jaxxliberty-web[.]com

This domain, jaxxliberty-web.com, is currently under investigation for cryptocurrency wallet phishing activity targeting users of the Jaxx Liberty brand. The site presents itself as a legitimate crypto wallet interface, designed to harvest sensitive credentials, recovery phrases, or private keys from unsuspecting victims. As of the latest assessment, the domain remains active and has not been flagged by security vendors for malicious behavior. Infrastructure analysis reveals the domain was registered on April 13, 2026, through Navicosoft Pty Ltd, a registrar frequently associated with newly deployed phishing infrastructure. The site resolves to the IP address 188.114.96.3, which currently hosts no known legitimate services linked to the authentic Jaxx Liberty platform. VirusTotal telemetry indicates zero detections across 95 security vendors, suggesting the infrastructure is either newly established or employing evasion techniques to avoid detection. The SSL certificate is issued by Let's Encrypt, a common choice for threat actors due to its low-cost and automated issuance process. No blocklist entries or trust score deviations have been recorded at this time, though the domain's creation date and hosting characteristics align with known phishing campaign patterns. The current risk assessment categorizes this domain as an active threat with potential for credential compromise. Organizations and end-users are advised to block access to jaxxliberty-web.com at the network perimeter and implement real-time monitoring for connections to the associated IP address 188.114.96.3. Users who may have interacted with the site should immediately revoke any entered credentials, rotate recovery phrases, and monitor wallet addresses for unauthorized transactions. Security teams are encouraged to submit the domain and IP to threat intelligence platforms for broader detection coverage, as the lack of current detections may indicate a gap in existing protections.