axidau[.]com

This domain is identified as a high-risk cryptocurrency wallet credential phishing site targeting users through deceptive interfaces mimicking legitimate wallet services. The fraudulent page, titled 'AxiDa,' is designed to harvest sensitive authentication details, including private keys and recovery phrases, under the pretense of account verification or wallet synchronization. Such attacks pose a critical risk of unauthorized asset transfers and permanent financial loss due to the irreversible nature of blockchain transactions. Analysis indicates the domain was registered on April 6, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with newly created phishing infrastructure. The domain resolves to the IP address 18.66.112.15 and is secured with an SSL certificate issued by Amazon, a common tactic to lend false legitimacy. Detection metrics reveal significant malicious classification, with 11 out of 95 security vendors on VirusTotal flagging the domain as phishing-related. Additionally, the domain appears on three distinct security blocklists and has been incorporated into one threat intelligence pulse on a major open-source threat exchange platform. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. Users who accessed axidau.com or interacted with its content are advised to take immediate remedial action. Any credentials, private keys, or recovery phrases entered on the site should be considered compromised. Affected individuals must transfer assets to a new, secure wallet using a clean device and revoke any connected dApp authorizations. System scans using updated security tools are recommended to detect potential secondary infections. Monitoring for unauthorized transactions on all associated blockchain addresses is critical, and users should report the incident to relevant fraud reporting platforms to contribute to broader threat mitigation efforts.