# aave-lending.com — MALICIOUS

> Stay alert: aave-lending.com is a high-risk phishing site impersonating Aave Lending. Avoid interaction and ensure your credentials remain secure.

## Summary
PhishDestroy identifies aave-lending.com as a high-risk generic phishing domain impersonating the Aave lending platform. The domain was flagged for phishing targeting DeFi users.

Technical analysis reveals the domain resolved to IP 104.21.36.186 and was registered via NiceNIC International Group Co., Limited. It appeared on one security blocklist and triggered alerts from 10 out of 95 VirusTotal scanners. The suspicious page title was www.www.lending-a-a-v-e.net, indicating deceptive brand mimicry.

aave-lending.com has since been taken offline, rendering it inactive. PhishDestroy recommends vigilance and advises users to verify URLs carefully before submitting sensitive information to prevent credential compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: www.www.lending-a-a-v-e.net

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.36.186
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["hunts.ns.cloudflare.com", "mona.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01993930-d302-76b9-8d81-d16a080f6c16.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5fff75c9-3df2-4cb9-aa0f-dd07a87b0d92
- PhishDestroy: https://phishdestroy.io/domain/aave-lending.com/
- LLM endpoint: https://phishdestroy.io/domain/aave-lending.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aave-lending.com/
Last updated: 2026-03-19