web[.]monex-market[.]com

The domain web.monex-market.com is a phishing site engaged in brand impersonation targeting users of the decentralized finance platform Aave. It presents itself as a legitimate financial service under the name 'MonexMarkets' to harvest login credentials, posing an elevated risk of account takeover. As of the latest verification, web.monex-market.com has been taken offline, though prior activity indicates it was actively used for credential phishing without a crypto drainer kit.

Technical indicators confirm the malicious nature of web.monex-market.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0 out of 100. It appears on one security blocklist (PhishDestroy) and was registered through Tucows Domains Inc. on October 08, 2025. The site resolved to the IPv6 address 2606:4700:3037::ac43:81b8, hosted on Cloudflare's network (AS13335) in the United States, with no SSL certificate issued. Nameservers were aurora.ns.cloudflare.com and lee.ns.cloudflare.com, and the observed page title was 'MonexMarkets'. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with web.monex-market.com should immediately change their Aave account passwords and enable two-factor authentication to prevent unauthorized access. Monitor financial accounts for suspicious transactions and report any fraudulent activity to the platform and relevant authorities. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If credentials were entered, assume they are compromised and avoid reusing them across other services.