spot-wave[.]fun

This domain, spot-wave.fun, poses as an official Aave token airdrop page to deceive cryptocurrency users into connecting wallets or submitting sensitive credentials. Analysis of the site reveals it is designed to mimic legitimate airdrop campaigns, specifically targeting Solana token holders with a false claim page titled 'Airdrop Live | Claim Solana Token Airdrops.' Victims who interact with the site risk unauthorized access to their digital assets, likely through malicious smart contracts or credential harvesting scripts embedded in the page. Infrastructure analysis confirms the domain was registered on February 9, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with fraudulent domains. The domain resolves to the IP address 188.114.96.3 and is flagged by 18 out of 95 security vendors on VirusTotal. It appears on three security blocklists and is actively blocked by multiple cryptocurrency security tools. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the malicious intent of the site. Additional threat intelligence sources report the domain in six separate pulses, indicating coordinated tracking by security researchers. If a user has visited spot-wave.fun or interacted with its content, immediate action is required. Disconnect any connected wallets from the site and revoke permissions for all suspicious dApps using wallet management tools. Scan the device for malware, as interaction may have triggered downloads of malicious payloads. Monitor wallet activity for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security platforms and cryptocurrency exchanges to aid in broader mitigation efforts. Users should verify all future airdrop claims through official channels only.