aave[.]com-app-apiv2-connect[.]com

The domain aave.com-app-apiv2-connect.com was registered on February 21, 2026 and is currently listed as offline. Analysis of public threat intelligence sources shows that the site was configured to impersonate the cryptocurrency lending platform Aave, as indicated by the brand target field and the classification of the activity as a Crypto Scam. The page title returned by the server matches the domain name exactly, providing no additional context about the content that was served before the takedown. VirusTotal records indicate that 11 of 93 scanning vendors flagged the domain, suggesting a moderate level of detection across multiple security products.

Gridinsoft assigned a trust score of 0 out of 100, reinforcing the view that the domain is highly untrusted. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, confirming that at least one dedicated anti‑phishing service has taken action against it. The elevated risk rating reflects the combination of brand impersonation, cryptocurrency focus, and the low trust score.

While the site is no longer reachable, the registration date and the presence on a blocklist imply that the infrastructure was deployed recently and may have been part of a short‑lived campaign aimed at harvesting credentials or directing victims to fraudulent Aave‑related services. Defenders should continue to block any DNS resolution attempts for this domain, monitor for DNS queries that resemble the naming pattern (e.g., subdomains incorporating "aave.com" and "connect"), and consider adding the domain to internal blocklists across web filters, firewalls, and endpoint protection suites. Ongoing vigilance is recommended to detect future iterations that may reuse the same impersonation technique or target the same brand, as attackers often recycle successful naming conventions.