aave-capital[.]com

PhishDestroy identifies aave-capital.com as a high-risk brand impersonation site targeting Aave users. This domain was flagged for posing as the legitimate Aave protocol to steal cryptocurrency through deceptive deposit interfaces or wallet drainers. The threat level is currently marked as under investigation, but the operational indicators suggest active malicious intent. This domain resolves to IP 103.224.182.216 and was registered on April 24, 2026, through TUCOWS.COM, CO. VirusTotal scans show zero detections out of 95 engines as of the latest update, indicating it has not yet been widely flagged despite its clear malicious branding. The site uses a Let's Encrypt SSL certificate to appear legitimate, which is a common tactic to bypass browser warnings. The domain name includes the trusted brand “Aave” combined with “capital,” likely to mislead users searching for investment or staking opportunities. Given the fresh registration date and low detection rate, this site may be newly deployed to exploit unsuspecting users in the DeFi space. Users should treat aave-capital.com as a confirmed crypto drainer front with brand impersonation intent. Do not visit, click links, or enter any credentials or wallet information. Always verify URLs manually, use hardware wallets for transactions, and cross-check URLs against official Aave channels (aave.com). Report the domain to your security tools and block the IP 103.224.182.216 at the network level if possible. Stay vigilant—new impersonation domains emerge daily in crypto scams.