equivestltd[.]com

The domain equivestltd.com was registered on February 21, 2026 and is presently taken offline, but forensic traces indicate it was used for a crypto‑related brand impersonation campaign targeting Aave. The site presented the page title "Equivest Ltd - Trading for everyone," a generic claim that aligns with the listed scam type of a Crypto Scam. DNS resolution points to the IP address 198.12.66.123, which belongs to the HostPapa hosting provider (AS36352) and is geolocated in the United States. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, specifically blocked by PhishDestroy.

SSL analysis identified a certificate classified as R10, indicating a low‑confidence or self‑signed issuance. VirusTotal scanning recorded a single positive detection out of 93 security vendors, confirming at least one security product flagged the domain as malicious. The combination of a newly created domain, low trust score, minimal blocklist presence, and a solitary vendor detection suggests a short‑lived infrastructure that was likely dismantled after initial use.

Defenders should continue to block the resolved IP 198.12.66.123 and add equivestltd.com to internal deny lists, even though the site is offline, to prevent re‑hosting or reuse of the same domain. Continuous monitoring of HostPapa‑owned IP ranges for reappearance of similar brand‑impersonation patterns is advised, as well as periodic re‑scanning of the domain should it become active again. Organizations using Aave services should reinforce user awareness training to recognize unsolicited communications referencing "Equivest Ltd" and ensure that any credential entry points are restricted to official Aave domains.