# trxswap-sq.pages.dev — SUSPICIOUS

> trxswap-sq.pages.dev hosts a TRON-based swap scam; 0/95 VirusTotal detections. Learn how to protect yourself. Check the full report.

## Summary
PhishDestroy identifies trxswap-sq.pages.dev as a live TRON swap scam page designed to trick users into connecting their TRON wallets and signing malicious transactions. The site mimics legitimate TRON-based decentralized exchange interfaces, luring victims with fake token swap offers or liquidity pool opportunities. Once a wallet is connected, the scam attempts to drain funds by prompting users to sign unauthorized transactions or approve malicious token approvals. This is a classic cryptocurrency phishing attack leveraging spoofed UI and social engineering to exploit blockchain users.

This domain was flagged through automated analysis and confirmed via static analysis. It uses a Google Trust Services SSL certificate and is registered through Cloudflare, Inc. VirusTotal currently shows 0 detections out of 95 scanners, indicating it remains undetected by most antivirus engines. The site resolves to IP address 188.114.97.3 and is hosted on Cloudflare Pages, a platform often abused by threat actors for rapid deployment and evasion. While the exact creation date is not publicly available, the domain shows active hosting and ongoing accessibility as of the latest scan.

If you visited trxswap-sq.pages.dev, immediately disconnect your TRON wallet and revoke any token approvals or transactions you may have signed. Use the official TRON wallet interface or a reputable blockchain explorer to check your recent transaction history for unauthorized transfers. Consider transferring remaining funds to a new, secure wallet and enable transaction alerts. Always verify URLs, avoid clicking links in unsolicited messages, and use hardware wallets for high-value transactions. Report the domain to your wallet provider and relevant blockchain security platforms to help protect others.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5708bce9-f9fa-479b-ad49-fa0907fb77f4
- PhishDestroy: https://phishdestroy.io/domain/trxswap-sq.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/trxswap-sq.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trxswap-sq.pages.dev/
Last updated: 2026-03-26