xn--ve-6kca[.]xn--mppshbrgh-0yhcd7oie7a980aha3153kdaj[.]wrapped[.]co[.]com

The domain xn--ve-6kca.xn--mppshbrgh-0yhcd7oie7a980aha3153kdaj.wrapped.co.com was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 104.26.7.36, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented the page title "Aave Sweets - Artisan Dessert Boutique | Premium Cakes & Pastries," suggesting an attempt to masquerade as a legitimate culinary brand. Intelligence classifies the activity as a brand‑impersonation generic phishing campaign.

The SSL certificate associated with the domain carries an E5 rating, indicating a low trust level for encrypted connections. The domain appears on a single security blocklist, identified by PhishDestroy, confirming that at least one defensive feed has flagged it. VirusTotal reports that the domain was examined by 95 scanning engines, none of which raised a detection; this absence of alerts should not be interpreted as confirmation of safety, merely as the current detection outcome.

No additional evidence such as sandbox analysis, URL screenshots, or threat‑intel feeds is available at this time, leaving the full scope of the phishing payload and victim interaction unknown. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any resurgence of activity, and consider adding the domain to internal blacklists. Ongoing observation of the associated IP, the Cloudflare network, and any related sub‑domains is advised to detect potential re‑use or migration of the phishing infrastructure.