io-us-aave-dashboard[.]pages[.]dev

This domain, io-us-aave-dashboard.pages.dev, is flagged as an active brand impersonation threat targeting Aave, a decentralized finance protocol. Analysis indicates the site mimics Aave’s legitimate dashboard interface, presenting itself as 'Aave Dashboard – Next-Level Dashboard for Efficient DeFi Management.' The domain is designed to harvest user credentials or private keys under the guise of a trusted DeFi management tool, a tactic commonly associated with wallet-draining schemes. Infrastructure analysis reveals the domain was registered on October 30, 2025, through Cloudflare, Inc., and resolves to IP address 172.66.46.245 (AS13335). The SSL certificate is issued by Google Trust Services (WE1), a common feature in phishing campaigns to appear legitimate. VirusTotal detection shows 2/95 security vendors flagging the domain, while it appears on three independent security blocklists. The domain remains unlisted by Google Safe Browsing as of the latest scan. The domain remains active and unmitigated at the infrastructure level, though it is blocked by several endpoint protection and browser-based security tools. Response actions include partial blocklisting, but the domain continues to pose a high risk to users unfamiliar with Aave’s official channels. Organizations and individuals are advised to update web filters, monitor for related subdomains, and educate users on verifying DeFi platform authenticity before entering sensitive information.