naveen-negi721700[.]github[.]io

This domain, naveen-negi721700.github.io, poses a high-risk brand impersonation threat targeting Aave users. The site is designed to mimic legitimate Aave interfaces, likely to harvest credentials or deploy crypto-draining scripts. Users who interact with the domain may unknowingly expose wallet addresses, private keys, or other sensitive authentication details to unauthorized third parties. The site’s infrastructure and content are structured to exploit trust in the Aave brand, increasing the likelihood of successful deception among cryptocurrency users. Analysis indicates the domain was registered on April 14, 2026, through GitHub, Inc., and currently resolves to the IP address 185.199.108.153. VirusTotal reports 18 out of 95 security vendors flagging the domain as malicious, with Google Safe Browsing specifically classifying it as a phishing threat. The SSL certificate is issued by Let’s Encrypt (R12), a common tactic to lend false legitimacy to fraudulent sites. Despite displaying a 'Site not found' page title, the domain remains active and is blocked by at least one security blocklist, suggesting ongoing or intended malicious use. If you have visited naveen-negi721700.github.io, immediately disconnect any connected wallets or sessions. Revoke all active smart contract approvals associated with the domain using a blockchain explorer or wallet security tool. Change passwords for any accounts accessed during the visit, and enable multi-factor authentication where available. Monitor wallet transactions for unauthorized activity and consider reporting the incident to relevant security teams or platforms. Users should verify domain authenticity through official Aave channels before interacting with any Aave-related sites in the future.