connect-us-avx-wallet[.]pages[.]dev

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Avalanche cryptocurrency users. Analysis indicates the site masquerades as an official Avalanche wallet solution, likely designed to deceive users into disclosing private keys or transferring assets to attacker-controlled addresses. The infrastructure exhibits multiple technical indicators consistent with fraudulent wallet impersonation schemes, including the use of a misleading page title and domain naming conventions intended to mimic legitimate services. Infrastructure analysis reveals the domain connect-us-avx-wallet.pages.dev was registered through Cloudflare, Inc. on October 15, 2025, and resolves to the IP address 188.114.97.3. Security vendor detection rates on VirusTotal show 7 out of 95 engines flagging the domain as malicious, while the Gridinsoft trust score remains at 0 out of 100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the underlying fraudulent intent of the domain. Mitigation steps for this specific threat type include immediate cessation of all interaction with the domain and any associated wallet addresses. Users who may have engaged with this service should transfer assets to a new, verified wallet and revoke any connected dApp permissions. Organizations should update internal blocklists to include this domain and its resolving IP address. Given the brand impersonation nature of this threat, users are advised to verify wallet authenticity exclusively through official Avalanche communication channels and cross-reference domain registration details with known legitimate sources before conducting any transactions.