badges-aave[.]com

The domain badges-aave.com was registered on November 19, 2025 through Dynadot LLC and is currently marked offline. Technical analysis shows the site resolved to IP address 142.250.186.164, which belongs to AS15169 Google LLC in the United States. The hosting infrastructure employed Cloudflare services, as indicated by the presence of Cloudflare name servers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) and the detection of HTTP/3 support. The SSL certificate presented was issued by Google Trust Services under the WE1 designation, confirming the use of a Google‑managed TLS certificate.

An HTTP request to the domain returned a 404 status code, and the page title reported by crawlers was "Google," suggesting that no legitimate content was served at the time of observation. The domain was identified as impersonating the cryptocurrency platform Aave and classified as a crypto scam. Detection signals include a block by the PhishDestroy feed and inclusion on a single external security blocklist. VirusTotal analysis recorded two positive detections out of ninety‑five scanning engines, indicating that a minority of security vendors flagged the domain as malicious.

Given the combination of brand impersonation, the use of reputable hosting and certificate providers, and the limited but present detection signals, defenders should treat badges-aave.com as a potential phishing vector. Recommended mitigations include adding the domain to DNS and web‑filter blocklists, monitoring for re‑registration or activity on the same IP range, and alerting users who interact with Aave‑related communications to verify URLs carefully. Continuous observation of related Cloudflare‑hosted domains and similar naming patterns is advised to pre‑empt future re‑use of this infrastructure.