aave-crypto[.]us

The domain aave-crypto.us was registered on 21 February 2026 through TLD Registrar Solutions Ltd. DNS resolution points to 172.67.152.88, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. The authoritative nameservers are rachel.ns.cloudflare.com and finley.ns.cloudflare.com, confirming that the domain is fully hosted on Cloudflare's edge network. Cloudflare‑provided technologies detected include Browser Insights and HTTP/3, and the TLS certificate is issued by Google Trust Services under the WE1 label, a common configuration for Cloudflare‑proxied sites. An HTTP request to the host returns a 404 Not Found page title, and the site is currently taken offline.

Threat‑intelligence sources flag the domain as a brand‑impersonation vector targeting Aave. AlienVault OTX references a single pulse that includes aave-crypto.us, and PhishDestroy has listed the domain as blocked. VirusTotal analysis shows that eight of ninety‑three scanning engines label the site as malicious, and the domain appears on one external blocklist. The observed scam type is a “Crypto Scam,” consistent with the brand‑impersonation claim.

Evidence is limited to infrastructure and meta‑data; the actual page content, phishing kit, or credential‑harvesting mechanisms have not been captured because the site is offline. Consequently, the precise attack flow and any user‑visible artifacts remain unknown. Defenders should treat the domain as hostile, enforce DNS‑level denial for aave-crypto.us and its resolved IP, and incorporate the indicator set (nameservers, ASN, SSL issuer) into existing detection rules. Continuous monitoring of newly registered domains that resolve to Cloudflare IP ranges and reference the Aave brand is also advised to catch future replicas early.