walcontmax[.]online

On July 24, 2026, the domain walcontmax.online was observed to be associated with a fraudulent campaign impersonating the Avalanche brand. The site was registered on June 21, 2025 through Upperlink Limited and resolves to the IPv4 address 198.12.93.82, which belongs to AS36352 (HostPapa) in the United States. The HTTP service is currently taken offline, but historical evidence indicates the domain was used in a crypto‑scam context, as reflected by the Scamadviser classification of "Crypto Scam" and a low trust rating of 19 / 100 from both Scamadviser and Gridinsoft. The page title returned by the server was "walcontmax", which does not provide additional context about the malicious content.

Reputation services have flagged the domain on four public blocklists, and it is actively blocked by the anti‑phishing feeds PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal reported that three out of ninety‑three scanners flagged the domain, reinforcing the suspicion of malicious intent. AlienVault OTX contains a single pulse that references the same indicator, indicating limited but existing community awareness. The SSL certificate presented is identified as version R13, a legacy certificate that offers little security assurance.

The combination of a recent registration, low trust scores, association with a known cryptocurrency brand, and multiple independent detections suggests an elevated risk profile. However, because the site is currently offline, direct analysis of payloads, login pages, or credential‑stealing mechanisms is not possible, leaving the exact phishing kit or tactics unknown. Defenders should continue to block the domain at perimeter filters, update threat‑intel feeds with the indicator, and monitor for any re‑use of the underlying IP address or similar domain registrations by the same actor. Ongoing surveillance of the hosting provider (HostPapa) and registrar (Upperlink Limited) for related activity is also recommended.