bithaventrust[.]com[.]transcorpdeliveryservice[.]info

This domain, bithaventrust.com.transcorpdeliveryservice.info, is flagged as a high-risk brand impersonation threat targeting Aave, a decentralized finance protocol. Analysis indicates the site mimics legitimate Aave interfaces to deceive users into disclosing sensitive credentials or transferring assets. The page title 'Crypt Trading incs' further suggests an attempt to appear as a cryptocurrency trading platform, a common tactic in phishing campaigns targeting financial services. Infrastructure analysis reveals the domain was registered on April 27, 2026, through Dynadot Inc, and resolves to the IP address 102.218.215.117. It is secured with a Let's Encrypt SSL certificate, a frequent choice for malicious actors due to its low-cost and automated issuance. VirusTotal reports 15 out of 95 security vendors flagging the domain as malicious, while it appears on three security blocklists. The domain has been blocked by multiple security mechanisms, including browser-based protections and transaction monitoring systems. The domain has been taken down, reducing immediate risk to users. However, residual threats persist, as similar infrastructure may still be active or repurposed. Users who interacted with the domain should revoke any connected wallet permissions, rotate credentials, and monitor for unauthorized transactions. Security teams are advised to update blocklists with the provided indicators, including the domain, IP, and associated SSL certificate, to prevent future access attempts.