Is claiming-campaign.com safe?
http://claiming-campaign.com/
Coveragepartial2 of 4 applicable core capabilities
Fake Aave 'recovery' page flagged as a crypto drainer that targets connected wallets
Claiming-campaign.com presents itself as the official Aave platform and tells visitors that people affected by a recent Aave attack can recover lost assets by connecting a wallet. Independent research describes the page as a fraudulent clone and a cryptocurrency drainer built to steal funds from anyone who connects, and 13 antivirus families returned adverse results for the domain. The site's own pages could not be read during the scan, so its contact, About and policy text was never reviewed, and the domain is only 187 days old. A valid TLS certificate and a clean the browser threat feed result do not change what the page is designed to do.
Be the first to review claiming-campaign.com
Lost money to claiming-campaign.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
Claiming-campaign.com presents itself as the official Aave platform and tells visitors that people affected by a recent Aave attack can recover lost assets by connecting a wallet. Independent research describes the page as a fraudulent clone and a cryptocurrency drainer built to steal funds from anyone who connects, and 13 antivirus families returned adverse results for the domain. The site's own pages could not be read during the scan, so its contact, About and policy text was never reviewed, and the domain is only 187 days old. A valid TLS certificate and a clean the browser threat feed result do not change what the page is designed to do.
A fake Aave recovery offer that ends in a wallet connection
The page poses as the official Aave platform and claims that users affected by a recent Aave attack can now recover their lost assets by connecting their wallet. That story is the lure: it borrows the trust of a real DeFi brand and turns a security incident into a reason to act quickly.
Independent research states plainly that the site is not a recovery service but a cryptocurrency drainer designed to steal funds from anyone who falls for the deception. The 'claim' step is the theft mechanism, not a refund process.
A second research source places the domain in a scam category used for deceptive offers and data collection, reinforcing that the site is not a legitimate Aave property.
Strong adverse detections, but the site's own pages were never reviewed
Thirteen independent antivirus families reported an adverse result for this domain, which is a strong technical signal that the site is malicious. The detection comes from a saved observation, so the exact timing is uncertain, but the volume and consistency of the flags are meaningful.
The site's own page, contact, About and policy text could not be read: the server returned HTTP 403 both to the scanner and when retried as the scanner's own identity. That means there is no operator-provided information to weigh against the adverse research, and no legitimate business details to verify.
The registrable domain is only 187 days old, which is consistent with a short-lived campaign site rather than an established platform. A valid TLS certificate and a clean the browser threat feed result only show that the connection is encrypted and that no warning was active at the moment of the check; they do not make the page safe to use.
Why the score is 12
13 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
15/ 93
detectionsSaved analysis from October 15, 2026 - stale
15 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 14
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| Chong Lua DaoMalicious | malicious |
| CyRadarMalicious | phishing |
| Forcepoint ThreatSeekerMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| GridinsoftMalicious | phishing |
| KasperskyMalicious | phishing |
| LionicMalicious | phishing |
| RisingMalicious | phishing |
| SophosMalicious | phishing |
| VIPREMalicious | phishing |
| WebrootMalicious | malicious |
| ESETSuspicious | suspicious |
All 93 engine results
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- Chong Lua Dao - Malicious
- CyRadar - phishing - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Gridinsoft - phishing - Malicious
- Kaspersky - phishing - Malicious
- Lionic - phishing - Malicious
- Rising - phishing - Malicious
- Sophos - phishing - Malicious
- VIPRE - phishing - Malicious
- Webroot - Malicious
- ESET - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- ViriBack - Clean
- VX Vault - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Warning Suspected Phishing
What the captured page showed
1 observation- 01
Warning Suspected Phishing
03 · Investigation Story
Investigation story
What the site claims
Independent evidence classifies the site as web3, but the page's own claim could not be captured.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Investment, Crypto & Wallet Fraud
Service and business model
Web3
Observed behavior
Evidence behind this classification
- 012 independent sources carry complaints or warnings about this site, including: "fraudulent page posing as the official Aave platform. The site falsely claims that users affected by a recent Aave attack can now recover their lost assets by…"
- 022 independent sources carry complaints or warnings about this site, including: "Claiming-campaign.com is in our scam category. This label is used for domains linked to deceptive offers, non-fulfillment after payment, or data collection…"
- 0313 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
What this means for you
What happens if a visitor follows the recovery claim
A visitor who believes the recovery story is directed to connect their crypto wallet to the site. According to the research, that connection is the point at which the drainer is designed to steal funds from the wallet.
