iavehernandez[.]github[.]io

This domain, iavehernandez.github.io, is currently under investigation for brand impersonation targeting Aave, a decentralized finance protocol. Analysis indicates the site is designed to deceive users by mimicking Aave's legitimate interface, potentially facilitating credential harvesting or unauthorized transactions. The domain remains active and has not yet been flagged by security vendors. Infrastructure analysis reveals the domain is hosted on GitHub Pages, registered through GitHub, Inc., and resolves to the IP address 185.199.108.153. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious sites. As of the latest scan, the domain has 0 detections out of 95 vendors on VirusTotal, suggesting it has successfully evaded existing detection mechanisms. No historical blocklist records or trust scores are available, indicating this may be a newly deployed threat. The current status of iavehernandez.github.io remains active, posing an ongoing risk to users of the Aave platform. Organizations and individuals are advised to block the domain at the network level and add it to endpoint protection exclusion lists. Security teams should monitor for connections to 185.199.108.153 and investigate any user interactions with the domain. Users who may have accessed the site should reset credentials associated with Aave accounts and review transaction histories for unauthorized activity. Given the lack of detections, this domain may represent a novel threat vector requiring heightened vigilance.