What Gridinsoft observed on jaxx-wallet.to
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261026014343-c9e93a58
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current redirect leads to a branded wallet-secret form whose public code prepares transmission of entered secrets. This supports a preventive warning; completed theft was not reproduced.
Analyst findings
Review 3 documented observations View evidence
The reviewed jaxx-wallet.to root redirects to jaxx-wallet.co, which presents Jaxx Liberty branding and a Decentral copyright claim. Support, social and legal links lead to the same connection flow; those claims do not establish authorization.
-
Final URL
https://jaxx-wallet.co/
The connection page offers recovery-phrase and private-key import. The recovery option displays 12 input fields. Static code review shows both submit handlers passing the entered secret to a callback that compresses and encrypts it and prepares a POST to /collect-analytics. This transmission design was observed in code; no form was submitted.
- Public artifact URL https://jaxx-wallet.co/connect
- Public artifact URL https://jaxx-wallet.co/_next/static/chunks/0d8wyne-zbmog.js
- Public artifact URL https://jaxx-wallet.co/track.js
Decentral’s announcement states that normal Jaxx Liberty operations ended on 2023-03-27. The actual 2026-10-01 archive shows Jaxx branding. Existing urlscan entries include this target and related redirect chains; OTX has 3 target-domain records and none for exact www. None establishes current brand authorization.
- Public artifact URL https://www.prnewswire.com/news-releases/decentral-amasses-62-000-andiami-whitelist-registrants-announces-upcoming-whitelist-closing--jaxx-liberty-sunsetting-301763923.html
- Public artifact URL https://web.archive.org/web/20261001193328/https://jaxx-wallet.to/
- Public artifact URL https://urlscan.io/
- Public artifact URL https://otx.alienvault.com/indicator/domain/jaxx-wallet.to
Scope and limitations
- No recovery phrase or private key was entered, no form submitted, no wallet connected and no transaction signed. Server-side receipt or subsequent use of data was not tested.
- Independent authorization from Decentral for the reviewed addresses was not established. A copyright claim and same-origin submission do not establish that authorization.
- The exact www alias could not be reviewed over valid TLS. That access limitation alone is not evidence of malicious behavior. This review does not establish a specific victim, stolen funds or a malware binary.
Help protect others by sharing this page on social media! The more people who know about jaxx-wallet.to, the fewer chances they have to deceive someone else. Help others evaluate jaxx-wallet.to by sharing this page on social media!