metavesse[.]com

The domain www.metavesse.com is a confirmed phishing site engaged in brand impersonation targeting Aave, a decentralized finance (DeFi) protocol. This site operated as a DeFi scam, attempting to deceive users into connecting their cryptocurrency wallets under false pretenses, though no active drainer kit was identified. As of the latest verification, www.metavesse.com has been taken offline, but its prior activity poses a residual risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of www.metavesse.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). It was registered through Amazon Registrar, Inc. on August 14, 2025, and resolved to the IP address 47.83.169.104, hosted by Alibaba (US) Technology Co., Ltd. in Hong Kong. No SSL certificate was present, and the observed page title was 'www.metavesse.com'. The domain used Amazon Route 53 nameservers: ns-1396.awsdns-46.org, ns-185.awsdns-23.com, ns-1944.awsdns-51.co.uk, and ns-916.awsdns.

Users who connected a wallet to www.metavesse.com should immediately revoke any token approvals granted to the site via tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.