v2-traderjoexyz[.]net

Analysis indicates that the domain v2-traderjoexyz.net was registered on 21 February 2026 through Web Commerce Communications Limited and is hosted on a server owned by AS202412 Omegatech LTD located in the Netherlands (IP 178.16.53.184). The authoritative name servers are ns100.webnic.cc and ns101.webnic.cc. HTTP service is provided by Nginx and no TLS certificate is configured, meaning the site was reachable only over plain HTTP. The page title retrieved during the brief window when the site was live reads “Trader Joe Avalanche DEX: Revolutionizing DeFi Trading”, which directly references the Avalanche blockchain brand. The domain is classified as a crypto‑scam that impersonates Avalanche, matching the provided brand target.

VirusTotal scans returned 12 positive detections out of 93 scanners, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. The site has been taken offline, and its HTTP status is no longer reachable. Evidence confirms that the infrastructure is typical of low‑cost fraudulent sites: registration via a generic registrar, use of WebNIC name servers, and lack of HTTPS. The presence of a page title that claims affiliation with Trader Joe and Avalanche suggests an attempt to lure users into a decentralized exchange (DEX) interface, potentially to harvest private keys or funds.

However, because the site is offline, no malicious payloads, scripts, or credential‑phishing forms have been captured, leaving the exact attack vector uncertain. Defenders should continue to block the IP address 178.16.53.184 and the domain itself at DNS level, monitor for re‑registration or similar look‑alike domains, and update endpoint protection signatures with the observed VirusTotal detections. Threat intelligence feeds should be updated to reflect the impersonation of Avalanche and the association with a Trader Joe DEX theme.