# doavax.com — SUSPICIOUS

> Malicious domain doavax.com mimics Avalanche brand with just 0/95 VirusTotal detections since creation on March 11, 2026.

## Summary
PhishDestroy identifies doavax.com as a live brand-impersonation domain targeting Avalanche users. This site poses as the official Avalanche platform to harvest credentials and crypto assets, leveraging brand recognition for credibility and trust. Traffic to this domain may result in unauthorized access to wallets, exchange accounts, or personal information if credentials are entered.  This domain was flagged on March 11, 2026, through Gname.com Pte. Ltd., with 0 detections across 95 VirusTotal engines as of the investigation start. It resolves to IP 188.114.97.3 and uses a Let’s Encrypt SSL certificate to appear legitimate. The absence of detections suggests this campaign may be newly operational or using evasion tactics.  If you visited doavax.com, do not enter any credentials or connect a wallet. Check your browser history and disable saved passwords linked to Avalanche-related sites. Disconnect any connected wallets from untrusted sites, revoke permissions via blockchain explorers, and scan your device for malware. Report the domain to your antivirus provider and block 188.114.97.3 at your network perimeter. Monitor financial and crypto accounts for unusual activity.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Avalanche

## Domain Intelligence
- Registered: 2026-03-11 16:01:33
- Registrar: Gname.com Pte. Ltd.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/doavax.com
- PhishDestroy: https://phishdestroy.io/domain/doavax.com/
- LLM endpoint: https://phishdestroy.io/domain/doavax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/doavax.com/
Last updated: 2026-04-07