claim[.]avantisx[.]com

Analysis of claim.avantisx.com confirms it as a wallet seed phishing site targeting the Across brand, operational from September 20, 2025, until its takedown. The domain was registered through NameCheap, Inc., and utilized Cloudflare nameservers (achiel.ns.cloudflare.com, sneh.ns.cloudflare.com) and hosting (AS13335, US). It resolved to IP 188.114.96.3, a Cloudflare proxy address, and lacked an SSL certificate. The page title, 'Home | Avantis,' suggests an attempt to mimic a legitimate platform, though the exact content and functionality remain unconfirmed due to its offline status.

Security vendors flagged this domain with high consistency: Scamadviser assigned a trust score of 1/100, Gridinsoft rated it 0/100, and it appeared on two security blocklists (PhishDestroy, ScamSniffer). VirusTotal detections reached 7 of 95 vendors, indicating moderate consensus on its malicious nature. The domain's scam type is classified as wallet/seed phishing, aligning with the impersonation of Across, a known cryptocurrency-related service. Defenders should treat this domain as a confirmed threat.

Indicators include its Cloudflare-hosted infrastructure, absence of SSL, and low trust scores from multiple sources. While the domain is currently offline, historical resolution data (188.114.96.3) and registrar details (NameCheap) may aid in identifying related campaigns. No evidence links this domain to other kits or infrastructure beyond the provided data. Further investigation into associated IPs or registrant details is recommended for potential clustering with other phishing operations.