aaveclassic[.]xyz

The domain aaveclassic.xyz is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Aave. It presents itself as 'Aave Classic' to deceive victims into interacting with fraudulent cryptocurrency services, posing an elevated risk of financial loss. No drainer kit was identified, but the site is classified as a cryptocurrency scam. As of the latest verification, aaveclassic.xyz has been taken offline.

Technical indicators confirm the malicious nature of aaveclassic.xyz. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft (trust score 0/100) and Trustwave. It appears on 1 security blocklist, specifically PhishDestroy, though Google Safe Browsing did not flag it. The domain was created on February 21, 2026, and resolves to the IP address 172.66.175.220, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title was 'Aave Classic'.

Users who interacted with aaveclassic.xyz should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to the impersonated brand (Aave) and relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units. Monitor accounts for unauthorized transactions and consider freezing credit if personal data was exposed.