v3-aave-dashboard[.]com

The domain v3-aave-dashboard.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited. It is delegated to the Cloudflare nameservers hunts.ns.cloudflare.com and mona.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and proxy services. The domain’s age of less than six months aligns with typical deployment timelines for malicious infrastructure.

Resolution of the domain points to IP address 104.21.80.1, which belongs to AS13335 Cloudflare, Inc., and is geolocated to the United States. The site presents a TLS certificate issued by Google Trust Services under the WE1 hierarchy, confirming the presence of HTTPS. An HTTP 302 response is observed, suggesting redirection behavior. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy.

Analysis classifies the site as a high‑risk brand‑impersonation campaign targeting Aave. The page title “Aave Swap: Decentralized Token Exchange with Low Fees” signals a cryptocurrency‑related lure. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal reports that three of ninety‑five security vendors flag the domain, indicating a modest but notable detection rate. The overall risk level is marked as high, and the campaign remains active.

Defenders should add v3-aave-dashboard.com to firewall and DNS filtering rules, and ensure that any outbound connections to the associated IP address are blocked. Continuous monitoring of Cloudflare‑hosted domains for similar naming patterns is advised, as is periodic re‑scanning on VirusTotal to capture additional detections. Incident response teams should treat any traffic to this domain as malicious and investigate potential credential or asset compromise.