ethcnb[.]com

The domain ethcnb.com is currently active and flagged as a brand impersonation threat targeting Aave, a decentralized finance protocol. Analysis indicates the site presents a fraudulent "BTC Pledge" interface, likely designed to deceive users into interacting with malicious smart contracts or disclosing sensitive wallet credentials. The domain remains operational as of the latest verification, posing a high risk to cryptocurrency users. Infrastructure analysis reveals the domain was registered on August 13, 2024, through Web Commerce Communications Limited. It resolves to the IP address 13.32.27.56, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The domain lacks an SSL certificate, increasing the likelihood of interception or manipulation of user data. Security telemetry shows it is flagged by 1 of 95 vendors on VirusTotal and appears on two independent blocklists, including PhishDestroy and Enkrypt. The page title "BTC Pledge" further corroborates its intent to mimic legitimate crypto staking or lending services. Current status confirms ethcnb.com remains active and unmitigated. Organizations and users are advised to block the domain and its resolving IP at the network perimeter. Endpoint protection systems should be updated to detect and prevent access to this domain. Users who may have interacted with the site should revoke any connected wallet permissions and monitor for unauthorized transactions. Given the lack of SSL and the domain's recent registration, additional scrutiny of related infrastructure is recommended to identify potential secondary threats.