Bitcoin Forum

Economy => Scam Accusations => Topic started by: Baofeng on January 27, 2021, 06:49:11 PM



Title: {Warning} Fake Phishing site of AAVE.com
Post by: Baofeng on January 27, 2021, 06:49:11 PM
Again, criminals and scammers are taking advantage of the latest finance protocol (lend and borrow crypto) hype, as Aave hits record $288 high as demand for flash loans and staking increases. (https://cointelegraph.com/news/aave-hits-record-288-high-as-demand-for-flash-loans-and-staking-increases)

So now, they have created a fake and phishing site.

Phishing Site:
Code:
https://aave.pw/

https://i.imgur.com/xg7Rx3a.png

And if you click any version of it, it will offer you two, version 1 and version 2

https://i.imgur.com/oskH9pn.png

And if will automatically go to a page wherein you need to connect your wallet. The thing is, with the original site, you can still continue without connecting you wallet, by clicking "or continue with wallet". But with the fake and phishing site, this option is available but it is not working, meaning they are forcing you to connect your wallet right away, very clever. So be very careful.

Also according to this post, [ALEART] Scam Aave Wallet asking for private key (https://bitcointalk.org/index.php?topic=5298479.0), Aave doesn't have any official app in Google play, so if you find one, we have to report it immediately.

https://i.imgur.com/t4JN65d.png

Quote

Whois Record for AAve.pw
How does this work?
Domain Profile
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    3 days old
Created on 2021-01-24
Expires on 2022-01-24
Updated on 2021-01-24    
  
Name Servers    ELIJAH.NS.CLOUDFLARE.COM (has 17,837,478 domains)
WALK.NS.CLOUDFLARE.COM (has 17,837,478 domains)
   
  
Tech Contact    —
IP Address    172.67.195.125 - 20 other sites hosted on this server

Original Site: https://aave.com/


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: Yaunfitda on January 27, 2021, 08:14:08 PM
Good catch once again, these criminals are obviously, riding the hype. Not gonna stop though and I wouldn't be surprised if we see another of this aave fake phishing site in the coming days.

Reported it to Google, https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en. Hoping for their quick response so that it won't show on their search function or ads.


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: Yogee on January 28, 2021, 05:51:09 AM
The site is still active when I visited it but I've already done my share. It looks like there is a decreasing interest in the community to help in reporting phishing activities. Perhaps we can add a feedback like "fake version of https://aave.com/" for a faster take down.

As I said before, google is trying to combat phishing while milking these scammers at the same time. Hypocrites.
https://i.ibb.co/4FV9g80/AAV.png (https://ibb.co/2FkmYvp)


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: Furious 7 on January 28, 2021, 06:01:23 AM
Now what I find here is that more and more Aave phishing sites are being used by scamers to take money from their victims.
It's no wonder those criminals will surely plan if a project has reached the highest value in the loan it stakes.

Ahh, unfortunately we have to be able to distinguish it, especially in the domain if necessary, bookmark the original site to make it even more secure.

zasad@ has also found Aave phishing with a different domain.
[Scam] Aave fake sites (https://bitcointalk.org/index.php?topic=5311808.0)


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: hugeblack on January 28, 2021, 09:32:43 AM
These scammers continue to use newspaper headlines and Google search results to scam others.  >:( >:(
Such scam does not last long, they are looking for a currency whose price explodes, they set up such sites.
And when the price of another currency increases, the same story begins.

The site is still active when I visited it but I've already done my share. It looks like there is a decreasing interest in the community to help in reporting phishing activities. Perhaps we can add a feedback like "fake version of https://aave.com/" for a faster take down.
this is better than scam site.


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: cryptomaniac_xxx on January 28, 2021, 10:06:13 AM
Also this is a replica of what I reported it here: Fake Polkadot(DOT) website and fake app in Google Play (https://bitcointalk.org/index.php?topic=5311476.0).

Criminals are looking for the next hype in altcoin market then created phishing sites to trap crypto users, specially beginners who are just going to search it on Google. Did my share on reporting this as well.


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: Pmalek on January 28, 2021, 02:10:07 PM
The site is still active when I visited it...
The ads have been taken down now and you can no longer see them. I haven't tried to open the fake sites in my browser to see if they are still up though.
I made a Google search on the term aave and checked the first five pages that Google displays and there are no signs of phishing sites anymore.

https://talkimg.com/images/2023/11/12/zUoQI.jpeg


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: Yogee on January 29, 2021, 06:47:32 AM
.....
The ads have been taken down now and you can no longer see them. I haven't tried to open the fake sites in my browser to see if they are still up though.
Google may have taken down the ad but the fake site is still up. Scammers made some changes to make it not look like a 100% copy but the similarity is too obvious. You gotta wonder why a huge company such as Google takes a lot of time dealing with phishing.

I reported it again.


Title: Re: {Warning} Fake Phishing site of AAVE.com
Post by: Baofeng on January 31, 2021, 09:39:20 PM
Latest one from criminals:

Code:
https://aạve.com/

Not even a day old:

Quote
Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    Created on 2021-01-31
Expires on 2022-01-31
Updated on 0000-12-31
   

(p) (f)
IP Address    185.61.152.59 - 198 other sites hosted on this server