7rwbo4waussfvsxgyzbphph6ffbyfczctzvv5gfspc3mg2gxx76a[.]arweave[.]net

This domain is flagged as a brand impersonation threat targeting Aave, a decentralized finance protocol. The site mimics legitimate Aave interfaces to deceive users into connecting wallets or entering sensitive credentials, potentially leading to unauthorized access or asset theft. The page title 'Loading…' suggests an incomplete or intentionally vague setup designed to avoid immediate detection while awaiting victim interaction. Analysis indicates the domain was registered through NAMECHEAP INC and resolves to the IP address 195.181.175.41. It is hosted via CDN77 and secured with a Let's Encrypt SSL certificate, which is common among both legitimate and malicious sites. The domain appears on two security blocklists and is flagged by 3 out of 95 security vendors on VirusTotal. Additionally, it is actively blocked by MetaMask and SEAL, further confirming its malicious intent. If you visited this domain or interacted with its content, immediately disconnect any connected wallets and revoke permissions using a blockchain explorer. Scan your device for malware using updated security tools. Monitor your accounts for unauthorized transactions and consider reporting the incident to relevant platforms or security teams. Avoid re-engaging with the domain, as it has been taken offline but may resurface under a different address.