# aaveswz.pages.dev — SUSPICIOUS

> The domain aaveswz.pages.dev mimics Aave. Stay vigilant and avoid sharing sensitive info until investigation concludes.

## Summary
PhishDestroy identifies aaveswz.pages.dev as a potential brand impersonation threat targeting the Aave DeFi platform. The site presents itself as an educational guide, which may be used to mislead users.

The domain is registered via Cloudflare, Inc. and resolves to IP 172.66.47.110. Despite no antivirus detections currently on VirusTotal, its use of a subdomain under pages.dev suggests possible misuse of legitimate hosting services for deceptive purposes.

This domain remains under active investigation. Users are advised to exercise caution, avoid inputting personal or financial data, and verify official sources when dealing with Aave-related content.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Aave: DeFi Lending Guide, Rates, Risks, and How To Start

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.110
- Nameservers: felicity.ns.cloudflare.com laila.ns.cloudflare.com
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/qYySSXc9/00f8ae196821.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/92ae57cf-a928-4739-a06a-e963b99aed17
- PhishDestroy: https://phishdestroy.io/domain/aaveswz.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/aaveswz.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aaveswz.pages.dev/
Last updated: 2026-03-19