dvo-a[.]com

The domain dvo-a.com has been identified as a Bitvavo brand impersonation site, indicative of a phishing attempt aimed at credential theft. This domain was created on March 10, 2026, and was designed to trick users into revealing their login credentials by mimicking the legitimate Bitvavo cryptocurrency platform.

Infrastructure analysis reveals that dvo-a.com has been flagged by 22 out of 95 security vendors on VirusTotal. The domain is registered with a registrar that is not specified in the current intelligence. It resolves to the IP address 52.28.67.255, which is located in Germany (DE) and is associated with Amazon.com, Inc. (AS16509). The domain was created on March 10, 2026, and currently appears on 1 security blocklist. The SSL certificate used is R12, which does not inherently indicate malicious intent but can be used to enhance the credibility of the phishing site.

As of the latest intelligence, dvo-a.com is offline. However, the risk remains elevated due to the potential for the domain to be reactivated or repurposed for further phishing activities. Users are advised to avoid visiting this domain and to report any related suspicious activity to their security teams. Organizations should ensure that their web filtering and security policies are updated to block this domain and educate users on recognizing and avoiding phishing attempts.