en-aave-cdn[.]pages[.]dev

This domain, en-aave-cdn.pages.dev, is flagged for brand impersonation targeting Aave, a decentralized finance protocol. The site presents itself as an official support portal with the page title 'AAVE ® — Guide, Login Help & Troubleshooting,' likely designed to deceive users into entering credentials or interacting with malicious smart contracts. No drainer kit signatures have been identified yet, but the infrastructure aligns with common phishing tactics used against cryptocurrency platforms. Analysis indicates the domain was registered through Cloudflare Pages and resolves to the IP address 172.66.47.163, located in Canada under Cloudflare, Inc. infrastructure. The SSL certificate is issued by Google Trust Services (WE1), a common feature of legitimate and malicious sites alike. VirusTotal reports 0 detections out of 95 engines, suggesting the domain has not yet been widely flagged. The domain was created on April 10, 2026, though this date may reflect a placeholder or misconfiguration. As of the latest check, the domain appears on one security blocklist, but Google Safe Browsing has not yet listed it. The site remains active, posing a continued risk to users who may mistake it for the legitimate Aave platform. No takedown actions have been observed, and the lack of detections on VirusTotal indicates low visibility in automated scanning systems. Users are advised to verify domain authenticity before interacting with any login or support portals claiming affiliation with Aave. Organizations monitoring cryptocurrency threats should prioritize further investigation of this infrastructure, particularly its potential links to credential harvesting or wallet-draining operations.