morphocoin[.]icu

The domain morphocoin.icu was registered through Gname.com Pte. Ltd. on February 21, 2026 and currently resolves to the IPv4 address 43.106.24.116, which is geolocated in Singapore and belongs to AS45102 (Alibaba (US) Technology Co., Ltd.). The authoritative name servers for the zone are a.share-dns.com, a6.share-dns.com, b.share-dns.net, and b6.share-dns.net, indicating reliance on a shared DNS service. No TLS certificate is presented for the host, so HTTPS connections are unavailable and the site would be served over plain HTTP.

The page title returned from the HTTP response is "Morphocoin," matching the brand target listed as "morpho" and confirming the classification as a brand impersonation campaign. VirusTotal reports six of ninety‑five scanners flagging the domain, providing limited but notable malicious indicator coverage. The domain appears on three independent blocklists—PhishDestroy, MetaMask, and SEAL—and is listed as offline at the time of analysis, suggesting the operators may have taken the site down or are temporarily evading detection.

Given the observed infrastructure, defenders should add the IP address 43.106.24.116 and the four share‑dns name servers to network‑level deny lists, enforce DNS filtering for the domain, and monitor for any re‑registration or resurrection of the host. Continuous re‑scanning on multi‑engine platforms is advised to capture any future changes in detection scores, and threat‑intel feeds should be updated to retain the association between morphocoin.icu and the Morpho brand impersonation campaign. Uncertainty remains regarding the exact content served before takedown, as no visual or functional analysis was performed; however, the available technical artifacts are sufficient to justify an elevated risk rating and proactive blocking.