aave-gho[.]eu[.]com

This domain, aave-gho.eu.com, is flagged as an active cryptocurrency scam impersonating the Aave protocol. Registered on February 21, 2026, through Instra Corporation Pty Ltd., the domain currently resolves to 104.21.58.30 (AS13335, Cloudflare, Inc., US) and is proxied behind Cloudflare infrastructure, as indicated by detected technologies including HTTP/3. The page title 'רק רגע...' suggests localization targeting Hebrew-speaking users, though the exact content and functionality of the site remain unconfirmed due to a 403 HTTP status. Nameservers (ns1.centralnic.net, ns2.centralnic.net, ns3.centralnic.net, ns4.centralnic.net) are consistent with CentralNic's registry services, which are frequently abused for phishing operations. Analysis indicates the domain is designed to exploit Aave's brand, likely to deceive users into interacting with fraudulent smart contracts or wallet-draining schemes. The SSL certificate (Google Trust Services / WE1) is valid, which may lend false legitimacy to the site. As of July 12, 2026, the domain appears on one security blocklist (PhishDestroy) and is flagged by one of 93 vendors on VirusTotal. Defenders should treat this domain as high-risk and prioritize blocking or monitoring traffic to 104.21.58.30. Further investigation into associated wallet addresses or contract interactions is recommended to identify potential victim losses. The domain's continued activity underscores the need for real-time detection and takedown efforts.