aavve-dachboard[.]it[.]com

The domain aavve-dachboard.it.com was registered on February 21, 2026 and subsequently resolved to the IP address 104.21.60.245, which is owned by AS13335 Cloudflare, Inc. located in the United States. Infrastructure analysis shows the domain is hosted behind Cloudflare’s network, a common choice for threat actors seeking anonymity and rapid deployment. The site presented the page title "aavve-dachboard.it.com | 525: SSL handshake failed," indicating that the TLS handshake could not be established, which may be the result of a misconfigured or deliberately invalid certificate. The SSL certificate associated with the domain is identified as WE1, but its authenticity could not be verified.

Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, suggesting a high likelihood of malicious intent. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis recorded 2 detections out of 93 scanning engines, confirming that a minority of security vendors have flagged the domain as suspicious. The current operational status is offline, implying that the site has been taken down or is no longer reachable.

While the exact phishing payload or target brand has not been disclosed, the classification as a generic phishing campaign is supported by the presence of multiple detections and blocklist listings. Defenders should continue to monitor the associated IP address for any re‑use, enforce outbound filtering to block connections to the domain and its hosting IP, and incorporate the domain hash into threat‑intel feeds. Given the recent creation date and low trust score, it is advisable to treat any future activity from this namespace as high risk until a comprehensive takedown confirmation is obtained.