app-aoae[.]com

This domain, app-aoae.com, poses a direct threat to users of the decentralized finance platform Aave by impersonating its official dashboard. The site is designed to deceive visitors into entering sensitive credentials, such as wallet private keys or recovery phrases, under the false pretense of accessing legitimate financial services. Brand impersonation of this nature is a common tactic used to exploit trust in established platforms, often leading to unauthorized access and financial loss for victims. The site’s interface closely mirrors Aave’s official design, increasing the likelihood of successful deception, particularly among users unfamiliar with phishing indicators. Analysis indicates that app-aoae.com was registered on July 15, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domains. The domain is flagged by 5 out of 95 security vendors on VirusTotal, a clear indicator of its malicious intent. Additionally, it appears on two security blocklists and is actively blocked by multiple threat intelligence feeds. The domain resolved to the IP address 172.67.140.105, which may be part of a larger hosting infrastructure used to distribute phishing content. The page title, 'Aave Dashboard,' further confirms its intent to mislead users into believing they are interacting with the legitimate platform. If you visited app-aoae.com or entered any sensitive information, immediate action is required to mitigate potential risks. First, disconnect any wallets or accounts that may have been exposed and revoke any active sessions or permissions granted to unknown applications. Monitor connected accounts for unauthorized transactions and consider transferring assets to a new, secure wallet if compromise is suspected. Report the incident to the legitimate platform’s security team and relevant authorities to assist in tracking and mitigating the threat. Users should also scan their devices for malware, as phishing sites may deploy additional payloads to maintain persistence or exfiltrate data.