project-savers[.]pages[.]dev

PhishDestroy identifies the domain project-savers.pages.dev as an active brand impersonation threat currently under investigation for mimicking the Aave protocol platform.

This domain is flagged by 0 of 95 VirusTotal vendors despite its malicious impersonation of Aave, a leading decentralized finance protocol. The domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., which provides a false veneer of legitimacy. The SSL certificate issued by Let's Encrypt adds further deceptive trust signals. With no current blocklist presence and neutral trust scores, this threat remains undetected by mainstream security layers, making it particularly dangerous to unsuspecting users.

The domain represents a high-risk impersonation attack vector targeting cryptocurrency users. PhishDestroy recommends users immediately block access to project-savers.pages.dev and verify all DeFi-related URLs through official Aave channels or trusted security databases. Exercise heightened scrutiny when accessing financial platforms via shortened URLs or cloud-hosted domains, as these are commonly exploited for brand impersonation campaigns. Since this threat is currently undetected by most AV engines, manual verification of website certificates and domain ownership remains essential for safe interaction with financial services online.