edgexchange[.]icu

The domain edgexchange.icu was registered on December 04, 2025 through Web Commerce Communications Limited and is currently hosted on the Cloudflare network (AS13335) with the IPv4 address 104.21.31.29, which resolves to a United States location. No TLS certificate is presented for the site, indicating that traffic is delivered over plain HTTP. The authoritative nameservers are may.ns.cloudflare.com and sevki.ns.cloudflare.com, both typical of Cloudflare‑managed domains. The landing page title captured by crawlers reads "MARU Airdrop: Claim Free MARU Tokens - edgeX," matching the known phishing kit classified as an Airdrop Scam and the broader crypto‑scam taxonomy.

The site has been actively blocked by the PhishDestroy service and appears on a single public security blocklist, demonstrating that at least one threat‑intelligence feed has identified it as malicious. VirusTotal reports five detections out of ninety‑five scanners, reinforcing the suspicion of malicious intent. The domain’s current operational status is offline, which may be the result of takedown actions or the host’s own mitigation.

While the infrastructure and content indicators strongly point to a crypto‑airdrop phishing campaign, no additional evidence such as malware payloads, credential harvesting endpoints, or user‑submitted phishing reports has been disclosed, leaving the exact victim interaction flow unconfirmed. Defenders should continue to block the domain at perimeter security devices, update URL filtering lists to include edgexchange.icu, monitor for any resurgence of the domain or related subdomains, and consider issuing alerts to users who may have received unsolicited communications promising free MARU tokens. Incident response teams should also verify that any internal references to the domain are removed from logs and that any compromised credentials are rotated if exposure is suspected.