# prep-caverion-web-com.solitaonline.fi — SUSPICIOUS

> prep-caverion-web-com.solitaonline.fi is a fraudulent Aave login page hosted on an unflagged domain created in 2016.

## Summary
PhishDestroy identifies prep-caverion-web-com.solitaonline.fi as an active brand impersonation domain targeting Aave users through a spoofed login portal. This domain presents a high-risk threat to cryptocurrency portfolio security via credential harvesting.  

This domain was flagged during active monitoring with zero detections across 95 VirusTotal engines, a critical blind spot for legacy detection systems. It was registered through Gandi SAS on November 10, 2016, and resolves to IP 104.18.37.143 via Google Trust Services SSL certification. The combination of aged domain registration and zero-blocklist coverage creates a dangerous attack surface for unsuspecting Aave ecosystem participants.  

Users who visited this domain should immediately check their Aave-connected wallets for unauthorized transactions. If any login credentials were entered, revoke all approvals immediately through the Aave protocol interface and rotate wallet addresses. Never reuse the compromised password across services. Report the domain to Aave security teams and local cybercrime authorities while scanning all devices for potential malware delivered through this fraudulent gateway. The aged domain registration indicates this attack infrastructure has likely been operational for years without detection, making this a long-tail threat requiring urgent attention.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Aave
- Page title: Sign in to your account

## Domain Intelligence
- Registered: 2016-11-10 00:00:00
- Registrar: Gandi SAS
- IP: 104.18.37.143

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/378382ab-48d9-4dac-af50-e3bbaa8ced30
- PhishDestroy: https://phishdestroy.io/domain/prep-caverion-web-com.solitaonline.fi/
- LLM endpoint: https://phishdestroy.io/domain/prep-caverion-web-com.solitaonline.fi/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/prep-caverion-web-com.solitaonline.fi/
Last updated: 2026-03-24