raretron[.]cc

raretron.cc was registered on 21 February 2026 through NameSilo, LLC and is hosted on Cloudflare infrastructure (AS13335) with the IP address 188.114.97.3 located in the United States. The domain is served by the Cloudflare name servers hattie.ns.cloudflare.com and joel.ns.cloudflare.com. No TLS certificate was observed, indicating the site was delivered over plain HTTP. The only visible content is the page title “波场靓号生成 | 波场地址生成 | trc20靓号生成 | tron地址生成 | 靓号离线生成 | tron靓号生成 | 波场靓号”, which references Tron blockchain address generation tools and suggests a crypto‑related lure. VirusTotal records show four of ninety‑five scanning engines flagged the domain as malicious, and the domain appears on a single security blocklist.

PhishDestroy has also listed the site as blocked. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The site is currently taken offline, limiting immediate interaction but preserving the infrastructure for potential future reuse. Analysis indicates that raretron.cc was likely used in a crypto‑scam campaign, possibly offering “pretty” Tron addresses to entice victims into providing private keys or sending funds.

The lack of SSL, low trust score, and multiple vendor detections support this conclusion. However, the precise payload, phishing kit, or victim interaction flow remains unknown because the site content was not captured before takedown. Defenders should add the domain and its associated IP address to deny‑list rules, monitor for re‑registration, and enforce outbound filtering for connections to the identified Cloudflare name servers. Continuous threat‑intel feeds should be consulted for any resurgence of the domain or related indicators.