tronlink[.]com[.]co

Analysis of tronlink.com.co indicates this domain is a confirmed crypto scam, currently offline as of July 23, 2026. The domain was registered on February 21, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, with nameservers hosted by Openprovider (NS1.OPENPROVIDER.NL, NS2.OPENPROVIDER.BE, NS3.OPENPROVIDER.EU). Infrastructure analysis reveals the domain resolved to IP 144.31.231.231, located in Switzerland and associated with NekoClaw Ltd, a hosting provider frequently linked to malicious activity. The SSL certificate was issued by Let's Encrypt (serial E7), a common choice for both legitimate and fraudulent sites, offering no inherent safety assurance. Sixteen of 93 security vendors on VirusTotal flagged this domain, a clear indicator of malicious intent.

The domain appears on one security blocklist and is blocked by PhishDestroy. AlienVault OTX records show the domain in 13 threat intelligence pulses, further confirming its association with active scam campaigns. The page title, 'www.www.tronlink.com.co,' suggests an attempt to mimic the legitimate TronLink service, though no direct evidence of page content or functionality is available for analysis. The scam type is explicitly classified as a crypto scam, aligning with the broader trend of fraudulent cryptocurrency platforms. Defenders should treat this domain as high-risk.

The HTTP status returned a 403 Forbidden response at the time of assessment, though this does not indicate safety—only that the server rejected the request. The Gridinsoft trust score of 1/100 reinforces the domain's malicious classification. Organizations are advised to block this domain at the DNS and firewall levels, monitor for related infrastructure (e.g., IP 144.31.231.231, Openprovider nameservers), and alert users to avoid interaction with any content previously hosted on tronlink.com.co.