# traxx-unstaking.pages.dev — SUSPICIOUS

> traxx-unstaking.pages.dev is a crypto phishing page impersonating unstaking portals. VirusTotal shows 0/95 detections despite hosting active scam content.

## Summary
PhishDestroy identifies traxx-unstaking.pages.dev as a likely cryptocurrency phishing site currently under active investigation for posing as an unstaking platform. Built on Cloudflare Pages and resolving to IP 172.66.47.9, the domain leverages Google Trust Services for SSL legitimacy to evade security controls. With zero detections on VirusTotal out of 95 scans, this site exemplifies the growing trend of crypto scams blending legitimate infrastructure with deceptive content.

This domain serves as a decoy specifically targeting users seeking to unstake tokens, presenting a professional interface while harvesting credentials or crypto wallet private keys through fake login portals. Beyond VirusTotal’s current silence, the absence of widespread blocklisting points to its recency—Cloudflare Pages deployment suggests rapid rotation to bypass detection signatures. The combination of trusted SSL issuance, high-reputation hosting, and zero detections creates a deceptive surface that could lure even security-aware users into interacting with malicious payloads.

Users who accessed this domain should immediately disconnect from the internet, scan their systems for malware, and revoke any wallet connections established during the visit. Even if no credentials were entered, interaction with the site may trigger malicious scripts or redirect chains not visible in VirusTotal’s static analysis. Report the domain to your security team or block it via DNS if not already implemented. Monitor wallet addresses and systems for anomalous transactions or unexpected processes, as this threat often bundles stealthy post-exploitation tools. Time is critical—crypto phishing sites actively evolve to bypass defenses, making swift containment essential.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.9

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/dabd1918-5fdc-4f96-8948-b386b767a304
- PhishDestroy: https://phishdestroy.io/domain/traxx-unstaking.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/traxx-unstaking.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/traxx-unstaking.pages.dev/
Last updated: 2026-03-22