- Homepage FAQ: it states "We never have access to your funds" and that wallet connection is safe, but no contract addresses or audit documents back this up.
- Domain provenance: the domain was registered in 2026 (about 83 days old, ~0.23 years), and the web archive holds only 1 snapshot (first and last seen in 2026, 1 year tracked), so there is no established track record.
- Sandbox behaviour: 3 of 3 runs showed a wallet-signing flow, with up to 85.7% external request share and 3 non-whitelisted POST destinations.

### Regulatory Verification Notes

The site presents no legal, terms, about or licensing page that names an operating entity, a jurisdiction, a licence or a registration number. A DeFi product that handles customer-signed swaps, liquidity deposits and staking is a financial-services-adjacent activity, and the site makes no claim of regulatory authorisation. No third-party broker or regulator record matches the site, so there is no reputational or licensing signal either way. The abuse reports recorded against the hosting address come from a shared provider environment. They are a soft contextual signal about that address, not a finding about the operator, and the verdict does not depend on them. Without an identifiable operator, a user has no named party to hold accountable for custody, treasury control or dispute handling. Evidence:

- Homepage and FAQ: there is no operator name, registered address, licence or complaint route, and the treasury receiving the protocol fee share is not identified.
- Domain registration: it went through the registrar Atak Domain under a generic "Domain Administrator" registrant label, which names no real-world entity.
- Hosting and encryption: the site is served from AS59692 (IQWEB – IQWeb FZ-LLC, AE, 186.2.175.35). The TLS certificate is issued by YR2 at DV level, valid to 2027-01-18. A DV certificate only proves control of the domain and says nothing about the operator.
- Hosting-address reputation: 5 abuse reports exist for the shared hosting IP, attributed to shared infrastructure and not discounted.

### What to Verify Next

Verification should start with independently sourced identity and security evidence. It should not rely on anything the site says about itself. First, the operator and any claimed audit should be traced through the audit firm's own channels, not through links or logos on this site. Second, any smart-contract address the site would use should be matched against an independent blockchain explorer and a reputable DeFi registry before any approval or signature is considered. Third, the official project name, social presence and support channels should be confirmed from a source reached independently, such as an established directory or a documented announcement, to check whether this domain is the legitimate frontend of any known TRON exchange. Fourth, the current threat-listing status should be rechecked with the security vendors that flagged the domain. Evidence:

- Homepage: the claimed audits, bug bounty and non-custodial design carry no named auditor, report or contract reference to check.
- Homepage swap terminal: wallet signing is required for swaps, pools and staking, so contract identity must be established before any signature.
- Homepage: no contact channel or social profile is published to confirm independently.

### Summary Verdict

The domain is a very recent, anonymous crypto-exchange frontend that third-party security vendors currently flag as malicious. It asks visitors to sign wallet transactions on the strength of claims it cannot substantiate. The evidence supports a high-risk assessment for any sensitive or financial interaction. Its polished interface and valid encryption do not offset this.


### Infrastructure Integrity

The site resolves to a single address at a shared data-centre hosting provider in the United Arab Emirates. No CDN or WAF fronts it, so the origin server is directly exposed. The young domain, its sparse DNS footprint and a mismatch between hosting geography and registry add to the infrastructure risk, though these are unconfirmed heuristics. Nothing in the setup mitigates the external threat detections. The valid certificate and stable HTTP responses show only that the site works technically.


### Closing Assessment

Treat the site as unsafe for wallet connection, token approvals, deposits, staking, credentials or any financial activity. Read-only viewing, if needed at all, should be done from an isolated environment without a wallet extension. Anyone who has already connected a wallet or signed a transaction here should revoke token approvals promptly and move remaining assets to a fresh wallet.


_Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, page content, history in the web archive.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Page content
- The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`)
- The page content shows three or more warning signs that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_STRONG`)
- The page content shows at least one warning sign that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_SOME`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### Signals weighed against the site

- AbuseIPDB: 5 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of tron-exchange.net.

- The request stayed on tron-exchange.net. It was not redirected to another domain. (Clear)
- Registration is published under Atak Domain. (Clear)
- DNS for this domain is served by trustname.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-07-29. (Noted)
- The earliest public archive of this site is from 2026-08-02. (Clear)
- It is hosted on IQWEB, from a server in AE. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Atak Domain |
| Hosting | IQWEB - IQWeb FZ-LLC, AE |
| Country | AE |
| Server IP | 186.2.175.35 |
| Name servers | ARES.TRUSTNAME.COM, ZEUS.TRUSTNAME.COM |
| CDN / edge network | Not detected |
| Resolved IP addresses | 1 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 1 |
| SSL issuer | YR2 |
| SSL expiry | 2027-01-18 |
| Domain age | 0.23 years (continuous registration) |
| Domain expiry | 2027-07-29 |
| Archive first seen | 2026-08-02 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 17 flagged \| AbuseIPDB: 11% confidence, 5 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about tron-exchange.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [finance-community.net](https://trustsniffer.com/report/finance-community.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [alloxai.net](https://trustsniffer.com/report/alloxai.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [just-swap.net](https://trustsniffer.com/report/just-swap.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [swap-byreal.net](https://trustsniffer.com/report/swap-byreal.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [moonshot-dex.net](https://trustsniffer.com/report/moonshot-dex.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [cropper-dex.net](https://trustsniffer.com/report/cropper-dex.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [novadex-dex.net](https://trustsniffer.com/report/novadex-dex.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [turboswap-dex.net](https://trustsniffer.com/report/turboswap-dex.net), another .net site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-mru.netlify.app](https://trustsniffer.com/report/crypto-mru.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-5wb.netlify.app](https://trustsniffer.com/report/portal-moonshot-5wb.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/tron-exchange.net) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/tron-exchange.net · assessed 2026-10-21.*