Bitcoin Forum
May 03, 2024, 02:44:47 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: {Warning} Fake Phishing site of AAVE.com  (Read 135 times)
Baofeng (OP)
Legendary
*
Offline Offline

Activity: 2590
Merit: 1655



View Profile
January 27, 2021, 06:49:11 PM
Merited by Yaunfitda (2), cryptomaniac_xxx (2), Pmalek (1)
 #1

Again, criminals and scammers are taking advantage of the latest finance protocol (lend and borrow crypto) hype, as Aave hits record $288 high as demand for flash loans and staking increases.

So now, they have created a fake and phishing site.

Phishing Site:
Code:
https://aave.pw/



And if you click any version of it, it will offer you two, version 1 and version 2



And if will automatically go to a page wherein you need to connect your wallet. The thing is, with the original site, you can still continue without connecting you wallet, by clicking "or continue with wallet". But with the fake and phishing site, this option is available but it is not working, meaning they are forcing you to connect your wallet right away, very clever. So be very careful.

Also according to this post, [ALEART] Scam Aave Wallet asking for private key, Aave doesn't have any official app in Google play, so if you find one, we have to report it immediately.



Quote

Whois Record for AAve.pw
How does this work?
Domain Profile
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    3 days old
Created on 2021-01-24
Expires on 2022-01-24
Updated on 2021-01-24    
  
Name Servers    ELIJAH.NS.CLOUDFLARE.COM (has 17,837,478 domains)
WALK.NS.CLOUDFLARE.COM (has 17,837,478 domains)
   
  
Tech Contact    —
IP Address    172.67.195.125 - 20 other sites hosted on this server

Original Site: https://aave.com/

███████████████████████
████████████████████
██████████████████
████████████████████
███▀▀▀█████████████████
███▄▄▄█████████████████
██████████████████████
██████████████████████
███████████████████████
█████████████████████
███████████████████
███████████████
████████████████████████
███████████████████████████
███████████████████████████
███████████████████████████
█████████▀▀██▀██▀▀█████████
█████████████▄█████████████
███████████████████████
████████████████████████
████████████▄█▄█████████
████████▀▀███████████
██████████████████
▀███████████████████▀
▀███████████████▀
█████████████████████████
O F F I C I A L   P A R T N E R S
▬▬▬▬▬▬▬▬▬▬
ASTON VILLA FC
BURNLEY FC
BK8?.
..PLAY NOW..
1714704287
Hero Member
*
Offline Offline

Posts: 1714704287

View Profile Personal Message (Offline)

Ignore
1714704287
Reply with quote  #2

1714704287
Report to moderator
1714704287
Hero Member
*
Offline Offline

Posts: 1714704287

View Profile Personal Message (Offline)

Ignore
1714704287
Reply with quote  #2

1714704287
Report to moderator
"In a nutshell, the network works like a distributed timestamp server, stamping the first transaction to spend a coin. It takes advantage of the nature of information being easy to spread but hard to stifle." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714704287
Hero Member
*
Offline Offline

Posts: 1714704287

View Profile Personal Message (Offline)

Ignore
1714704287
Reply with quote  #2

1714704287
Report to moderator
1714704287
Hero Member
*
Offline Offline

Posts: 1714704287

View Profile Personal Message (Offline)

Ignore
1714704287
Reply with quote  #2

1714704287
Report to moderator
1714704287
Hero Member
*
Offline Offline

Posts: 1714704287

View Profile Personal Message (Offline)

Ignore
1714704287
Reply with quote  #2

1714704287
Report to moderator
Yaunfitda
Hero Member
*****
Offline Offline

Activity: 2842
Merit: 575



View Profile
January 27, 2021, 08:14:08 PM
 #2

Good catch once again, these criminals are obviously, riding the hype. Not gonna stop though and I wouldn't be surprised if we see another of this aave fake phishing site in the coming days.

Reported it to Google, https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en. Hoping for their quick response so that it won't show on their search function or ads.

