edgdex.exchange

Analysis of the domain edgdex.exchange indicates it is an active phishing site leveraging an Airdrop Scam kit. The domain currently resolves to the IPv6 address 2606:4700:3035::ac43:a912 and is served through Cloudflare infrastructure, utilizing HTTP/3 for communication. Despite presenting a blank page with the title 'Blank website. Blank site. Nothing to see here,' the domain appears on two security blocklists and is flagged by 4 out of 95 security vendors on VirusTotal, confirming malicious classification. The domain is associated with 24 threat intelligence pulses in AlienVault OTX, suggesting repeated detection across multiple security communities. Its Gridinsoft trust score is 0/100, and Scamadviser assigns it a trust score of 1/100, further corroborating its malicious nature. The SSL certificate is issued by Google Trust Services, which does not inherently validate the domain's legitimacy but ensures encrypted connections, a common tactic to evade basic scrutiny. While the exact content of the phishing page remains unanalyzed due to its blank presentation, the presence of an Airdrop Scam kit indicates the domain is likely designed to deceive users into disclosing cryptocurrency wallet credentials or transferring assets under false pretenses. The domain is registered through Cloudflare, Inc., a provider frequently utilized by threat actors to obscure hosting details and evade takedown efforts. Defenders should immediately block this domain at the DNS and network levels, particularly in environments where cryptocurrency-related activities occur. Monitoring for connections to the IPv6 address 2606:4700:3035::ac43:a912 and associated Cloudflare infrastructure is recommended. Given its active status and confirmed presence on multiple blocklists, this domain should be treated as a high-risk threat until further analysis or takedown occurs.