How the observed mechanism works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Because the site's own pages could not be reviewed, there is no visible operator identity, contact channel or policy to check before acting. The only available description of the flow comes from independent research that identifies it as a fraudulent Aave impersonation and a drainer.
Do not connect a wallet to claiming-campaign.com and do not treat its recovery claim as real. If you have already connected a wallet, move any remaining assets to a new wallet and revoke token approvals for this site using a trusted wallet interface. Legitimate Aave communications do not ask users to recover lost funds by connecting a wallet to an unverified domain.
Web research findings
Independent findings for claiming-campaign.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- PCriskopen
"fraudulent page posing as the official Aave platform. The site falsely claims that users affected by a recent Aave attack can now recover their lost assets by connecting their wallet. In reality, it is a cryptocurrency drainer designed to steal funds from anyone who falls for the deception."
- Gridinsoftopen
"Claiming-campaign.com is in our scam category. This label is used for domains linked to deceptive offers, non-fulfillment after payment, or data collection under"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainclaiming-campaign.com
- Redirects toclaiming-campaign.com
- Hosted byCloudflare, Inc.
Domain Timeline
- Apr 18, 2026Domain registered
First appeared in WHOIS records — 6 months old when this review was saved.
- Oct 23, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
Domain & Encryption
Redirect Chain
The site refused our redirect check, so this chain may be incomplete.
- 1403http://claiming-campaign.com/
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentpartial
- Analysiscomplete
- Visual evidencepartial
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
13 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
2 independent sources carry complaints or warnings about this site, including: "fraudulent page posing as the official Aave platform. The site falsely claims that users affected by a recent Aave attack can now recover their lost assets by…" · 2 independent sources carry complaints or warnings about this site, including: "Claiming-campaign.com is in our scam category. This label is used for domains linked to deceptive offers, non-fulfillment after payment, or data collection…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 15 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 15, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Page content | Page content was not available for semantic review | Limited | No saved finding | this scan · Oct 23, 2026 |
| Visual evidence | The site showed a challenge page instead of its content; 1 visible observation saved | Limited | No saved finding | this scan · Oct 23, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 23, 2026 |
- Antivirus
- Result15 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 15, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 23, 2026
- Visual evidence
- ResultThe site showed a challenge page instead of its content; 1 visible observation saved
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 23, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 23, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is claiming-campaign.com a scam or a legit crypto platform?
Is claiming-campaign.com safe to use?
What should I do if I already sent funds to claiming-campaign.com?
Can I get my money back from claiming-campaign.com?
Is claiming-campaign.com a Ponzi scheme or a real crypto investment?
How do I report claiming-campaign.com?
Why does claiming-campaign.com look legitimate if it's a scam?
Has claiming-campaign.com been flagged by antivirus engines?
Is claiming-campaign.com on any phishing or malware blacklists?
How old is the claiming-campaign.com domain?
Where is claiming-campaign.com hosted?
How often is the claiming-campaign.com report updated?
08 · Final Verdict
Final verdict
Fake Aave 'recovery' page flagged as a crypto drainer that targets connected wallets
Claiming-campaign.com presents itself as the official Aave platform and tells visitors that people affected by a recent Aave attack can recover lost assets by connecting a wallet. Independent research describes the page as a fraudulent clone and a cryptocurrency drainer built to steal funds from anyone who connects, and 13 antivirus families returned adverse results for the domain. The site's own pages could not be read during the scan, so its contact, About and policy text was never reviewed, and the domain is only 187 days old. A valid TLS certificate and a clean the browser threat feed result do not change what the page is designed to do.
09 · Community