referral-link-2nie9td5mld20[.]org

PhishDestroy has assessed referral-link-2nie9td5mld20.org as elevated risk due to its classification as a generic phishing threat. The domain was actively impersonating the Tron cryptocurrency platform, as evidenced by its page title 'Home | Tron', to deceive users into divulging sensitive information. Although the site is now offline, its malicious intent and technical indicators warrant caution.

Technical analysis reveals that 5 out of 95 security vendors on VirusTotal flagged this domain, indicating moderate but notable detection. The domain resolves to IP address 62.60.226.89 and was registered through TUCOWS.COM, CO. It was created on December 18, 2025, and its SSL certificate was issued by Let's Encrypt (E8), a common choice for phishing sites due to its free and automated nature. The domain appears on 1 security blocklist, further corroborating its malicious reputation.

Given the generic phishing threat, PhishDestroy recommends that users who may have interacted with this domain change their Tron account credentials immediately and enable two-factor authentication. Avoid clicking any links or downloading attachments from unsolicited emails referencing Tron. Monitor accounts for unusual activity and report any suspicious transactions to the relevant platform. As the domain is offline, no further direct action is required, but vigilance against similar phishing campaigns is advised.