aave2[.]com

The domain aave2.com was registered through Wix.Com Ltd. on 13 December 2024 and is hosted on Google Cloud infrastructure (ASN 396982, United States). DNS resolution points to IP 34.149.87.45, served by the nameservers ns2.wixdns.net and ns3.wixdns.net. No TLS certificate is presented, indicating the site is accessible only over HTTP. The HTTP response returns a page titled “Home | AAVE,” which directly references the Aave brand and aligns with the declared impersonation of Aave.

VirusTotal analysis shows that one of ninety‑five security vendors flagged the domain, providing a minimal but notable detection signal. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. Current monitoring indicates the site has been taken offline, but the infrastructure remnants remain observable. Defenders should add the IP address 34.149.87.45 and the domain aave2.com to outbound and inbound filtering rules, especially for traffic targeting Aave‑related services.

Continuous watch‑listing of Wix‑hosted domains that resolve to Google Cloud IPs is advisable, as the registrar and hosting combination is frequently leveraged for rapid deployment of impersonation sites. Organizations using the Aave brand should update user awareness materials to reference the exact domain name and emphasize that legitimate Aave communications employ TLS. While the evidence confirms the domain’s intent to mimic Aave, the limited detection count suggests a low‑volume campaign; however, the presence on a reputable blocklist warrants an elevated risk posture until the site is fully retired.