pro-aave[.]com

The domain pro-aave.com was registered on 20 November 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335) with the IP address 188.114.97.3 located in the United States. DNS resolution is delegated to destiny.ns.cloudflare.com and ruben.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served over plain HTTP. The only visible page element is the title “Nur einen Moment…”, which provides no further indication of content.

Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. VirusTotal scans reported that two of ninety‑five antivirus engines flagged the domain, reinforcing the suspicion of malicious use. The domain is categorized as a crypto‑related brand impersonation targeting Aave, consistent with the “Crypto Scam” label in the intelligence set. As of the report date (25 July 2026) the site is taken offline, but the infrastructure footprint remains observable.

Defenders should continue to deny any network connections to 188.114.97.3, enforce DNS blocking of pro-aave.com, and monitor for newly registered domains that reuse the same registrar or Cloudflare name servers. Additional scrutiny of any traffic that presents the same page title or originates from the same IP range is advised. Because the site lacks SSL, any attempt to intercept traffic would be trivial, underscoring the importance of pre‑emptive blocklisting. Ongoing threat hunting should include correlation with other Aave‑impersonation campaigns and verification of any future domains that resolve to the same Cloudflare ASN.