aave[.]com-appv3-connect-api[.]com

The domain aave.com-appv3-connect-api.com was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows the domain resolves to IP address 172.67.190.22, which belongs to AS13335 Cloudflare, Inc., indicating the use of Cloudflare’s reverse‑proxy service. The SSL certificate associated with the host is identified as WE1, confirming that the site presented a valid HTTPS certificate at the time of observation. Reputation data indicates the domain appears on a single security blocklist and has been blocked by PhishDestroy.

VirusTotal scans recorded 13 positive detections out of 93 submitted security vendors, reinforcing the malicious classification. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating. The threat intelligence tags classify the activity as a crypto scam that impersonates the Aave brand, matching the declared brand target of Aave.

No additional evidence such as page title, HTTP response codes, or detailed content analysis is available, leaving the exact lure or credential‑harvesting mechanism undefined. Defenders should immediately add the domain and its resolving IP 172.67.190.22 to block lists, enforce DNS sink‑holing for similar sub‑domain patterns, and monitor Cloudflare‑hosted IP ranges for other newly registered Aave‑related strings. Continuous re‑scanning of the domain on multiple sandboxes is advised in case the site is re‑hosted, and any future registrations that reuse the "appv3‑connect‑api" token should be scrutinized for brand‑impersonation intent.