# tronlinkmax.com — SUSPICIOUS

> tronlinkmax.com is a fake TronLink wallet phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies tronlinkmax.com as an active phishing campaign targeting cryptocurrency users by impersonating the legitimate TronLink wallet extension. This domain mimics the official site to steal login credentials and private keys, with threat actors leveraging social engineering tactics to deceive victims into entering sensitive information. The infrastructure appears designed to harvest wallet access, enabling direct fund theft or unauthorized transactions. Users should treat this domain as a high-risk threat and avoid interaction entirely.  This domain was flagged with 0/95 detections on VirusTotal as of the latest scan, indicating it remains undetected by most antivirus engines. Registered through Gname.com Pte. Ltd. on July 29, 2025, the domain resolves to IP address 188.114.97.3 and utilizes a Google Trust Services SSL certificate to appear legitimate. Despite its recent creation, the lack of detections suggests a potentially emerging threat that could escalate rapidly as awareness spreads. The absence of blocklist entries further highlights the need for proactive user vigilance.  If you visited tronlinkmax.com, immediately revoke any permissions granted to the site, check your wallet transaction history for unauthorized activity, and transfer remaining funds to a secure wallet not associated with this domain. Use a reputable password manager to change any reused credentials and scan your device for malware. Report the domain to your antivirus provider and relevant cryptocurrency platforms to aid in takedown efforts. Avoid accessing TronLink or similar services through third-party links—always verify URLs via official channels.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-29 14:08:47
- Registrar: Gname.com Pte. Ltd.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f6e091ae-8625-45a0-a155-324f2dcf4dfd
- PhishDestroy: https://phishdestroy.io/domain/tronlinkmax.com/
- LLM endpoint: https://phishdestroy.io/domain/tronlinkmax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tronlinkmax.com/
Last updated: 2026-03-24