tronliq[.]io

The domain tronliq.io is a generic phishing site designed to facilitate crypto scams, with no specific brand impersonation or drainer kit identified. As of the latest verification, tronliq.io has been taken offline, but it previously posed an elevated risk to users by attempting to deceive victims into disclosing sensitive information or transferring cryptocurrency. Users searching for whether tronliq.io is safe or a scam should treat it as malicious and avoid interaction.

Technical analysis reveals that tronliq.io was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, though it was not listed by Google Safe Browsing. The domain appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. It was registered through Global Domain Group LLC on February 21, 2026, and resolved to the IP address 104.21.36.117, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate was issued by Let's Encrypt (E8), and the observed page title was 'Just a moment...'. Nameservers associated with the domain include ns2.gcdn.services and ns1.gcorelabs.net.

Users who may have interacted with tronliq.io should take immediate steps to secure their assets and accounts. For crypto-related scams, revoke any token approvals granted to suspicious sites and transfer funds to a new wallet. Monitor transaction histories for unauthorized activity. If credentials were entered, change passwords immediately and enable two-factor authentication on all relevant accounts. Report the domain to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities to aid in broader mitigation efforts.