Is agavechido.com safe?
http://agavechido.com/
Coveragestrong3 of 4 applicable core capabilities
Dormant default WordPress shell flagged as an Aave-impersonating phishing domain
agavechido.com currently shows a bare WordPress placeholder page ("My Blog – My WordPress Blog") with no real content, yet independent security research says the domain is actively impersonating the Aave decentralized finance protocol, and ten antivirus families have returned adverse results for it. The combination of brand-impersonation infrastructure, an unreviewed operator-facing site, and a sub-year-old domain points to a phishing asset prepared for credential or wallet harvesting rather than a legitimate business.
Be the first to review agavechido.com
Lost money to agavechido.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
agavechido.com currently shows a bare WordPress placeholder page ("My Blog – My WordPress Blog") with no real content, yet independent security research says the domain is actively impersonating the Aave decentralized finance protocol, and ten antivirus families have returned adverse results for it. The combination of brand-impersonation infrastructure, an unreviewed operator-facing site, and a sub-year-old domain points to a phishing asset prepared for credential or wallet harvesting rather than a legitimate business.
Brand impersonation and antivirus verdicts
PhishDestroy, a threat-intelligence feed, lists agavechido.com as a domain impersonating Aave, the well-known decentralized finance protocol. That is the classic setup for a fake DeFi portal built to capture wallet approvals, seed phrases, or login credentials from users who believe they are on the real Aave site.
A saved aggregate of antivirus observations shows ten independent engines returned adverse results for this host, naming alphaMountain.ai, BitDefender and ChainPatrol among them. An independent site-rating service's own assessment gives the domain a low trust score, reinforcing that the reputation problem is not limited to a single source.
The registrable domain is only 331 days old, so there is no long operating history to offset the phishing reports. A recently created domain paired with threat-feed warnings and multi-engine antivirus hits is a strong indicator that the asset was stood up for malicious use.
What a visitor actually sees today
A screenshot of the current page shows a default WordPress installation titled "My Blog – My WordPress Blog", with nothing that resembles a real product, service, or business. A site that is empty on the surface while carrying an active phishing reputation is typical of a staged or rotating malicious landing page.
The only site-generated navigation element observed is a "Shop" link, but it resolves back to the same default blog page rather than to any store, catalogue, or checkout. That is not a functioning e-commerce feature; it is placeholder markup on a template without real commerce behind it.
The page footer identifies the platform as WordPress and credits "Powered by" with outbound links to wordpress.org and cookieadmin.net. Those are normal CMS resources, not commercial relationships, and they simply confirm the site is a stock installation rather than a custom-built legitimate front end.
No direct contact email is present on the captured page, so there is no visible way for a visitor to verify who operates the site or to seek recourse. Combined with the dormant appearance, this leaves visitors with no accountable party to approach.
Technical hygiene versus operator risk
The saved technical checks are clean: the browser threat feed returned no threat warning, and the TLS check found a valid encrypted connection. These results mean no detection at the moment of scanning, not that the site is trustworthy.
Against that thin technical reassurance, the operator-facing picture is adverse. Ten independent antivirus families flagged the domain adversarially, and PhishDestroy identifies it as actively impersonating Aave. Encryption and a clean Safe Browsing snapshot do not neutralize a live phishing designation.
The identity behind the domain is not disclosed on the site itself, so responsibility cannot be pinned to any accountable organisation. A visitor interacting with this host has no way to know who is on the other end.
Why the score is 18
10 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
12/ 93
detectionsSaved analysis from October 9, 2026 - stale
12 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 11
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | malicious |
| BitDefenderMalicious | phishing |
| ChainPatrolMalicious | malicious |
| Chong Lua DaoMalicious | malicious |
| CRDFMalicious | malicious |
| Forcepoint ThreatSeekerMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| LionicMalicious | phishing |
| SophosMalicious | phishing |
| VIPREMalicious | phishing |
| GridinsoftSuspicious | suspicious |
All 93 engine results
- alphaMountain.ai - Malicious
- BitDefender - phishing - Malicious
- ChainPatrol - Malicious
- Chong Lua Dao - Malicious
- CRDF - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Lionic - phishing - Malicious
- Sophos - phishing - Malicious
- VIPRE - phishing - Malicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- CINS Army - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
My Blog – My WordPress Blog
What the captured page showed
1 observation- 01
My Blog – My WordPress Blog
03 · Investigation Story
Investigation story
What the site claims
My Blog – My WordPress Blog
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Unknown
Observed behavior
Evidence behind this classification
- 012 independent sources carry complaints or warnings about this site, including: "PhishDestroy identifies agavechido.com as a domain actively impersonating the decentralized finance protocol Aave"
- 0210 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 032 independent sources carry complaints or warnings about this site, including: "The trust score of agavechido.com is rather low."
Web research findings
Independent findings for agavechido.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainagavechido.com
- Redirects toagavechido.com
- Hosted byWHG Hosting Services Ltd
- Referenceswordpress.org · cookieadmin.net
Domain Timeline
- Nov 20, 2025Domain registered
First appeared in WHOIS records — 11 months old when this review was saved.
- Oct 18, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
10 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. · The live page is a default WordPress blog placeholder with no functional content.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
2 independent sources carry complaints or warnings about this site, including: "PhishDestroy identifies agavechido.com as a domain actively impersonating the decentralized finance protocol Aave" · 2 independent sources carry complaints or warnings about this site, including: "The trust score of agavechido.com is rather low."
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 12 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 9, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 18, 2026 |
- Antivirus
- Result12 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 9, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 18, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is agavechido.com a scam or a legit website?
Is agavechido.com safe to use?
What should I do if I already gave my details to agavechido.com?
Can I get my money back from agavechido.com?
Did agavechido.com steal my password or personal information?
How do I report agavechido.com?
Why does agavechido.com look legitimate if it's a scam?
Has agavechido.com been flagged by antivirus engines?
Is agavechido.com on any phishing or malware blacklists?
How old is the agavechido.com domain?
Where is agavechido.com hosted?
How often is the agavechido.com report updated?
08 · Final Verdict
Final verdict
Dormant default WordPress shell flagged as an Aave-impersonating phishing domain
agavechido.com currently shows a bare WordPress placeholder page ("My Blog – My WordPress Blog") with no real content, yet independent security research says the domain is actively impersonating the Aave decentralized finance protocol, and ten antivirus families have returned adverse results for it. The combination of brand-impersonation infrastructure, an unreviewed operator-facing site, and a sub-year-old domain points to a phishing asset prepared for credential or wallet harvesting rather than a legitimate business.
09 · Community