gavertyery[.]vercel[.]app

PhishDestroy identifies gavertyery.vercel.app as a live Aave brand impersonation domain hosting a cryptocurrency drainer payload, designed to trick users into connecting malicious wallets under false pretense. This domain specifically abuses Aave’s trusted brand to deceive users into signing malicious transactions or revealing private keys, with immediate financial theft as the likely outcome. Security researchers and end-users should treat this as a high-risk impersonation campaign targeting crypto holders who interact with decentralized finance platforms.

This domain resolves to IP 64.29.17.195 and currently shows zero detections across 95 VirusTotal engines, indicating it evades most antivirus and scanner tools at this time. It is registered through Vercel Inc., leveraging a legitimate hosting platform to appear credible, and holds a valid SSL certificate issued by Google Trust Services. The domain has been flagged and is currently blocked by OpenPhish, with active presence on at least one public blocklist. Despite these countermeasures, the lack of broad detection suggests this threat is actively evolving and not yet widely recognized by automated security systems.

If you have visited gavertyery.vercel.app or interacted with it—especially entered wallet credentials or connected a wallet—you may have exposed your assets to theft. Disconnect any connected wallets immediately, revoke any unauthorized token approvals, and transfer remaining funds to a clean wallet using a verified interface. Do not reuse browser sessions across crypto platforms and clear cookies and site data. Use PhishDestroy to verify the domain’s status and check for updates on this campaign under seed 388203. Always verify URLs manually via official channels before any transaction or login attempt.