aavegsystem[.]com

The domain aavegsystem.com is identified as a high‑risk brand‑impersonation site targeting the Aave cryptocurrency platform. The registration record shows the domain was created on February 21, 2026 and is currently active. Infrastructure analysis indicates it resolves to the IP address 76.76.21.98, which belongs to an Amazon.com, Inc. network (AS16509) hosted in the United States.

The HTTP response returns a 301 redirect and the TLS certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2. The page title returned by the server is “Aaveg”, which aligns with the known brand target. Detected technologies include the Vercel hosting platform, HTTP Strict Transport Security (HSTS), and Google Analytics tracking. The domain is served by the GoDaddy nameservers ns39.domaincontrol.com and ns40.domaincontrol.com.

Threat intelligence feeds show the domain is flagged by one security vendor on VirusTotal (1 of 95 vendors) and receives a Gridinsoft trust score of 0 out of 100. It is listed on a single blocklist and has been actively blocked by the PhishDestroy filter. No additional malware or payload indicators have been observed beyond the brand‑impersonation classification.

Defenders should treat aavegsystem.com as malicious. Immediate actions include adding the domain to DNS blocklists, firewall rules, and endpoint web filtering policies. Monitoring for outbound connections to the associated IP address and for any traffic that includes the “Aaveg” page title can help detect compromised clients. Analysts should continue to collect payload samples and monitor the hosting provider for further impersonation campaigns, as the current evidence is limited to infrastructure and title data.