app-acvu[.]com

Analysis indicates that the domain app-acvu.com was registered on February 21 2026 through OwnRegistrar, Inc. The site resolves to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The TLS certificate is identified as WE1, confirming the presence of HTTPS. The page title returned from the server is “Aave – Open Source Liquidity Protocol”, matching the targeted brand Aave and confirming a brand impersonation attempt. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low reputation. VirusTotal analysis shows that one out of ninety‑three scanning engines flagged the domain, providing an additional detection signal.

The site is currently offline, which limits real‑time observation but does not remove the risk of future re‑activation. Uncertainty remains regarding the specific payload delivered, as the page content has not been captured beyond the title. No public malware kit or additional indicator set is available, and the low detection count suggests that many scanners have not yet identified malicious behavior. The single blocklist entry and the PhishDestroy block imply that at least one security community has observed abusive activity. Defenders should add app-acvu.com to URL filtering rules and blocklist it at perimeter and proxy layers.

Monitoring of DNS queries for the domain and its associated IP address is advised, as Cloudflare‑hosted infrastructure can be reused for other malicious domains. Incident response teams should treat any credential or seed phrase submissions to this domain as compromised and advise affected users to rotate credentials and revoke associated wallets. Continuous re‑scanning with VirusTotal and other multi‑engine services is recommended to capture any emerging detection signatures.