tron[.]nicetride[.]top

Analysis of tron.nicetride.top indicates a high‑risk generic phishing operation that functions as a crypto‑drainer. The domain was registered on 23 April 2026 through Gname.com Pte. Ltd. and resolves to the IPv4 address 43.169.14.15, which is geolocated to Singapore (ACE). The web server identifies as Nginx and presents an SSL certificate issued by TrustAsia Technologies, Inc., signed by the TrustAsia DV TLS RSA CA 2025. The page title returned by HTTP 200 is “Geek Tron,” but no further content has been analysed. The infrastructure is listed on a single public blocklist and is currently blocked by PhishDestroy. VirusTotal scans show that 2 of 91 security vendors flagged the domain, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Nameservers a10.share‑dns.com and b10.share‑dns.net are used. While the exact phishing page layout and victim interaction flow remain unknown, the combination of a recent registration, low trust score, active blocklist status, and detection by multiple vendors suggests an ongoing crypto‑drainer campaign targeting users who may be lured into transferring digital assets. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and add the indicator to threat‑intel feeds. Continuous re‑scanning of the site is advised to capture any changes in payload or hosting infrastructure.