aave[.]3v-gho[.]it[.]com

Analysis indicates that the domain aave.3v-gho.it.com was registered on February 21, 2026, and is currently offline. Infrastructure review reveals the domain impersonates Aave, a decentralized finance protocol, aligning with the reported scam type of crypto fraud. The site previously displayed a Cloudflare interstitial page titled 'Attention Required! | Cloudflare,' suggesting either automated filtering or an incomplete deployment at the time of observation.

The domain resolved to IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335) in the United States. SSL certificate classification WE1 was assigned, though no further cryptographic details are available. No active detections were recorded by the 93 security vendors that scanned the domain on VirusTotal, though this absence does not confirm benign status. The domain appears on one security blocklist, specifically PhishDestroy, indicating prior suspicion.

No additional context regarding the phishing kit, lure mechanism, or victim interaction is available at this time. Defenders should treat this domain as part of a crypto-focused brand impersonation campaign and monitor for re-emergence or related infrastructure. Blocking at the DNS or proxy level is recommended for organizations protecting users of decentralized finance platforms. Further investigation is required to determine the full scope of the operation and any associated wallet addresses or smart contract interactions.