app-avaa[.]cam

This domain, app-avaa.cam, is a fraudulent site designed to impersonate the legitimate Aave decentralized finance protocol. The page title explicitly copies Aave's branding, reading Aave - Open Source Liquidity Protocol, to trick users into believing they are interacting with the real platform. The threat category is brand impersonation, a form of phishing where attackers mimic a trusted entity to steal login credentials, wallet keys, or other sensitive information. The domain is currently offline, but it was active and posed a high risk to users who might have visited it.

Technical analysis confirms the malicious nature of this domain. VirusTotal reports that 14 out of 95 security vendors flag this domain as malicious, a 14.7% detection rate that indicates broad consensus among threat intelligence platforms. The domain was created on August 25, 2025, through OwnRegistrar, Inc., a registrar sometimes associated with low-quality or abusive registrations. It resolves to IP address 104.21.48.1, which is part of Cloudflare's infrastructure, often abused by phishers for its anonymity. Scamadviser gives it a trust score of 45 out of 100, reflecting low credibility, and it appears on 5 separate security blocklists. Security tools such as Polkadot, Codeesura, PhishDestroy, ScamSniffer, and Enkrypt have already blocked this domain, confirming its threat status.

If you visited this domain, take immediate action. Do not enter any personal information, passwords, or cryptocurrency wallet details. If you already submitted credentials, change them on the legitimate Aave platform immediately and enable two-factor authentication. Monitor your accounts for unauthorized transactions, especially on blockchain wallets. Run a full antivirus scan on your device to check for potential malware. Report the domain to your email provider or security team if it was accessed on a corporate network. The domain is now offline, but similar variations may appear, so always verify URLs directly from official sources.