Phishing sites impersonating Aave

PhishDestroy has recorded 1,419 phishing domains impersonating Aave since 2024-03-19, 74 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .xyz. The official Aave domain is aave.com: any other site asking for your login or wallet is not Aave.

1,419
Domains, all time
74
Last 30 days
514
Online at last check
252
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 112026-07-28: 22026-07-29: 22026-07-30: 72026-07-31: 12026-08-01: 32026-08-02: 32026-08-03: 72026-08-04: 42026-08-05: 12026-08-06: 32026-08-07: 12026-08-08: 02026-08-09: 122026-08-10: 82026-08-11: 02026-08-12: 72026-08-13: 02026-08-14: 12026-08-15: 52026-08-16: 32026-08-17: 32026-08-18: 12026-08-19: 12026-08-20: 02026-08-21: 02026-08-22: 12026-08-23: 12026-08-24: 02026-08-25: 02026-08-26: 12026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 12026-09-02: 22026-09-03: 12026-09-04: 02026-09-05: 12026-09-06: 12026-09-07: 22026-09-08: 22026-09-09: 12026-09-10: 02026-09-11: 22026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 32026-09-20: 12026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 12026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 12026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 32026-10-08: 02026-10-09: 142026-10-10: 02026-10-11: 72026-10-12: 02026-10-13: 102026-10-14: 112026-10-15: 12026-10-16: 182026-10-17: 02026-10-18: 02026-10-19: 42026-10-20: 02026-10-21: 42026-10-22: 0
Aave phishing domains detected per day: 182 from 2026-07-25 to 2026-10-22; peak 18.

How to tell a fake Aave site

Official domain: aave.com.

Words most often added to the brand in reported domains: wallet, arweave, connect, swap, protocol, exchange, api, defi, dashboard, chain.

  • Type the address yourself or use a bookmark; phishing links for Aave arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Aave will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Aave phishing domains

The 50 most recently detected domains impersonating Aave
DomainFirst detectedStatus at last checkRegistrar
poratls.run2026-10-21OnlineNICENIC
miafinance.ink2026-10-21OnlineNICENIC
manltestaked.ink2026-10-21OnlineNICENIC
aaev.ink2026-10-21OnlineNICENIC
unsiki.my2026-10-19OnlineGname.com
unsiki.asia2026-10-19OnlineGNAME.COM
unsikik.cam2026-10-19OnlineGname.com
cmejp.asia2026-10-19OnlineGNAME.COM
onchnia.asia2026-10-16OnlineGNAME.COM
onchnia.cam2026-10-16OnlineGname.com
stakoplus.com2026-10-16OnlineCloudflare
stakoplus.app2026-10-16OnlineCloudFlare
stakopro.app2026-10-16OnlineCloudFlare
stakoex.app2026-10-16OnlineCloudFlare
stakoplus.org2026-10-16OnlineCloudflare
stakovip.app2026-10-16OnlineCloudFlare
stakopro.org2026-10-16OnlineCloudflare
stakovip.link2026-10-16OnlineCloudflare
stakobit.org2026-10-16OnlineCloudflare
stakobit.com2026-10-16OnlineCloudflare
ruqvexch.com2026-10-16OnlineCloudflare
ruqvexc.com2026-10-16OnlineCloudflare
stakobit.app2026-10-16OnlineCloudFlare
stakovip.org2026-10-16OnlineCloudflare
ruqvexainfo.com2026-10-16OnlineCloudflare
stakoex.com2026-10-16OnlineCloudflare
marketmavencapital.com2026-10-15OnlineWix.com
royal-captal-ex.vip2026-10-14OnlineNameMart
royal-captal-ex.com2026-10-14OnlineKey-Systems
royal-captal-ex.cc2026-10-14OnlineDominet (HK)
ruqvexabit.com2026-10-14OnlineCloudflare
ruqvexac.com2026-10-14OnlineCloudflare
onchnia.bond2026-10-14OnlineGname.com
onchnia.qpon2026-10-14OnlineGname.com
cmecpr.com2026-10-14OfflineGname.com
voptionaset.live2026-10-14OnlineSpaceship
bitmart-cex.cc2026-10-14OfflineGname.com
bitmart-cex.net2026-10-14OnlineGname.com
stakodefi.net2026-10-13OnlineCloudflare
stakoex.org2026-10-13OnlineCloudflare
stakodefi.org2026-10-13OnlineCloudflare
stakodefi.link2026-10-13OnlineCloudflare
stakodefi.app2026-10-13OnlineCloudFlare
fudyprimer.com2026-10-13OnlineGransy, s.r.o
oralce-chain-link.ink2026-10-13OnlineNICENIC
swaponix.xyz2026-10-13UnknownNICENIC
logicmen.com2026-10-13OnlineGname.com
fidprimerlty.live2026-10-13OnlineDYNADOT
distributions-aave.icu2026-10-11OnlineEranet
distributions-aave.top2026-10-11OfflineEranet

All 1,419 Aave reports

Where they are registered and hosted

Registrars

  1. NiceNIC184
  2. Cloudflare156
  3. NICENIC104
  4. PublicDomainRegistry.com62
  5. Web Commerce Communications58
  6. Gname.com52
  7. NameSilo48
  8. Dynadot40

Top-level domains

  1. .com554
  2. .xyz91
  3. .dev91
  4. .app84
  5. .net77
  6. .org62
  7. .top39
  8. .cc30

Hosting networks

  1. CLOUDFLARENET, US556
  2. Cloudflare, Inc.276
  3. CLOUDFLARENET - Cloudflare, Inc., US134
  4. AMAZON-02, US37
  5. Amazon.com, Inc.28
  6. Hostinger International Limited21
  7. IQWEB IQWeb FZ-LLC, AE20
  8. Datacamp Limited19

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Aave; share of all PhishDestroy reports: 0.63%.