tronlink[.]xn--fiqs8s

PhishDestroy identifies tronlink.xn--fiqs8s as a confirmed crypto drainer impersonating the legitimate TronLink wallet extension. This domain mimics the official TronLink branding to trick users into connecting their wallets, allowing attackers to drain cryptocurrency funds. The threat is active, with the domain resolving to IP 192.238.201.108 and secured by a Let's Encrypt SSL certificate—a common tactic to appear legitimate. This domain was flagged by PhishDestroy with a VirusTotal detection rate of 3/95 at the time of assessment. While currently undetected by antivirus engines, the domain's active status and impersonation of a major crypto wallet service (TronLink) pose significant risks. Historical data suggests the domain was registered recently, though exact creation dates remain unverified. Users interacting with this site risk unauthorized wallet access and fund theft. If you visited tronlink.xn--fiqs8s, disconnect your wallet immediately and revoke any connected permissions. Avoid reusing passwords or wallet seed phrases on unknown sites. Scan your device for malware and monitor blockchain transactions for suspicious activity. Report the domain to your wallet provider and relevant cybersecurity authorities to help prevent further exploitation.