tronlink-9v0[.]pages[.]dev
Verifica phishing e sicurezza per tronlink-9v0.pages.dev
“TronLink Desktop Wallet | Secure TRON wallet for Windows & macOS”
tronlink-9v0.pages.dev — Ultimo attivo conosciuto (HTTP 200). Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 2/91 (alphaMountain.ai, Forcepoint ThreatSeeker); PhishDestroy score 68/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
tronlink-9v0.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first observed the hostname on Jun 22, 2026. The captured page title is “TronLink Desktop Wallet | Secure TRON wallet for Windows & macOS”. Stored page analysis classifies the content as generic phishing. Current evidence score: 68/100 (high).
One source contains a positive finding: VirusTotal. VirusTotal recorded 2 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Jul 26, 2026 at 02:34 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. Google Safe Browsing returned no flag on Jun 22, 2026 at 19:50 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:33 UTC.
HTTP 200 was recorded on Aug 8, 2026 at 10:03 UTC. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 172.66.47.89 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The IP and ASN identify shared Cloudflare infrastructure, not the tenant operator. DOM analysis on Jun 22, 2026 at 22:20 UTC returned 68/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction on Jul 29, 2026 at 01:59 UTC retained 0 format-validated wallet addresses and 1 Telegram indicator. The platform TLS certificate was issued by Google Trust Services / WE1 with validity through Sep 5, 2026; checked Jun 22, 2026 at 22:00 UTC.
Stored content provides classification context, but only one source contains a positive finding.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 8 identified
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com Confidenza al 100%fullPage.js a jQuery and vanilla JavaScript plugin for fullscreen scrolling websites.
github.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo