Bitcoin Forum
December 27, 2024, 04:16:14 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: {Warning} Fake Phishing site of AAVE.com  (Read 168 times)
Baofeng (OP)
Legendary
*
Offline Offline

Activity: 2828
Merit: 1683



View Profile
January 27, 2021, 06:49:11 PM
Merited by Yaunfitda (2), cryptomaniac_xxx (2), Pmalek (1)
 #1

Again, criminals and scammers are taking advantage of the latest finance protocol (lend and borrow crypto) hype, as Aave hits record $288 high as demand for flash loans and staking increases.

So now, they have created a fake and phishing site.

Phishing Site:
Code:
https://aave.pw/



And if you click any version of it, it will offer you two, version 1 and version 2



And if will automatically go to a page wherein you need to connect your wallet. The thing is, with the original site, you can still continue without connecting you wallet, by clicking "or continue with wallet". But with the fake and phishing site, this option is available but it is not working, meaning they are forcing you to connect your wallet right away, very clever. So be very careful.

Also according to this post, [ALEART] Scam Aave Wallet asking for private key, Aave doesn't have any official app in Google play, so if you find one, we have to report it immediately.



Quote

Whois Record for AAve.pw
How does this work?
Domain Profile
Registrar    NameSilo, LLC
IANA ID: 1479
URL: https://www.namesilo.com
Whois Server: whois.namesilo.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    3 days old
Created on 2021-01-24
Expires on 2022-01-24
Updated on 2021-01-24    
  
Name Servers    ELIJAH.NS.CLOUDFLARE.COM (has 17,837,478 domains)
WALK.NS.CLOUDFLARE.COM (has 17,837,478 domains)
   
  
Tech Contact    —
IP Address    172.67.195.125 - 20 other sites hosted on this server

Original Site: https://aave.com/

 
 RAZED  
███████▄▄▄████▄▄▄▄
████▄███████████████
██▄██████▀▀████▀▀█████▄
████
██████████████
▄████████▄████████████▄
████████▀███████████▄
██████████████▐█▄█▀████████
▀████████████▌▐█▀██████████
▀███████████▌▀████████████
█████████▄▄▄
█████▄▄██████
████████████████████████
█████▀█████████████████▀
██████████████
▄▄███████▄▄
▄███████████████
▄███████████████████▄
█████████████████████▄
▄███████████████████████▄
████████████████████████
█████████████████████████
██████████████████████
▀█████
█████████████████▀
▀█
████████████████████▀
▀█████
█████████████
▀███████████████▀
█████████
 
RAZED ORIGINALS
SLOTS & LIVE CASINO
SPORTSBOOK
|
 NO 
KYC
 
 RAZE THE LIMITS   PLAY NOW 
Yaunfitda
Hero Member
*****
Offline Offline

Activity: 3080
Merit: 620



View Profile
January 27, 2021, 08:14:08 PM
 #2

Good catch once again, these criminals are obviously, riding the hype. Not gonna stop though and I wouldn't be surprised if we see another of this aave fake phishing site in the coming days.

Reported it to Google, https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en. Hoping for their quick response so that it won't show on their search function or ads.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
||.
|
▄▄████▄▄
▀█▀
▄▀▀▄▀█▀
▄░░▄█░██░█▄░░▄
█░▄█░▀█▄▄█▀░█▄░█
▀▄░███▄▄▄▄███░▄▀
▀▀█░░░▄▄▄▄░░░█▀▀
░░██████░░█
█░░░░▀▀░░░░█
▀▄▀▄▀▄▀▄▀▄
▄░█████▀▀█████░▄
▄███████░██░███████▄
▀▀██████▄▄██████▀▀
▀▀████████▀▀
.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▀▄███░░░▀████░███▄▀██▄
███░████░░░░░▀██░████░███
███░████░█▄░░░░▀░████░███
███░████░███▄░░░░████░███
▀██▄▀███░█████▄░░███▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
SOUTHAMPTON FC
FAZE CLAN
SSC NAPOLI
Yogee
Sr. Member
****
Offline Offline

Activity: 1554
Merit: 413


View Profile
January 28, 2021, 05:51:09 AM
 #3

The site is still active when I visited it but I've already done my share. It looks like there is a decreasing interest in the community to help in reporting phishing activities. Perhaps we can add a feedback like "fake version of https://aave.com/" for a faster take down.

As I said before, google is trying to combat phishing while milking these scammers at the same time. Hypocrites.
Furious 7
Hero Member
*****
Offline Offline

Activity: 3094
Merit: 731


https://duelbits.com/


View Profile
January 28, 2021, 06:01:23 AM
 #4

Now what I find here is that more and more Aave phishing sites are being used by scamers to take money from their victims.
It's no wonder those criminals will surely plan if a project has reached the highest value in the loan it stakes.

Ahh, unfortunately we have to be able to distinguish it, especially in the domain if necessary, bookmark the original site to make it even more secure.

zasad@ has also found Aave phishing with a different domain.
[Scam] Aave fake sites

███████████████████████████
███████▄████████████▄██████
████████▄████████▄████████
███▀█████▀▄███▄▀█████▀███
█████▀█▀▄██▀▀▀██▄▀█▀█████
███████▄███████████▄███████
███████████████████████████
███████▀███████████▀███████
████▄██▄▀██▄▄▄██▀▄██▄████
████▄████▄▀███▀▄████▄████
██▄███▀▀█▀██████▀█▀███▄███
██▀█▀████████████████▀█▀███
███████████████████████████
.
.Duelbits.
▄▄█▄▄░░▄▄█▄▄░░▄▄█▄▄
███░░░░███░░░░███
░░░░░░░░░░░░░
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░░░░███▄█░░░
░░██▌░░███░▀░░██▌
█░██░░███░░░██
█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀
.
REGIONAL
SPONSOR
███▀██▀███▀█▀▀▀▀██▀▀▀██
██░▀░██░█░███░▀██░███▄█
█▄███▄██▄████▄████▄▄▄██
██▀ ▀███▀▀░▀██▀▀▀██████
███▄███░▄▀██████▀█▀█▀▀█
████▀▀██▄▀█████▄█▀███▄█
███▄▄▄████████▄█▄▀█████
███▀▀▀████████████▄▀███
███▄░▄█▀▀▀██████▀▀▀▄███
███████▄██▄▌████▀▀█████
▀██▄█████▄█▄▄▄██▄████▀
▀▀██████████▄▄███▀▀
▀▀▀▀█▀▀▀▀
.
EUROPEAN
BETTING
PARTNER
hugeblack
Legendary
*
Offline Offline

Activity: 2744
Merit: 4047



View Profile WWW
January 28, 2021, 09:32:43 AM
 #5

These scammers continue to use newspaper headlines and Google search results to scam others.  Angry Angry
Such scam does not last long, they are looking for a currency whose price explodes, they set up such sites.
And when the price of another currency increases, the same story begins.

The site is still active when I visited it but I've already done my share. It looks like there is a decreasing interest in the community to help in reporting phishing activities. Perhaps we can add a feedback like "fake version of https://aave.com/" for a faster take down.
this is better than scam site.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
cryptomaniac_xxx
Hero Member
*****
Offline Offline

Activity: 1736
Merit: 621



View Profile
January 28, 2021, 10:06:13 AM
 #6

Also this is a replica of what I reported it here: Fake Polkadot(DOT) website and fake app in Google Play.

Criminals are looking for the next hype in altcoin market then created phishing sites to trap crypto users, specially beginners who are just going to search it on Google. Did my share on reporting this as well.

