web3-custodian[.]com

The domain web3-custodian.com has been identified as a phishing infrastructure specifically targeting users of the Avalanche blockchain platform. This domain operates under the guise of a custodial service, attempting to deceive victims into disclosing wallet credentials or transferring digital assets under false pretenses. Current analysis confirms the domain is offline, though prior activity indicates a clear intent to impersonate legitimate Avalanche services for fraudulent purposes.

Technical indicators reveal the domain was registered on October 9, 2025, through HOSTINGER operations, UAB, and resolves to the IP address 92.113.23.23. Security vendor analysis on VirusTotal shows 2 of 95 vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0 out of 100. The domain appears on four distinct security blocklists, including entries from Codeesura, Polkadot, PhishDestroy, and Enkrypt. The page title, "home - web3-custodian.com," further corroborates its fraudulent nature by mimicking a legitimate service interface.

Given its elevated risk level and confirmed offline status, this domain remains a latent threat. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users who may have interacted with the domain should immediately revoke any wallet permissions, rotate credentials, and scan systems for malware. Monitoring for similar domains registered through the same registrar or resolving to the identified IP is recommended to preempt further phishing attempts.