iuhoyfdyuhgfsd[.]com

This domain, iuhoyfdyuhgfsd.com, was registered on 2 December 2025 through OwnRegistrar, Inc. and is presently taken offline. The authoritative nameservers albert.ns.cloudflare.com and harmony.ns.cloudflare.com resolve the domain to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is presented, indicating that the site was served over plain HTTP. The page title retrieved during the brief observation period reads “Aave – Open Source Liquidity Protocol,” matching the declared brand target of Aave and confirming that the domain was intended to impersonate the blockchain liquidity protocol.

Gridinsoft assigns a trust score of zero out of one hundred, and two of ninety‑five VirusTotal scanners flagged the domain as malicious. The domain appears on two public blocklists, PhishDestroy and ScamSniffer, both of which classify it as a wallet/seed phishing campaign. The overall risk assessment is elevated due to the combination of brand impersonation, a zero‑trust score, and active blocklist listings.

Uncertainty remains regarding the exact payload delivered to victims, the extent of compromised accounts, and whether any active command‑and‑control infrastructure was associated with the domain before it was taken down. Defenders should block the domain and its underlying IP at perimeter firewalls and DNS filtering solutions, monitor for any outbound connections to 188.114.96.3, and update endpoint detection rules to flag attempts to submit wallet credentials or seed phrases. Continuous threat‑intel feeds should be consulted for any re‑use of the same registrar, nameserver pair, or Cloudflare IP range in future campaigns targeting the Aave ecosystem.