fx-tradewave[.]com

fx-tradewave.com was registered on September 11, 2025 through TuringSign Inc. d/b/a Cosmotown. The site presents a TLS certificate issued by Let’s Encrypt (R13), which enables HTTPS but does not provide any reputational guarantee. The page title returned by the server is “fx-tradewave.com - Home”, matching the domain name and offering no additional context. Network analysis shows the domain resolves to the IP address 163.61.188.2, which maps to a location in the United States, specifically a MIT‑associated network block. The server issues an HTTP 301 redirect, indicating that the site may forward visitors to a secondary location. The IP has a trust score of 0 out of 100 and appears on a single security blocklist, confirming its malicious reputation. Threat intelligence flags fx-tradewave.com as a high‑risk brand‑impersonation campaign targeting the cryptocurrency lending platform Aave. Three of ninety‑five VirusTotal scanners flagged the domain as malicious, and the site is listed on a phishing blocklist. The combination of a low trust score, redirection behavior, and targeted brand use aligns with known phishing infrastructure. Defenders should add the domain and its resolved IP address to outbound and inbound filtering rules, and monitor for any traffic to 163.61.188.2. Because the site actively redirects, URL‑based controls should be configured to block the initial domain regardless of subsequent destinations. User education campaigns should emphasize that any unsolicited requests for Aave credentials from fx‑tradewave.com are fraudulent.