aavefork[.]miexs[.]com

The domain aavefork.miexs.com was registered on February 21, 2026 and is now listed as offline. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The site presented a page title of "Aave - Open Source Liquidity Protocol," indicating a direct attempt to impersonate the Aave brand. Classification from the intelligence feed identifies the activity as a crypto‑scam, specifically a brand‑impersonation campaign targeting Aave users.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal scanning recorded a single positive detection out of 93 security vendors, confirming that at least one anti‑malware engine recognized malicious behavior. The SSL certificate associated with the site is labeled WE1, and the Gridinsoft trust score was recorded as 0 out of 100, reflecting a lack of trustworthiness.

No additional evidence such as Safe Browsing or OTX identifiers is available. Defenders should add the domain and its resolved IP address to network deny lists, enforce DNS filtering for the host, and monitor for any resurgence of the domain or similar sub‑domains under the miexs.com authority. Given the low trust score, the single vendor flag, and the explicit brand impersonation, the risk posture is elevated, and continued vigilance is recommended.