# Phishing sites impersonating Aave PhishDestroy has recorded 1,419 phishing domains impersonating Aave since 2024-03-19, 74 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .xyz. The official Aave domain is aave.com: any other site asking for your login or wallet is not Aave. 1,419Domains, all time 74Last 30 days 514Online at last check 252Confirmed takedowns ## New domains in the last 90 days Aave phishing domains detected per day: 182 from 2026-07-25 to 2026-10-22; peak 18. ## How to tell a fake Aave site Official domain: aave.com. Words most often added to the brand in reported domains: wallet, arweave, connect, swap, protocol, exchange, api, defi, dashboard, chain. - Type the address yourself or use a bookmark; phishing links for Aave arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Aave will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Aave phishing domains The 50 most recently detected domains impersonating Aave Domain | First detected | Status at last check | Registrar | [poratls.run](https://phishdestroy.io/domain/poratls.run/) | 2026-10-21 | Online | NICENIC | [miafinance.ink](https://phishdestroy.io/domain/miafinance.ink/) | 2026-10-21 | Online | NICENIC | [manltestaked.ink](https://phishdestroy.io/domain/manltestaked.ink/) | 2026-10-21 | Online | NICENIC | [aaev.ink](https://phishdestroy.io/domain/aaev.ink/) | 2026-10-21 | Online | NICENIC | [unsiki.my](https://phishdestroy.io/domain/unsiki.my/) | 2026-10-19 | Online | Gname.com | [unsiki.asia](https://phishdestroy.io/domain/unsiki.asia/) | 2026-10-19 | Online | GNAME.COM | [unsikik.cam](https://phishdestroy.io/domain/unsikik.cam/) | 2026-10-19 | Online | Gname.com | [cmejp.asia](https://phishdestroy.io/domain/cmejp.asia/) | 2026-10-19 | Online | GNAME.COM | [onchnia.asia](https://phishdestroy.io/domain/onchnia.asia/) | 2026-10-16 | Online | GNAME.COM | [onchnia.cam](https://phishdestroy.io/domain/onchnia.cam/) | 2026-10-16 | Online | Gname.com | [stakoplus.com](https://phishdestroy.io/domain/stakoplus.com/) | 2026-10-16 | Online | Cloudflare | [stakoplus.app](https://phishdestroy.io/domain/stakoplus.app/) | 2026-10-16 | Online | CloudFlare | [stakopro.app](https://phishdestroy.io/domain/stakopro.app/) | 2026-10-16 | Online | CloudFlare | [stakoex.app](https://phishdestroy.io/domain/stakoex.app/) | 2026-10-16 | Online | CloudFlare | [stakoplus.org](https://phishdestroy.io/domain/stakoplus.org/) | 2026-10-16 | Online | Cloudflare | [stakovip.app](https://phishdestroy.io/domain/stakovip.app/) | 2026-10-16 | Online | CloudFlare | [stakopro.org](https://phishdestroy.io/domain/stakopro.org/) | 2026-10-16 | Online | Cloudflare | [stakovip.link](https://phishdestroy.io/domain/stakovip.link/) | 2026-10-16 | Online | Cloudflare | [stakobit.org](https://phishdestroy.io/domain/stakobit.org/) | 2026-10-16 | Online | Cloudflare | [stakobit.com](https://phishdestroy.io/domain/stakobit.com/) | 2026-10-16 | Online | Cloudflare | [ruqvexch.com](https://phishdestroy.io/domain/ruqvexch.com/) | 2026-10-16 | Online | Cloudflare | [ruqvexc.com](https://phishdestroy.io/domain/ruqvexc.com/) | 2026-10-16 | Online | Cloudflare | [stakobit.app](https://phishdestroy.io/domain/stakobit.app/) | 2026-10-16 | Online | CloudFlare | [stakovip.org](https://phishdestroy.io/domain/stakovip.org/) | 2026-10-16 | Online | Cloudflare | [ruqvexainfo.com](https://phishdestroy.io/domain/ruqvexainfo.com/) | 2026-10-16 | Online | Cloudflare | [stakoex.com](https://phishdestroy.io/domain/stakoex.com/) | 2026-10-16 | Online | Cloudflare | [marketmavencapital.com](https://phishdestroy.io/domain/marketmavencapital.com/) | 2026-10-15 | Online | Wix.com | [royal-captal-ex.vip](https://phishdestroy.io/domain/royal-captal-ex.vip/) | 2026-10-14 | Online | NameMart | [royal-captal-ex.com](https://phishdestroy.io/domain/royal-captal-ex.com/) | 2026-10-14 | Online | Key-Systems | [royal-captal-ex.cc](https://phishdestroy.io/domain/royal-captal-ex.cc/) | 2026-10-14 | Online | Dominet (HK) | [ruqvexabit.com](https://phishdestroy.io/domain/ruqvexabit.com/) | 2026-10-14 | Online | Cloudflare | [ruqvexac.com](https://phishdestroy.io/domain/ruqvexac.com/) | 2026-10-14 | Online | Cloudflare | [onchnia.bond](https://phishdestroy.io/domain/onchnia.bond/) | 2026-10-14 | Online | Gname.com | [onchnia.qpon](https://phishdestroy.io/domain/onchnia.qpon/) | 2026-10-14 | Online | Gname.com | [cmecpr.com](https://phishdestroy.io/domain/cmecpr.com/) | 2026-10-14 | Offline | Gname.com | [voptionaset.live](https://phishdestroy.io/domain/voptionaset.live/) | 2026-10-14 | Online | Spaceship | [bitmart-cex.cc](https://phishdestroy.io/domain/bitmart-cex.cc/) | 2026-10-14 | Offline | Gname.com | [bitmart-cex.net](https://phishdestroy.io/domain/bitmart-cex.net/) | 2026-10-14 | Online | Gname.com | [stakodefi.net](https://phishdestroy.io/domain/stakodefi.net/) | 2026-10-13 | Online | Cloudflare | [stakoex.org](https://phishdestroy.io/domain/stakoex.org/) | 2026-10-13 | Online | Cloudflare | [stakodefi.org](https://phishdestroy.io/domain/stakodefi.org/) | 2026-10-13 | Online | Cloudflare | [stakodefi.link](https://phishdestroy.io/domain/stakodefi.link/) | 2026-10-13 | Online | Cloudflare | [stakodefi.app](https://phishdestroy.io/domain/stakodefi.app/) | 2026-10-13 | Online | CloudFlare | [fudyprimer.com](https://phishdestroy.io/domain/fudyprimer.com/) | 2026-10-13 | Online | Gransy, s.r.o | [oralce-chain-link.ink](https://phishdestroy.io/domain/oralce-chain-link.ink/) | 2026-10-13 | Online | NICENIC | [swaponix.xyz](https://phishdestroy.io/domain/swaponix.xyz/) | 2026-10-13 | Unknown | NICENIC | [logicmen.com](https://phishdestroy.io/domain/logicmen.com/) | 2026-10-13 | Online | Gname.com | [fidprimerlty.live](https://phishdestroy.io/domain/fidprimerlty.live/) | 2026-10-13 | Online | DYNADOT | [distributions-aave.icu](https://phishdestroy.io/domain/distributions-aave.icu/) | 2026-10-11 | Online | Eranet | [distributions-aave.top](https://phishdestroy.io/domain/distributions-aave.top/) | 2026-10-11 | Offline | Eranet | [All 1,419 Aave reports](https://phishdestroy.io/domain/?brand=Aave) ## Where they are registered and hosted ### Registrars - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)184 - Cloudflare156 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)104 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)62 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)58 - [Gname.com](https://phishdestroy.io/registrar/name-com/)52 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)48 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)40 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)554 - [.xyz](https://phishdestroy.io/tld/xyz/)91 - [.dev](https://phishdestroy.io/tld/dev/)91 - [.app](https://phishdestroy.io/tld/app/)84 - [.net](https://phishdestroy.io/tld/net/)77 - [.org](https://phishdestroy.io/tld/org/)62 - [.top](https://phishdestroy.io/tld/top/)39 - [.cc](https://phishdestroy.io/tld/cc/)30 ### Hosting networks - CLOUDFLARENET, US556 - Cloudflare, Inc.276 - CLOUDFLARENET - Cloudflare, Inc., US134 - AMAZON-02, US37 - Amazon.com, Inc.28 - Hostinger International Limited21 - IQWEB IQWeb FZ-LLC, AE20 - Datacamp Limited19 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Aave; share of all PhishDestroy reports: 0.63%. Canonical: https://phishdestroy.io/brand/aave/