aave-stake[.]web[.]app

The domain aave-stake.web.app is identified as a brand impersonation threat, specifically targeting the Aave platform. This domain is currently active and presents a high-risk level due to its deceptive nature. It uses the page title 'Aave - Open Source Liquidity Protocol' to mislead users into believing it is affiliated with the legitimate Aave service.

The domain was registered through Google LLC (Firebase) and was created on February 21, 2026. It resolves to the IP address 2620:0:890::100 and is secured with an SSL certificate issued by Google Trust Services / WR4. Despite its active status, it appears on four security blocklists, indicating its malicious intent. Notably, it has been flagged by 1 out of 95 security vendors on VirusTotal, underscoring the need for caution when interacting with this domain.

Given the active status and high-risk level of aave-stake.web.app, it is recommended that users avoid engaging with this domain. Organizations should update their security systems to block access to this domain and monitor for any attempts to connect to it. Users are advised to remain vigilant and verify the authenticity of domains before disclosing any personal or financial information.