pro-aave[.]xyz

This domain pro-aave.xyz was registered on May 18, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Infrastructure analysis reveals that it resolves to IP address 104.21.24.28 in CA under Cloudflare, Inc. The domain returns HTTP status 200 and serves content under the page title Aave - Open Source Liquidity Protocol with an SSL certificate from Let's Encrypt E7. These registration and hosting details establish the observable technical footprint of the domain as of July 12, 2026.

The domain is classified under brand impersonation targeting Aave. It carries a Gridinsoft trust score of 0/100 and appears on 2 security blocklists. VirusTotal detection stands at 3 out of 95 vendors while the domain remains blocked by PhishDestroy and ScamSniffer. Current status remains active with a high risk level assigned based on these indicators. The combination of low vendor detections alongside explicit blocklist presence and brand matching page title provides concrete evidence of impersonation without reliance on external assumptions.

Uncertainties persist around the exact downstream usage of the domain given the modest VirusTotal count and absence of additional ASN or kit details in the available intelligence. Defenders should incorporate the exact IP 104.21.24.28 and registrar NICENIC INTERNATIONAL GROUP CO., LIMITED into monitoring rules for similar registrations. Blocking the domain outright is warranted due to its confirmed presence on existing blocklists and the documented impersonation signals to limit exposure to the targeted brand.