avaxholdings[.]com

This domain, avaxholdings.com, is actively flagged as a high-risk crypto scam impersonating the Avalanche blockchain network. Registered on March 2, 2025, through Global Domain Group LLC, the domain resolves to IP address 107.173.193.235, hosted on AS36352 (HostPapa) in the United States. Infrastructure analysis reveals the use of nameservers dns3.fimgohost.com and dns4.fimgohost.com, a configuration commonly observed in fraudulent operations. The SSL certificate is issued by GoDaddy.com, Inc., which does not inherently indicate malicious activity but is frequently leveraged by threat actors due to its accessibility. The domain appears on one security blocklist, with two of 95 security vendors on VirusTotal flagging it as malicious. While the detection rate is low, this does not confirm safety, as phishing domains often evade initial scans. The Gridinsoft trust score of 0/100 further supports the assessment of high risk. The page title, 'avaxholdings.com,' aligns with the domain name but provides no additional context about the site's content or functionality. No phishing kit or specific scam mechanics have been confirmed at this time, though the classification as a crypto scam suggests it may target users with fraudulent investment or wallet-draining schemes. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where Avalanche-related services are accessed. Monitoring for connections to the associated IP (107.173.193.235) and nameservers may help identify related infrastructure. Given the domain's recent registration and active status, continued vigilance is recommended, as threat actors may rapidly modify or migrate infrastructure to evade detection.