avax-stake[.]com

Analysis of avax-stake.com indicates this domain is an active crypto scam impersonating the Across protocol, a cross-chain bridging service. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain currently resolves to IP 66.33.60.130, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The site is proxied by Cloudflare, with nameservers adele.ns.cloudflare.com and kurt.ns.cloudflare.com, and presents an HTTP 521 status, suggesting server-side blocking or misconfiguration. The page title 'Homepage | Avax.network' does not match the claimed brand target (Across), which may indicate an attempt to exploit brand confusion or typosquatting. The domain is flagged by at least one security blocklist and has been classified as a crypto scam. Three of 93 security vendors on VirusTotal detect malicious activity associated with this domain. Detected technologies include AngularJS, jQuery, and Cloudflare, which are common in both legitimate and fraudulent sites but provide no definitive classification alone. The SSL certificate is issued by Google Trust Services (WE1), a valid but non-exclusive indicator of legitimacy. Defenders should treat this domain as high-risk due to its active status, brand impersonation, and confirmed scam classification. Blocking at the DNS or network level is recommended, particularly for organizations handling cryptocurrency or cross-chain transactions. Further investigation into the site's content is advised to identify specific attack vectors, such as fake staking portals or wallet-draining mechanisms. The domain's creation date and hosting provider do not deviate from typical phishing infrastructure patterns, but the use of Cloudflare may complicate takedown efforts or attribution.