earn-aave[.]info

The domain earn-aave.info was created on August 05, 2026 and remains active as of the report date, August 06, 2026. Registration was processed through Spaceship, Inc., and the authoritative nameservers are aiden.ns.cloudflare.com and mimi.ns.cloudflare.com, pointing the domain to the IP address 172.67.197.21, a Cloudflare‑owned host. The domain is listed on three public security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple threat‑intel feeds have correlated it with phishing activity.

VirusTotal analysis shows the domain was scanned by 91 antivirus and URL‑reputation vendors; none of the vendors raised a detection at the time of scanning, but the lack of a detection does not constitute validation of safety. The high‑risk rating is driven by the recent creation date, immediate inclusion on blocklists, and the presence of active defensive listings, all of which suggest a purposeful malicious deployment rather than an innocuous site. No SSL certificate details, HTTP status codes, page title, or content signatures have been disclosed, leaving the exact payload or user‑interaction vector unverified.

Consequently, the current evidence base confirms the domain’s use in a phishing campaign, while the precise phishing mechanism remains unknown. Defensive recommendations include adding earn-aave.info to network‑level deny lists, enforcing DNS‑level blocking of its resolving IP (172.67.197.21), and ensuring endpoint security solutions reference the blocklist entries from PhishDestroy, MetaMask, and SEAL. Continuous monitoring for any change in VirusTotal verdicts, new blocklist entries, or emergence of HTTP/HTTPS response data is advised to adjust mitigation posture promptly.