access-aave-wallet[.]pages[.]dev

access-aave-wallet.pages.dev is currently active and is classified as a high‑risk brand‑impersonation site targeting Aave. The domain was registered on 19 April 2026 and resolves to the Cloudflare‑owned address 188.114.96.3, which is associated with the Cloudflare, Inc. network located in Canada. DNS resolution uses the Cloudflare authoritative nameservers albert.ns.cloudflare.com and marissa.ns.cloudflare.com. The site serves content over HTTPS with a certificate issued by Google Trust Services under the WE1 intermediate, and HSTS as well as HTTP/3 are enabled. The page title observed is “AAVE Wallet ® Guide | Login, Exchange & Troubleshooting”, indicating an attempt to mimic official Aave wallet documentation. Gridinsoft assigns a trust score of 0 / 100, and one of ninety‑four VirusTotal scanners has flagged the domain. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. The combination of recent registration, Cloudflare infrastructure, low trust score, and the presence of a brand‑specific page title supports the conclusion that the site is being used for a fake exchange scam. At present no additional technical artefacts such as malicious payloads or credential‑stealing scripts have been disclosed. Defenders should block the domain at the DNS and proxy layers, monitor outbound connections to the IP 188.114.96.3, and update detection rules to flag any HTTP requests containing the observed page title or the “AAVE Wallet” keyword. Continuous re‑evaluation is recommended as further intelligence becomes available.