aave[.]gho-v3[.]it[.]com

The domain aave.gho-v3.it.com is identified as a brand impersonation threat specifically targeting the Aave platform. This domain is currently active and has been confirmed to be involved in malicious activities designed to deceive users by imitating the legitimate Aave brand.

This domain was created on February 21, 2026, and is presently resolved to the IP address 172.67.140.207, hosted in the United States under AS13335 by Cloudflare, Inc. Analysis on VirusTotal indicates that 1 out of 95 security vendors have flagged this domain as malicious. Furthermore, it has been blocked by recognized security sources, including PhishDestroy and ScamSniffer, and appears on two security blocklists. The SSL certificate in use is designated as WE1.

Given its active status and high-risk classification, it is recommended to add aave.gho-v3.it.com to organizational blocklists to prevent potential exposure. Continuous monitoring for additional indicators of compromise related to this domain is advised. Users should be educated about recognizing such impersonation tactics, and systems should be configured to detect and alert on similar domain activities.