trxexx-go[.]pages[.]dev

This domain presents itself as a legitimate platform for USDT to TRX conversion and TRON energy purchases, but analysis indicates it operates as a cryptocurrency scam targeting users of the TRON blockchain. The site employs deceptive branding and false claims of fast, secure transactions to trick victims into transferring digital assets, which are then stolen by the operators. The specific focus on TRON-related services suggests an intent to exploit users familiar with TRX and USDT transactions, likely through social engineering tactics such as fake exchange rates or urgent transaction prompts. Infrastructure analysis reveals the domain trxexx-go.pages.dev was registered on April 06, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, located in Canada under Cloudflare's network. Despite its recent creation, the domain has already been flagged on one security blocklist, while VirusTotal reports 0 out of 95 security vendors detecting it as malicious. The SSL certificate is issued by Google Trust Services (WE1), which does not inherently validate the site's legitimacy. These indicators, combined with the domain's hosting on Cloudflare Pages, align with common phishing infrastructure patterns designed to evade detection and maintain operational security. Users who have visited trxexx-go.pages.dev or interacted with its content should immediately cease all transactions and revoke any connected wallet permissions. If cryptocurrency was transferred, report the incident to the relevant blockchain explorer and local cybercrime authorities, providing transaction hashes and timestamps. Monitor connected accounts for unauthorized access and consider resetting credentials for any platforms where similar login details were used. Security teams should update blocklists to include this domain and its associated IP address, while network administrators may implement DNS-based filtering to prevent access.