aave[.]kgen[.]team

This domain, aave.kgen.team, was registered on 21 February 2026 and is currently offline. The site presented the page title “Nur einen Moment…”, which is consistent with a placeholder page rather than a functional service. Infrastructure analysis shows the domain resolves to IP 172.67.177.83, an address owned by AS13335 Cloudflare, Inc. in the United States, indicating the use of a reputable CDN for fast‑flux or anonymity. The SSL certificate presented under the label “WE1” is valid for the host name, but the certificate alone does not guarantee legitimacy.

Threat intelligence flags the domain as a crypto‑scam that impersonates the Aave brand. Gridinsoft assigned a trust score of 0 / 100, and the domain appears on one external security blocklist. VirusTotal scans report that 2 of 93 antivirus engines flagged the domain, confirming malicious suspicion despite the low detection count. PhishDestroy has also blocked the host.

No additional evidence such as Safe Browsing, Open Threat Exchange entries, or registrar details were available at the time of analysis. Because the site is taken offline, immediate traffic observation is not possible, but the combination of brand impersonation, low trust score, blocklist presence, and partial VirusTotal detections suggests an elevated risk to users who might encounter the domain in phishing campaigns. Defenders should continue to monitor the host for re‑appearance, enforce URL filtering for the exact host name, and educate users about unsolicited Aave‑related communications that direct to unknown URLs. Incident response teams should treat any credential or wallet information submitted to this domain as compromised and advise affected users to rotate credentials and secure their crypto assets.