shivanshsrivastavax[.]github[.]io

This domain, shivanshsrivastavax.github.io, poses a high-risk brand impersonation threat specifically targeting Avalanche cryptocurrency users. Analysis indicates the site is designed to mimic legitimate Avalanche platforms, likely to deceive victims into disclosing sensitive credentials, wallet keys, or transferring funds to attacker-controlled addresses. The fraudulent nature of this domain aligns with common tactics used in cryptocurrency scams, where brand trust is exploited to facilitate unauthorized access or financial theft. Infrastructure analysis reveals the domain is hosted on GitHub Pages infrastructure, resolving to the IP address 185.199.108.153. It is flagged by Google Safe Browsing for SOCIAL_ENGINEERING, and VirusTotal reports 9 out of 95 security vendors detecting it as malicious. The domain uses a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. No creation date is publicly available due to GitHub Pages' hosting model, but its active status and detection metrics confirm ongoing malicious activity. Users who have visited shivanshsrivastavax.github.io should immediately cease all interaction with the site. If credentials or wallet information were entered, affected parties must transfer assets to a new, secure wallet and revoke any compromised access. Monitor accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the domain to relevant blocklists and cryptocurrency security teams to aid in mitigation efforts. Avoid clicking on any links associated with this domain or similar impersonation attempts.