# tronlink.fyi — MALICIOUS

> PhishDestroy identifies tronlink.fyi as a TRON wallet phishing site that evades 9 security vendors. Check the full report.

## Summary
PhishDestroy identifies tronlink.fyi as an active phishing site masquerading as the official TRON wallet, harvesting private keys and seed phrases from unsuspecting users. The domain mimics legitimate TRON wallet interfaces to trick visitors into entering sensitive wallet credentials, which are then exfiltrated to attacker-controlled servers.  This domain was flagged by 9 of 95 VirusTotal security vendors, indicating widespread recognition of its malicious nature. Registered through GoDaddy.com, LLC on December 22, 2025, the domain resolves to IP 43.103.50.255 and holds a Let’s Encrypt SSL certificate to appear legitimate.  If you visited tronlink.fyi, assume your wallet credentials or private keys may have been compromised. Immediately transfer all assets from TRON-based wallets to a new wallet secured with a fresh seed phrase. Revoke any app permissions tied to the exposed wallet addresses using blockchain explorers like Tronscan. Enable two-factor authentication on all accounts linked to your TRON wallet and monitor for unauthorized transactions. Consider deploying hardware wallets for long-term protection against phishing attacks.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-22 10:58:59
- Registrar: GoDaddy.com, LLC
- IP: 43.103.50.255

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3f6a7673-0f16-4e86-a4fa-de07d6d84387
- PhishDestroy: https://phishdestroy.io/domain/tronlink.fyi/
- LLM endpoint: https://phishdestroy.io/domain/tronlink.fyi/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tronlink.fyi/
Last updated: 2026-03-24