bluwingstravels[.]com

This report examines bluwingstravels.com, identified as a brand impersonation domain targeting the decentralized finance platform Aave. The domain is currently active and classified as elevated risk. It was registered on July 19, 2022, through GoDaddy.com, LLC, and is not associated with legitimate Aave services. Its purpose is to deceive users into believing it represents Aave, likely for credential theft or financial fraud.

Technical indicators confirm the threat. The domain is flagged by 6 of 95 VirusTotal security vendors, indicating confirmed malicious detection. It resolves to IP address 192.185.162.78, and uses a Let's Encrypt SSL certificate to appear legitimate. The registrar is GoDaddy.com, LLC, and the domain creation date is July 19, 2022. No blocklist or trust score percentages are available in the provided data, but the vendor detection rate of 6.3% supports the elevated risk level.

The domain remains active and poses a direct threat to Aave users. Recommendations include blocking the domain at the network level, adding it to deny lists, and monitoring for associated subdomains or IP changes. Users should be warned against interacting with the domain or providing any credentials. Infrastructure analysis should continue to track resolution and certificate updates.