aave-eth-v3[.]net

PhishDestroy identifies aave-eth-v3.net as an active brand impersonation scam targeting the Aave protocol. This domain leverages Aave’s legitimate branding to deceive users into entering sensitive wallet credentials or transferring cryptocurrency, posing a direct financial threat to unsuspecting victims. The fraudulent site is designed to appear indistinguishable from Aave’s official platform, exploiting user trust in established DeFi protocols. This domain was flagged by multiple security vendors, including VirusTotal where it triggered detection by 2 out of 95 security engines. It resolves to IP address 172.67.194.56 and is currently blocked by MetaMask and SEAL security solutions. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain was created on July 15, 2025, and is listed on 2 separate security blocklists. Despite using a Google Trust Services SSL certificate, the domain’s malicious intent is confirmed by its impersonation of Aave and active evasion of detection mechanisms. To mitigate risk, users must avoid interacting with aave-eth-v3.net entirely. Organizations should block this domain at the network and DNS levels using the provided IP address and domain name. Blocklists should be updated to include this domain, and security teams should investigate any internal connections to the associated IP. Users approached via unsolicited messages or ads featuring this domain should report it to their security teams and avoid clicking any embedded links. Always verify the authenticity of DeFi platforms by cross-referencing official domains and using trusted bookmarks or verified social media channels.