tronswap[.]icu

The domain tronswap.icu is a generic phishing site designed to deceive users into disclosing sensitive information or performing actions that compromise their security. It does not impersonate a specific brand or employ a known drainer kit, but its content and structure align with typical phishing tactics. As of the latest verification, tronswap.icu has been taken offline, though its prior activity poses residual risk to users who may have interacted with it.

Technical indicators confirm the elevated risk level of tronswap.icu. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered on June 08, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolved to the IP address 172.67.132.156, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Un instant…'. The domain's Gridinsoft trust score is 0/100, further indicating its malicious nature.

Users who suspect they interacted with tronswap.icu should take immediate action to mitigate potential harm. For credential phishing, change passwords for any accounts accessed or entered on the site, enable two-factor authentication (2FA), and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader threat mitigation. If financial or cryptocurrency details were exposed, contact relevant institutions to secure accounts and review transaction histories for suspicious activity.