aave[.]com-app-connect-v2com[.]com

Analysis of the domain aave.com-app-connect-v2com.com, created on 21 February 2026 and registered through MAT BAO CORPORATION, shows a high‑risk brand‑impersonation campaign targeting the cryptocurrency platform Aave. The site resolves to IP 172.67.149.83, which belongs to AS13335 Cloudflare, Inc., located in the United States. DNS resolution is performed by ace.ns.cloudflare.com and imani.ns.cloudflare.com, indicating use of Cloudflare’s edge network and HTTP/3 support. The TLS certificate is issued by Google Trust Services under the WE1 trust chain, yet the HTTP response returns status code 403 with the page title “Access Denied”. Gridinsoft assigns a trust score of 0/100, and nine of ninety‑three VirusTotal scanners have flagged the domain as malicious. The domain appears on two security blocklists, PhishDestroy and ScamSniffer, reinforcing its classification as a crypto‑related scam. While the actual phishing page content has not been observed, the combination of brand impersonation, low trust score, multiple detections, and blocklist listings provides strong evidence of malicious intent. Defenders should block the domain at network perimeter, update URL filtering and IDS signatures, and monitor for any related C2 activity originating from the same IP or Cloudflare nameservers. Ongoing observation is advised to confirm whether additional infrastructure is deployed.