# olx.mreza-dostave.cfd — SUSPICIOUS

> Aave-themed impersonation domain olx.mreza-dostave.cfd detected. Users urged to avoid engagement; domain resolves to 104.21.93.167.

## Summary
PhishDestroy identifies olx.mreza-dostave.cfd as an active brand impersonation domain targeting Aave users. The domain is currently under investigation with a pending risk level assessment.    This domain was flagged for impersonating Aave with the following technical indicators: it resolves to IP address 104.21.93.167 and was registered through Global Domain Group LLC on March 17, 2026. The SSL certificate was issued by Let's Encrypt. As of the latest scan, VirusTotal shows 0 detections out of 95 engines, indicating it remains unflagged by current antivirus systems. The domain has not yet appeared on any public blocklists, and trust scores are pending further analysis.    Mitigation efforts should prioritize immediate user awareness, as the domain leverages Aave branding to deceive visitors. Users interacting with cryptocurrency platforms should verify domain legitimacy before entering credentials or clicking links. Network defenses should consider blocking 104.21.93.167 and monitoring for SSL certificate reuse. Blocking rules may also account for any new domains registered through Global Domain Group LLC.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Aave

## Domain Intelligence
- Registered: 2026-03-17 16:05:13
- Registrar: Global Domain Group LLC
- IP: 104.21.93.167

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/02029ef1-5b79-4d52-83ca-e98128a3e54a
- PhishDestroy: https://phishdestroy.io/domain/olx.mreza-dostave.cfd/
- LLM endpoint: https://phishdestroy.io/domain/olx.mreza-dostave.cfd/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/olx.mreza-dostave.cfd/
Last updated: 2026-03-20