trnlnk87jkh.soha33.workers.dev

Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. The page content also appears consistent with a credential-harvesting setup: it presents TronLink branding on an unrelated workers.dev subdomain and encourages wallet import actions, which may be used to capture sensitive wallet information.

Blacklist and reputation data were mixed but still concerning. While several major threat databases did not list the domain at the time of this scan, one blacklist provider did list it, and the broader multi-engine consensus is notably negative. The malware scan did not report infected files, but that does not materially reduce concern here because phishing pages often rely on simple web content rather than malware payloads.

The domain's age alone does not meaningfully reduce risk because this is a hosted subdomain that can be repurposed quickly, and the random subdomain naming pattern may be consistent with disposable phishing infrastructure. Based on these findings, this website may pose potential risks to visitors.