trxexchangepro[.]org

PhishDestroy has identified trxexchangepro.org as an elevated-risk threat, specifically a generic phishing campaign targeting TRON cryptocurrency users. The domain masquerades as a legitimate energy rental service with the title "TRXEnergy - Buy TRON Energy, Rent TRX Energy, Swap TRX USDT | Save 70%," aiming to deceive visitors into connecting their wallets or providing sensitive credentials. This kind of phishing often leads to unauthorized access to cryptocurrency assets or identity theft.

The domain was created on December 16, 2025, and registered through GoDaddy.com, LLC. It resolves to IP address 104.21.63.131 and uses an SSL certificate issued by Google Trust Services / WE1. Despite the certificate, the domain appears on 3 security blocklists, and VirusTotal shows 2 out of 95 security vendors flagging it as malicious, indicating limited but growing recognition of the threat. The current status is offline, which suggests it may have been taken down or is temporarily inactive, but it could resurface under similar names or infrastructure.

Users who have interacted with trxexchangepro.org should immediately revoke any wallet permissions granted and change passwords for associated accounts. It is crucial to avoid entering private keys, seed phrases, or login credentials on any site that requests them through unsolicited links. Monitoring financial accounts for unauthorized transactions and enabling two-factor authentication are strongly advised. For comprehensive protection, report the domain to relevant blocklists and cryptocurrency watchdogs to prevent further harm.