ops[.]pro-earnllc[.]com

The domain ops.pro-earnllc.com is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Aave. It poses an elevated risk by attempting to harvest login credentials through a credential phishing scam, not a crypto drainer. As of the latest verification, ops.pro-earnllc.com has been taken offline, but prior activity indicates it was actively used for malicious purposes.

Technical indicators confirm the domain's suspicious nature. Only 1 of 95 VirusTotal security vendors flagged ops.pro-earnllc.com, while Google Safe Browsing did not detect it. The domain appears on one security blocklist, PhishDestroy, and was registered through Internet Domain Service BS Corp. on June 08, 2025. It resolves to the IP address 172.67.216.94, hosted on Cloudflare's network (AS13335) in the US, with no SSL certificate issued. The observed page title was 'Proearn', and nameservers point to Cloudflare (bella.ns.cloudflare.com and kolton.ns.cloudflare.com). Gridinsoft assigned a trust score of 0/100, reinforcing its classification as a phishing threat.

Users who interacted with ops.pro-earnllc.com should immediately change their Aave account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious transactions or login attempts and report any fraudulent activity to the impersonated brand. Victims may also report the domain to their local cybercrime unit or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.