aave-dashbaord[.]it[.]com

Analysis of aave-dashbaord.it.com shows that the domain was registered on February 21, 2026 and is currently taken offline. The site resolved to the IP address 104.21.32.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The page title returned by the server was "Aave - Open Source Liquidity Protocol," directly referencing the Aave brand and indicating a deliberate impersonation of the open‑source liquidity protocol. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, confirming that at least one defensive feed has flagged it as malicious.

Gridinsoft assigned a trust score of 0 out of 100, suggesting a high confidence of malicious intent. VirusTotal scans returned two detections out of ninety‑three security vendors, reinforcing the suspicion despite the low detection count. The SSL certificate is identified as WE1, which is an indicator of a weak or improperly configured certificate commonly associated with fraudulent sites.

The intelligence categorizes the activity as a crypto scam, aligning with the brand impersonation and the use of a reputable DeFi protocol name to lure victims. Defenders should add the domain and its resolving IP to deny‑list rules, monitor for newly created domains that mimic the Aave naming pattern, and consider tightening outbound filtering for traffic to Cloudflare‑hosted IP ranges that exhibit similar trust‑score anomalies. Continuous observation of blocklist updates and VirusTotal re‑scans is recommended to capture any future activity should the domain be re‑hosted or resurrected.