# praveen4425.github.io — SUSPICIOUS

> GitHub-hosted fake Aave site with 0/95 VirusTotal detections. Full impersonation report available. Check the full report.

## Summary
PhishDestroy identifies praveen4425.github.io as an active impersonation site targeting Aave users through a brand-impersonation scam. This domain mimics the legitimate Aave protocol to deceive visitors into connecting crypto wallets or submitting credentials under false pretenses, such as fake giveaways or phony liquidity mining programs. The site leverages GitHub Pages hosting and a Let's Encrypt SSL certificate to appear legitimate, exploiting trust in both the brand and the hosting platform. Users arriving at praveen4425.github.io may be prompted to connect their wallets or enter private keys, risking direct theft of digital assets or harvesting of sensitive information for use in follow-up attacks.  This domain was flagged with 0 detections out of 95 VirusTotal scanners as of the latest analysis, indicating it currently evades common antivirus and anti-phishing filters. It was registered through GitHub, Inc. as a GitHub Pages site, resolving to IP address 185.199.108.153. The low detection rate combined with the sophisticated impersonation of a major DeFi brand suggests this scam is likely a recent or evolving threat, possibly staged to capitalize on market momentum or user urgency around Aave updates.  If you visited praveen4425.github.io, immediately disconnect your browser from the internet, do not connect any wallets or enter any information, and clear your browser cache and cookies. Inspect your wallet and any connected apps for unauthorized transactions. Report the domain to your browser’s safe browsing tool and consider revoking any wallet connections made while on the page. Share this alert with your network to prevent others from falling victim to this scam.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Aave

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bfc4898d-c390-4713-9788-497e0e28e5b6
- PhishDestroy: https://phishdestroy.io/domain/praveen4425.github.io/
- LLM endpoint: https://phishdestroy.io/domain/praveen4425.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/praveen4425.github.io/
Last updated: 2026-03-26