accountt-wallete-aave[.]pages[.]dev

PhishDestroy identifies accountt-wallete-aave.pages.dev as an active brand-impersonation domain targeting Aave users with a fake wallet interface designed to drain cryptocurrency assets. The site leverages a visually similar name and the legitimate *.pages.dev subdomain service to appear authentic, aiming to trick visitors into connecting their wallets and signing malicious transactions. No evidence of a custom drainer kit has been observed in sandbox analysis; instead, the threat likely relies on social engineering and UI mimicry to deceive users into authorizing transfers. This domain was flagged with a VirusTotal detection score of 4/95 at time of analysis. It resolves to IP 172.66.44.85 via Cloudflare, Inc. and uses a Google Trust Services SSL certificate. The domain is hosted on Cloudflare Pages, a legitimate platform often abused by threat actors to host short-lived phishing pages. As of the latest scan, it remains unlisted on Google Safe Browsing and has not been blocked by major threat intelligence feeds, indicating a newly emerged or stealthily operated campaign. Accountt-wallete-aave.pages.dev is currently active and under continuous monitoring. No takedown has been confirmed. Users are advised to verify URLs carefully, avoid entering seed phrases or connecting wallets to unknown sites, and cross-check domains against official Aave platforms. The risk remains high due to low detection rates and the use of a trusted hosting provider, emphasizing the need for heightened vigilance in cryptocurrency-related interactions.