m[.]ava-trabeip[.]com

PhishDestroy has identified the domain m.ava-trabeip.com as a high-risk generic phishing threat. This domain was designed to impersonate the legitimate trading platform AVATRADE, attempting to deceive users into revealing sensitive login credentials or financial information. The site is now offline, but its prior activity posed a significant risk to unsuspecting visitors.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 10 out of 95 security vendors marking it as malicious, and it appears on three separate security blocklists. The domain was registered through GMO Internet, Inc. on March 13, 2026, and resolved to IP address 188.114.97.3. Its SSL certificate was issued by Let's Encrypt (E7), a common choice for phishing sites due to its free and automated issuance. The page title was set to "AVATRADE" to mimic the legitimate brand.

Users who may have interacted with this domain should take immediate action. Since it is a phishing site targeting AVATRADE credentials, change any passwords used on that domain and enable two-factor authentication on the legitimate AVATRADE account. Monitor financial accounts for unauthorized activity and report any suspicious transactions. Always verify URLs before entering sensitive information, and rely on official sources to access trading platforms.