call-brave[.]com

This domain, call-brave.com, is flagged as an active phishing infrastructure impersonating the Aave protocol. Registered on March 12, 2026, through Tucows Domains Inc., it currently resolves to 91.92.241.15 (AS202412, Omegatech LTD, Netherlands) and uses Cloudflare nameservers. The site returns an HTTP 301 redirect and presents an 'Index of /' page title, suggesting either misconfigured or intentionally exposed directory listings. Technologies detected include WordPress, MySQL, PHP, jQuery, and Smartsupp, which may indicate a templated phishing kit or compromised CMS instance. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites. Analysis indicates the domain appears on three security blocklists and is referenced in 22 threat intelligence pulses on AlienVault OTX. Five of 94 security vendors on VirusTotal flag the domain as malicious. It is actively blocked by at least three security providers. The exact content of the phishing page remains unconfirmed, but the infrastructure aligns with known brand impersonation tactics targeting decentralized finance platforms. Defenders should treat this domain as high-risk. Recommended actions include blocking resolution to 91.92.241.15 at the network level, monitoring for connections to the domain or associated IP, and reviewing logs for any user interaction with call-brave.com. Given the domain's active status and association with known phishing infrastructure, further investigation into related domains or IPs may uncover additional malicious assets.