aavepro[.]one

The domain aavepro.one was registered on March 12, 2026 through NameSilo, LLC. DNS resolution points to 104.21.9.111, an address owned by AS13335 Cloudflare, Inc. and located in the United States. The site serves an HTTPS certificate issued by Google Trust Services under the WE1 series, indicating a valid TLS handshake but offering no visual trust cues beyond the generic certificate. An HTTP request returns status code 403, and the rendered page title is the text “Just a moment…”, which matches the minimal response observed on many Cloudflare‑protected sites. Infrastructure analysis shows the domain is using Cloudflare services, including Browser Insights and HTTP/3, and the authoritative name servers are odin.ns.cloudflare.com and kim.ns.cloudflare.com. Threat intelligence records flag the domain as a brand‑impersonation vector targeting the cryptocurrency platform Aave.

The activity is classified as a crypto‑scam, and the domain appears on one public blocklist. Two of ninety‑four security vendors submitted to VirusTotal have raised detections, and the blocklist PhishDestroy actively blocks the host. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. No additional external reputation sources such as OTX or Safe Browsing are cited in the current data set.

Defenders should treat aavepro.one as an active high‑risk asset. Recommended controls include adding the domain to outbound web filtering rules, updating DNS sinkhole lists with the IP address 104.21.9.111, and monitoring for TLS connections to the Google Trust Services certificate fingerprint associated with this host. Network traffic to the Cloudflare name servers odin.ns.cloudflare.com and kim.ns.cloudflare.com should be inspected for suspicious payloads, and any authentication attempts to Aave services from this domain should be blocked.