Pmalek
Legendary
*
Offline Offline

Activity: 2996
Merit: 7666


Playgram - The Telegram Casino


View Profile
January 28, 2021, 02:10:07 PM
Last edit: November 12, 2023, 10:02:37 AM by Pmalek
 #7

The site is still active when I visited it...
The ads have been taken down now and you can no longer see them. I haven't tried to open the fake sites in my browser to see if they are still up though.
I made a Google search on the term aave and checked the first five pages that Google displays and there are no signs of phishing sites anymore.



▄▄███████▄▄███████
▄███████████████▄▄▄▄▄
▄████████████████████▀░
▄█████████████████████▄░
▄█████████▀▀████████████▄
██████████████▀▀█████████
████████████████████████
██████████████▄▄█████████
▀█████████▄▄████████████▀
▀█████████████████████▀░
▀████████████████████▄░
▀███████████████▀▀▀▀▀
▀▀███████▀▀███████

▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
 
Playgram.io
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

▄▄▄░░
▀▄







▄▀
▀▀▀░░
▄▄▄███████▄▄▄
▄▄███████████████▄▄
▄███████████████████▄
▄██████████████▀▀█████▄
▄██████████▀▀█████▐████▄
██████▀▀████▄▄▀▀█████████
████▄▄███▄██▀█████▐██████
█████████▀██████████████
▀███████▌▐██████▐██████▀
▀███████▄▄███▄████████▀
▀███████████████████▀
▀▀███████████████▀▀
▀▀▀███████▀▀▀
██████▄▄███████▄▄████████
███▄███████████████▄░░▀█▀
███████████░█████████░░
░█████▀██▄▄░▄▄██▀█████░
█████▄░▄███▄███▄░▄█████
███████████████████████
███████████████████████
██░▄▄▄░██░▄▄▄░██░▄▄▄░██
██░░░░██░░░░██░░░░████
██░░░░██░░░░██░░░░████
██▄▄▄▄▄██▄▄▄▄▄██▄▄▄▄▄████
███████████████████████
███████████████████████
 
PLAY NOW

on Telegram
[/
Yogee
Sr. Member
****
Offline Offline

Activity: 1554
Merit: 413


View Profile
January 29, 2021, 06:47:32 AM
 #8

.....
The ads have been taken down now and you can no longer see them. I haven't tried to open the fake sites in my browser to see if they are still up though.
Google may have taken down the ad but the fake site is still up. Scammers made some changes to make it not look like a 100% copy but the similarity is too obvious. You gotta wonder why a huge company such as Google takes a lot of time dealing with phishing.

I reported it again.
Baofeng (OP)
Legendary
*
Offline Offline

Activity: 2828
Merit: 1683



View Profile
January 31, 2021, 09:39:20 PM
 #9

Latest one from criminals:

Code:
https://aạve.com/

Not even a day old:

Quote
Registrant    WhoisGuard Protected
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NAMECHEAP INC NameCheap, Inc.
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    Created on 2021-01-31
Expires on 2022-01-31
Updated on 0000-12-31
   

(p) (f)
IP Address    185.61.152.59 - 198 other sites hosted on this server

 
 RAZED  
███████▄▄▄████▄▄▄▄
████▄███████████████
██▄██████▀▀████▀▀█████▄
████
██████████████
▄████████▄████████████▄
████████▀███████████▄
██████████████▐█▄█▀████████
▀████████████▌▐█▀██████████
▀███████████▌▀████████████
█████████▄▄▄
█████▄▄██████
████████████████████████
█████▀█████████████████▀
██████████████
▄▄███████▄▄
▄███████████████
▄███████████████████▄
█████████████████████▄
▄███████████████████████▄
████████████████████████
█████████████████████████
██████████████████████
▀█████
█████████████████▀
▀█
████████████████████▀
▀█████
█████████████
▀███████████████▀
█████████
 
RAZED ORIGINALS
SLOTS & LIVE CASINO
SPORTSBOOK
|
 NO 
KYC
 
 RAZE THE LIMITS   PLAY NOW 
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!