aave[.]com[.]lists[.]eu[.]com

The domain aave.com.lists.eu.com was registered on 21 February 2026 through Instra Corporation Pty Ltd. and is hosted on the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The authoritative nameservers are ns1.centralnic.net, ns2.centralnic.net, ns3.centralnic.net and ns4.centralnic.net, and the MX record points to eu-com-wildcard-null-mx.centralnic.net with priority 0. The site presented the page title "Aave Innovative Routes - Transport and Logistics," suggesting a brand‑impersonation attempt targeting the cryptocurrency platform Aave.

Security telemetry shows that three of ninety‑three VirusTotal scanners flagged the domain, and it appears on a single external blocklist. PhishDestroy has also listed the domain as blocked, and the Gridinsoft trust score is 0 out of 100, indicating a high likelihood of malicious intent. The SSL certificate is classified as E6, and the overall risk rating is elevated.

The domain is currently offline, but the historical evidence indicates a crypto‑scam campaign that leveraged the Aave brand to lure victims. Uncertainty remains regarding the exact payload or phishing page content, as no visual analysis is available. Defenders should continue to block the domain at network perimeters, monitor for any residual DNS or IP activity, and update threat intelligence feeds with the observed indicators of compromise, including the IP address, nameserver set, and registration details.