dashboard-aave[.]one

The domain dashboard-aave.one mimics the cryptocurrency platform Aave, posing a significant threat to users. It was detected by PhishDestroy on May 25, 2026, just two days after its creation. Despite being flagged by only 1 out of 95 vendors on VirusTotal, the domain is already included in three public blocklists, including those maintained by MetaMask and SEAL.

This phishing operation leverages a domain name that closely resembles the legitimate Aave platform, aiming to deceive users into divulging sensitive information. The page title 'GHO | Aave' further reinforces the impersonation attempt, making it appear credible to unsuspecting visitors. The domain is registered with DYNADOT LLC and hosted on IP address 188.114.96.3, with SSL certification from Let's Encrypt.

The platform risk score for dashboard-aave.one is notably high at 83 out of 100, indicating a substantial threat level. This score reflects the potential for significant harm to users who might be lured into interacting with the site. The phishing domain's early detection by PhishDestroy highlights its freshness and the critical window before comprehensive antivirus coverage is established. Such domains exploit the time lag between registration and widespread detection, underscoring the importance of early threat identification.