cfd[.]glen-capitals[.]com

This domain, cfd.glen-capitals.com, is currently active and engaged in brand impersonation specifically targeting Aave, a decentralized finance protocol. Analysis confirms the domain presents itself under the page title 'GlenCapital,' mimicking legitimate financial service branding to deceive users. The threat type is classified as brand impersonation with high risk due to its ongoing operational status and targeted deception tactics. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. and resolves to the IP address 104.21.7.109, hosted on AS13335 Cloudflare, Inc. in the United States. Detection metrics indicate minimal but notable scrutiny, with 1 of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on three security blocklists and lacks an SSL certificate, further reducing its legitimacy. Additional protective measures have been implemented by multiple independent detection systems, though the domain remains accessible. Current status confirms the domain is still active, posing an immediate risk to users who may mistake it for a legitimate Aave-related service. It is recommended to block the domain at the network level and avoid any interaction with its content. Users should verify the authenticity of financial service domains through official channels and employ browser-based security extensions that detect brand impersonation. Network administrators are advised to monitor for connections to 104.21.7.109 and update blocklists accordingly to mitigate potential exposure.