kavaverifybot[.]pages[.]dev

The domain kavaverifybot.pages.dev was registered on April 27, 2026 through Cloudflare, Inc. and resolves to the IPv4 address 188.114.97.3, which is associated with Cloudflare infrastructure located in Canada. The site currently returns HTTP 200 and presents a page titled “Kava | Leading The World To Web3”. Its SSL certificate is issued by Google Trust Services under the WE1 certificate profile and HSTS is enforced. The hosting utilizes Cloudflare’s DNS service, with authoritative name servers buck.ns.cloudflare.com and walk.ns.cloudflare.com. HTTP/3 is enabled, confirming modern protocol support. No additional hosting provider is disclosed beyond the Cloudflare edge. The IP address is listed on three public blocklists – PhishDestroy, ScamSniffer, and Enkrypt – indicating prior detection as malicious. Google Safe Browsing classifies the page under the SOCIAL_ENGINEERING category, and the site is identified as an impersonation of the Aave brand. The page title and visual cues appear unrelated to Aave, suggesting a lure that redirects users to a fraudulent verification flow. Independent reputation services assign extremely low scores, with Gridinsoft rating 0/100 and Scamadviser 1/100, reinforcing the malicious intent. Defenders should block the domain and its underlying IP at perimeter and endpoint layers, and add the associated nameservers to monitoring lists for any future sub‑domains. Continuous observation of Cloudflare‑hosted assets linked to the 188.114.97.3 address is advised, as the same infrastructure may be reused for additional brand‑spoofing campaigns. Incident response teams should also review any recent traffic logs for connections to this domain, especially from users attempting Aave‑related actions, and enforce verification of legitimate Aave URLs.