███████████████████████████████
███████████████████████████████
███▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀███████████
█████████████▀▀        ▀▀██████
██████▀▀▀▀▀▀              ▀████
██████████▀     ▄▄██▄▄     ▀███
██████████      ██████      ███
██████████▄     ▀▀██▀▀     ▄███
██████▄▄▄▄▄▄              ▄████
█████████████▄▄        ▄▄██████
███▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄███████████
███████████████████████████████
███████████████████████████████
.
|
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
SSC NAPOLI
OFFICIAL EUROPEAN
BETTING PARTNER
|.ROLLBOTS.|
▄▄███████▄▄
▄███████████████▄
▄███████████████████▄
▄██▀▀▀▀▀▀▀▀▀▀▀▀▀▀█████▄
▄█████████▀████████▀████▄
██████▄▄▄█████▄▄█████████
█████████████████████████
██████▀▀▀█████▀▀█████████
▀█████████▄████████▄████▀
▀██▄▄▄▄▄▄▄▄▄▄▄▄▄▄█████▀
▀███████████████████▀
▀███████████████▀
▀▀███████▀▀
ROLLBIT COIN
TRADE RLB NOW!
|...PLAY NOW...
Yogee
Sr. Member
****
Offline Offline

Activity: 1540
Merit: 412



View Profile
January 28, 2021, 05:51:09 AM
 #3

The site is still active when I visited it but I've already done my share. It looks like there is a decreasing interest in the community to help in reporting phishing activities. Perhaps we can add a feedback like "fake version of https://aave.com/" for a faster take down.

As I said before, google is trying to combat phishing while milking these scammers at the same time. Hypocrites.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
|
██░░░░░░░░░░░░░░░░░░░░░░██
▀█▄░▄▄░░░░░░░░░░░░▄▄░▄█▀
▄▄███░░░░░░░░░░░░░░███▄▄
▀░▀▄▀▄░░░░░▄▄░░░░░▄▀▄▀░▀
▄▄▄▄▄▀▀▄▄▀▀▄▄▄▄▄
█░▄▄▄██████▄▄▄░█
█░▀▀████████▀▀░█
█░█▀▄▄▄▄▄▄▄▄██░█
█░█▀████████░█
█░█░██████░█
▀▄▀▄███▀▄▀
▄▀▄
▀▄▄▄▄▀▄▀▄
██▀░░░░░░░░▀██
||.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
FAZE CLAN
SSC NAPOLI
|
Furious 7
Hero Member
*****
Offline Offline

Activity: 2856
Merit: 641


https://duelbits.com/


View Profile
January 28, 2021, 06:01:23 AM
 #4

Now what I find here is that more and more Aave phishing sites are being used by scamers to take money from their victims.
It's no wonder those criminals will surely plan if a project has reached the highest value in the loan it stakes.

Ahh, unfortunately we have to be able to distinguish it, especially in the domain if necessary, bookmark the original site to make it even more secure.

zasad@ has also found Aave phishing with a different domain.
[Scam] Aave fake sites

███████████████████████████
███████▄████████████▄██████
████████▄████████▄████████
███▀█████▀▄███▄▀█████▀███
█████▀█▀▄██▀▀▀██▄▀█▀█████
███████▄███████████▄███████
███████████████████████████
███████▀███████████▀███████
████▄██▄▀██▄▄▄██▀▄██▄████
████▄████▄▀███▀▄████▄████
██▄███▀▀█▀██████▀█▀███▄███
██▀█▀████████████████▀█▀███
███████████████████████████
.
.Duelbits.
▄▄█▄▄░░▄▄█▄▄░░▄▄█▄▄
███░░░░███░░░░███
░░░░░░░░░░░░░
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░░░░███▄█░░░
░░██▌░░███░▀░░██▌
█░██░░███░░░██
█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀
.
REGIONAL
SPONSOR
███▀██▀███▀█▀▀▀▀██▀▀▀██
██░▀░██░█░███░▀██░███▄█
█▄███▄██▄████▄████▄▄▄██
██▀ ▀███▀▀░▀██▀▀▀██████
███▄███░▄▀██████▀█▀█▀▀█
████▀▀██▄▀█████▄█▀███▄█
███▄▄▄████████▄█▄▀█████
███▀▀▀████████████▄▀███
███▄░▄█▀▀▀██████▀▀▀▄███
███████▄██▄▌████▀▀█████
▀██▄█████▄█▄▄▄██▄████▀
▀▀██████████▄▄███▀▀
▀▀▀▀█▀▀▀▀
.
EUROPEAN
BETTING
PARTNER
hugeblack
Legendary
*
Offline Offline

Activity: 2506
Merit: 3632


Buy/Sell crypto at BestChange


View Profile WWW
January 28, 2021, 09:32:43 AM
 #5

These scammers continue to use newspaper headlines and Google search results to scam others.  Angry Angry
Such scam does not last long, they are looking for a currency whose price explodes, they set up such sites.
And when the price of another currency increases, the same story begins.

The site is still active when I visited it but I've already done my share. It looks like there is a decreasing interest in the community to help in reporting phishing activities. Perhaps we can add a feedback like "fake version of https://aave.com/" for a faster take down.
this is better than scam site.

