traxx-unstaking[.]pages[.]dev

This domain, traxx-unstaking.pages.dev, operates as a cryptocurrency phishing site designed to harvest wallet credentials and private keys through fraudulent unstaking interfaces. Analysis indicates it mimics legitimate protocol dashboards, tricking users into entering sensitive authentication details under the pretense of token management or reward claims. The page title "Protocol" further suggests an attempt to appear as an official blockchain service portal. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 10 out of 95 security vendors on VirusTotal, appears on 4 distinct security blocklists, and is actively blocked by wallet security extensions. Registered through Cloudflare, Inc. on March 23, 2026, it resolves to the IP address 172.66.47.9, hosted within Cloudflare's Canadian infrastructure. The SSL certificate, issued by Google Trust Services (WE1), provides no inherent legitimacy given the domain's fraudulent purpose. Users who interacted with traxx-unstaking.pages.dev should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the incident to relevant blockchain security teams. Do not re-engage with the domain, as it remains a verified threat vector despite its current offline status. Consider implementing additional security measures such as hardware wallet isolation for high-value assets.