swasthikg73[.]github[.]io

PhishDestroy identifies swasthikg73.github.io as an active Aave Protocol impersonation scam designed to harvest cryptocurrency wallet credentials and initiate fraudulent transactions. The site leverages GitHub Pages for rapid deployment and Let’s Encrypt certificates to appear legitimate, while serving a fake Aave interface that requests wallet connections. Once connected, victims’ wallets are drained through hidden transaction approvals or direct transfers. This domain was flagged by 16 of 95 VirusTotal security vendors, Google Safe Browsing (SOCIAL_ENGINEERING category), and resolves to IP 185.199.108.153. Registered via GitHub, Inc., it operates under a Let’s Encrypt SSL certificate for HTTPS credibility. The combination of high-risk blocklists, IP reputation, and impersonation tactics elevates the threat to high severity. Users who visited swasthikg73.github.io should immediately disconnect their wallet, revoke any suspicious approvals via tools like revoke.cash, and run a full antivirus scan. Never reconnect your wallet to unknown sites. Report the domain to your wallet provider and relevant blocklists. Stay vigilant—scammers are actively using GitHub Pages to host crypto scams under trusted domains.