avae[.]info

Analysis of the domain avae.info, observed as of August 02, 2026, indicates that it is currently associated with a credential harvesting phishing campaign. The domain appears on three distinct security blocklists, confirming that multiple independent threat‑intel providers have flagged it for malicious use. Additional filtering services, including PhishDestroy, MetaMask, and SEAL, have also blocked the domain, reinforcing the consensus that it should be considered hostile within defensive infrastructures.

The domain has been submitted to VirusTotal, where scans from 91 antivirus and URL‑reputation vendors have been performed. None of the vendors returned a positive detection at the time of analysis; however, the absence of a detection does not constitute evidence of safety, especially given its presence on multiple blocklists. No public information regarding the registrar, registration dates, hosting IP address, ASN, geographic location, SSL certificate details, HTTP response codes, or Safe Browsing status is presently available, and thus cannot be incorporated into this assessment.

Given the current evidence, defenders should treat avae.info as a high‑confidence phishing indicator. It is recommended to add the domain to internal URL filtering rules, enforce blocklist updates that include the three known lists, and monitor network traffic for any outbound connections to the domain. Continuous re‑evaluation is advised, as additional telemetry such as hosting details or page content may emerge, potentially refining the threat profile. Organizations employing web‑gateway solutions should ensure that the domain is explicitly denied, and incident‑response teams should be prepared to investigate any authentication attempts that involve avae.info to mitigate credential compromise risks.