edgesvu[.]cn

The domain edgesvu.cn was registered on 12 November 2024 through the registrar 厦门易名科技股份有限公司. It resolves to the IPv4 address 156.226.72.153, which is advertised as part of AS135097 LUOGELANG (FRANCE) LIMITED and geolocated to Hong Kong. The authoritative name servers are ns1.judns.com and ns2.judns.com. No TLS certificate is presented; the site operates without HTTPS, exposing all traffic to interception. The page title returned by the server, “OK交易所app_欧一下载_意欧app官网 - 欧易交易所下载”, bears no direct reference to the advertised brand but the domain is classified as a brand‑impersonation campaign targeting the cryptocurrency data provider coingecko.

Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of malicious intent. The domain is listed on a single security blocklist and has been flagged by PhishDestroy as a confirmed malicious site. AlienVault’s Open Threat Exchange records the domain in one threat‑intel pulse, providing additional community corroboration. VirusTotal analysis shows that 14 of 95 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of abuse.

The infrastructure footprint is minimal, with only one IP address and two name servers, and the site has been taken offline as of the reporting date. Uncertainty remains regarding the exact content served before takedown, as no SSL or detailed page capture is available. Defenders should continue to block edgesvu.cn at DNS and proxy layers, add 156.226.72.153 to outbound‑traffic deny lists, and monitor for any re‑registration attempts using the same registrar or name‑server pair. Ongoing vigilance is recommended, especially for users of the coingecko brand who may receive spoofed communications referencing this domain.