Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
tron-trading.net shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 17 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 11% confidenceAbuseIPDB, 6 reports; shared hosting inflates reports | Clear |
| Domain age | 3 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website tron-trading.net presents itself as a cryptocurrency derivatives trading venue. Its homepage is titled "TRON Trading" and advertises perpetual-contract trading in TRX and TRC20 tokens, with claims of low fees and deep liquidity. Its apparent business model is to attract traders to deposit digital assets and trade leveraged perpetual products on the platform.
Scam/Impersonation Risk
This site carries confirmed adverse reputation signals, and the analysis supports a clearly cautionary posture. A large number of independent security engines currently flag the domain as malicious, and a smaller group rate it suspicious. The detections include several well-known, tier-one security vendors, and together they amount to a confirmed blacklisting. No competing signal offsets this. The hosting address has also drawn abuse reports. Those reports attach to a shared data-center IP rather than to this site alone, but they add to the picture.
The commercial proposition adds to the concern. The homepage promises "low fees" and "deep liquidity" for TRX and TRC20 perpetuals, but nothing in the evidence substantiates either claim. Brand-new platforms that pair these claims with unverifiable depth are a recurring pattern in deposit-harvesting schemes. During automated browsing sessions, the front end sent most of its traffic to third-party endpoints. It made multiple outbound data submissions, some to destinations outside the recognised set. This is not proof of a scam, but it means user-supplied data could leave the site's own environment. The sessions detected no wallet-drainer behaviour, clipboard manipulation, hidden forms, or cloaking. No conflicting legal identities and no brand impersonation were observed, so the elevated risk rests on the threat detections and the profile of the site, not on proven identity fraud.
- Homepage: the title and copy promote TRX and TRC20 perpetuals with "low fees, deep liquidity" claims, with no independent substantiation in the captured content.
- Reputation checks: 17 engines return a malicious verdict and 4 return suspicious, including three tier-one vendors, which meets the threshold for a confirmed blacklisting.
- Hosting address: 6 abuse reports against the shared hosting IP, most recently within days of the analysis, with a low confidence rating and attributed to shared provider infrastructure.
- Behavioural sessions: 15 external XHR calls and 12 external POST submissions across 3 successful runs, 3 of the POSTs to non-recognised destinations, with up to 82.4% of traffic directed externally.
Regulatory Verification Notes
The evidence does not independently connect this website to a real-world operator, and the operator's identity remains unconfirmed. The registrant details are generic placeholders. The evidence contains no regulatory authorisation, and no third-party broker record matched the domain. A venue offering leveraged derivatives to the public would ordinarily be expected to hold authorisation in a recognised jurisdiction, and none is established here. This is a verification gap, not proof of wrongdoing, but together with the threat detections it leaves nothing to counterbalance the risk. The domain is very recently registered and has almost no independent history. The only archive capture dates from days after registration, so there is no track record of continuous operation.
- Domain registration: registered 2026-07-29 (~0.24 years old) through the registrar Atak Domain, expiring 2027-07-29, with the registrant shown only as "Domain Administrator".
- Web archive: 1 snapshot, captured 2026-08-03, covering 1 year tracked.
- Hosting: served from AS59692 (IQWeb FZ-LLC, AE), with a registry mismatch relative to the country.
- Transport encryption: the TLS certificate is issued by YR2 at DV level, valid to 2027-01-18, which proves only that the connection is encrypted, not who operates the site.
What to Verify Next
No verification step can restore trust in this site on its own. For any party that still needs to assess it, the sequence below applies. First, search the financial-regulator registers of the jurisdictions where the platform claims to operate for an entity matching the operator, and treat the absence of a record as decisive. Second, trace the TRON addresses the platform asks users to deposit to, and check them against public scam-reporting and chain-analysis databases. Third, confirm the platform's official contact channels and any claimed company details through an independent route, not through links or numbers on the site. Fourth, search independent communities for victim reports that match the platform's name or the way it solicits deposits.
- Homepage: the perpetuals offering implies custody of user funds, so any deposit address shown is the most important artefact to check.
- Hosting and domain records: the domain was registered only 2026-07-29, so no earlier independent corroboration of the operator can be expected.
- Reputation checks: the same threat detections affect the whole domain, so a regulator-register check is the only independent route to legitimacy.
Summary Verdict
Overall, the website sits at the lowest end of the trust scale and is assessed as a high-risk destination for any sensitive interaction. Confirmed threat detections from multiple security sources, a very young domain with no independent history, and an unverified operator converge on the same conclusion. The technical hygiene it does show does not outweigh these adverse signals.
Infrastructure Integrity
The site is served directly from a single address at a UAE-based data-center hosting provider, with no content-delivery or web-application-firewall layer in front of it. The origin is therefore exposed, and there is no protective infrastructure to offset the reputation risk. The provider's registry region does not match the hosting country, a heuristic flag that is unconfirmed but consistent with a young, thinly established footprint. The site has few subdomains and little supporting infrastructure.
Closing Assessment
Interaction beyond passive viewing is not advisable. Users should not connect wallets, sign transactions, deposit funds, or enter credentials or personal details on this site. Anyone who has already interacted should revoke any wallet approvals and report the activity to their exchange or local fraud authority.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, history in the web archive, hosting and network, behaviour in a sandbox.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The hosting and network setup shows a moderate level of risk indicators.Hosting and network
rule:DNS_RISK_MED - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
Signals weighed against the site
- AbuseIPDB: 6 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of tron-trading.net.
- The request stayed on tron-trading.net. It was not redirected to another domain. Clear
- Registration is published under Atak Domain. Clear
- DNS for this domain is served by trustname.com, across 2 name servers. Noted
- The registration is paid up to 2027-07-29. Noted
- The earliest public archive of this site is from 2026-08-03. Clear
- It is hosted on IQWEB, from a server in AE. Noted
Domain intelligence
| Registrar | Atak Domain |
|---|---|
| Hosting | IQWEB - IQWeb FZ-LLC, AE |
| Country | AE |
| Server IP | 186.2.175.35 |
| Name servers | ARES.TRUSTNAME.COM, ZEUS.TRUSTNAME.COM |
| CDN / edge network | Not detected |
| Resolved IP addresses | 1 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 1 |
| SSL issuer | YR2 |
| SSL expiry | 2027-01-18 |
| Domain age | 0.24 years (continuous registration) |
| Domain expiry | 2027-07-29 |
| Archive first seen | 2026-08-03 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 17 flagged | AbuseIPDB: 11% confidence, 6 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about tron-trading.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.