.BEST..CHANGE.███████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
███████████████
..BUY/ SELL CRYPTO..
cryptomaniac_xxx
Hero Member
*****
Offline Offline

Activity: 1498
Merit: 564



View Profile
January 28, 2021, 10:06:13 AM
 #6

Also this is a replica of what I reported it here: Fake Polkadot(DOT) website and fake app in Google Play.

Criminals are looking for the next hype in altcoin market then created phishing sites to trap crypto users, specially beginners who are just going to search it on Google. Did my share on reporting this as well.

.
 airbet 
██
██
██
██
██
██
██
██
██
██
██
██
██
 .

▄████▄▄▄██████▄
███████████████
███████████████
███████▀▀▀▀████
██████████████
▀███▀███████▄██
██████████▄███
██████████████
███████████████
███████████████
██████████████
█████▐████████
██████▀███████▀
▄███████████████▄
████████████████
█░██████████████
████████████████
████████████████
█████████████████
█████████████████
███████░█░███████
████████████████
█████████████████
██████████████░█
████████████████
▀███████████████▀
.
.
.
.
██▄▄▄
████████▄▄
██████▀▀████▄
██████▄░░████▄
██████████████
████████░░▀███▌
░████████▄▄████
██████████████▌
███░░░█████████
█████████░░░██▀
░░░███████████▀
██████░░░██▀
░░▀▀███▀

   
|.
....
██
██
██
██
██
██
██
██
██
██
██
██
██
.
 PLAY NOW 
Pmalek
Legendary
*
Offline Offline

Activity: 2758
Merit: 7125



View Profile
January 28, 2021, 02:10:07 PM
Last edit: November 12, 2023, 10:02:37 AM by Pmalek
 #7

The site is still active when I visited it...
The ads have been taken down now and you can no longer see them. I haven't tried to open the fake sites in my browser to see if they are still up though.
I made a Google search on the term aave and checked the first five pages that Google displays and there are no signs of phishing sites anymore.



.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
Yogee
Sr. Member
****
Offline Offline

Activity: 1540
Merit: 412



View Profile
January 29, 2021, 06:47:32 AM
 #8

.....
The ads have been taken down now and you can no longer see them. I haven't tried to open the fake sites in my browser to see if they are still up though.
Google may have taken down the ad but the fake site is still up. Scammers made some changes to make it not look like a 100% copy but the similarity is too obvious. You gotta wonder why a huge company such as Google takes a lot of time dealing with phishing.

I reported it again.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
|
██░░░░░░░░░░░░░░░░░░░░░░██
▀█▄░▄▄░░░░░░░░░░░░▄▄░▄█▀
▄▄███░░░░░░░░░░░░░░███▄▄
▀░▀▄▀▄░░░░░▄▄░░░░░▄▀▄▀░▀
▄▄▄▄▄▀▀▄▄▀▀▄▄▄▄▄
█░▄▄▄██████▄▄▄░█
█░▀▀████████▀▀░█
█░█▀▄▄▄▄▄▄▄▄██░█
█░█▀████████░█
█░█░██████░█
▀▄▀▄███▀▄▀
▄▀▄
▀▄▄▄▄▀▄▀▄
██▀░░░░░░░░▀██
||.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
FAZE CLAN
SSC NAPOLI
|
Baofeng (OP)
Legendary
*
Offline Offline

Activity: 2590
Merit: 1655



View Profile
January 31, 2021, 09:39:20 PM
 #9

Latest one from criminals:

Code:
https://aạve.com/

Not even a day old:

Quote
Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    Created on 2021-01-31
Expires on 2022-01-31
Updated on 0000-12-31
   

(p) (f)
IP Address    185.61.152.59 - 198 other sites hosted on this server

███████████████████████
████████████████████
██████████████████
████████████████████
███▀▀▀█████████████████
███▄▄▄█████████████████
██████████████████████
██████████████████████
███████████████████████
█████████████████████
███████████████████
███████████████
████████████████████████
███████████████████████████
███████████████████████████
███████████████████████████
█████████▀▀██▀██▀▀█████████
█████████████▄█████████████
███████████████████████
████████████████████████
████████████▄█▄█████████
████████▀▀███████████
██████████████████
▀███████████████████▀
▀███████████████▀
█████████████████████████
O F F I C I A L   P A R T N E R S
▬▬▬▬▬▬▬▬▬▬
ASTON VILLA FC
BURNLEY FC
BK8?.
..PLAY NOW..
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!