announcement-aave[.]app

The domain announcement-aave.app was registered through Porkbun LLC on 11 December 2025 and resolves to the Cloudflare‑owned address 104.21.37.219, which is associated with AS13335 in the United States. The authoritative name servers are ajay.ns.cloudflare.com and magdalena.ns.cloudflare.com, indicating that the infrastructure is fully hosted behind Cloudflare's edge network. An SSL certificate issued by Google Trust Services (WE1) is present, confirming the use of HTTPS, but the site currently returns a 522 "Connection timed out" error, suggesting that the origin server is either unreachable or deliberately offline.

Detection engines have flagged the domain as malicious: PhishDestroy and ScamSniffer have already blocked it, and two independent security blocklists include the domain. VirusTotal reports that 12 of 93 scanned security vendors label the domain as malicious, reinforcing the suspicion that the site is part of a crypto‑related scam campaign. The page title "announcement-aave.app | 522: Connection timed out" provides the only visible indicator of the site’s status; no content has been captured for analysis because the service is offline.

The domain explicitly impersonates Aave, a well‑known decentralized finance platform, and is categorized as a crypto scam. While the precise mechanics of the fraud (e.g., phishing forms, malicious contracts, or social engineering lures) cannot be confirmed without live content, the combination of brand impersonation, Cloudflare hosting, and the detection history strongly points to an intent to deceive Aave users for financial gain.

Defenders should add announcement-aave.app to URL filtering and email security policies, continue to monitor Cloudflare‑associated IP ranges for related activity, and consider proactive takedown requests with the registrar if further evidence emerges.