huavax[.]com

PhishDestroy identifies huavax.com as an active brand impersonation domain targeting Avalanche users. The site presents itself as a crypto casino named "Huavax" and lures victims under the guise of blockchain-based gaming. No drainer kit artifacts have been observed in the page content, but the domain’s title and branding clearly mimic Avalanche’s identity to deceive users into depositing cryptocurrency. This domain was flagged with a VirusTotal detection ratio of 6/95 as of the latest scan, indicating no current antivirus or security vendor coverage. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP 172.67.147.235, and was created on April 21, 2026. It holds a valid Let's Encrypt SSL certificate and remains unblocked by Google Safe Browsing (GSB) with zero listings on public blocklists. These technical indicators suggest low immediate detection but high potential for future abuse as the domain matures. As of this report, huavax.com remains active and continues to pose a credible impersonation threat to Avalanche users. Security teams are advised to add this domain to blocklists and monitor for associated wallet addresses. While the immediate risk of malware is low, the risk of financial fraud via cryptocurrency theft is significant. Users should avoid interacting with this domain, report it to their security tools, and verify Avalanche-related services only through official channels.