aane[.]it[.]com

The domain aane.it.com was registered on February 21, 2026 and is currently listed as offline. Web server responses indicated the page title "Aave - Open Source Liquidity Protocol," which does not match the expected branding for any legitimate Aave service and suggests a deliberate attempt to mislead users. The site was classified as a brand impersonation scam and appears on two independent security blocklists, specifically PhishDestroy and ScamSniffer, confirming that multiple monitoring platforms have identified it as malicious.

DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. VirusTotal analysis shows that three of ninety‑five scanned security vendors flagged the domain, providing additional corroboration of its malicious nature. The SSL certificate presented for the site is identified as "WE1," but no further certificate details such as issuer or validity period were disclosed.

The combination of a mismatched page title, brand impersonation labeling, blocklist inclusion, and partial VirusTotal detections paints a consistent picture of a phishing infrastructure targeting users familiar with the Aave protocol. Defenders should ensure that aane.it.com is blocked at network perimeter controls, update any URL filtering policies to include the domain, and monitor traffic to the associated Cloudflare IP for any residual activity. Given the offline status, investigators should also consider archiving the domain’s historical DNS and TLS artifacts for future attribution work, while remaining vigilant for potential re‑deployment of the same infrastructure under a different domain name.