caishenedges[.]com

The domain caishenedges.com is currently offline but exhibits multiple indicators of a high‑risk brand‑impersonation campaign. Registration data shows the domain was created on 27 January 2025 via the registrar Cosmotown, Inc. The authoritative nameservers are ns1.beesengine.co, ns2.beesengine.co, ns1.bullceederserver.com and ns2.bullceederserve, suggesting a split‑hosting configuration that may be used to evade takedown requests. The domain resolves to IP address 107.172.61.186, which belongs to AS36352 (HostPapa) and is geolocated in the United States. No SSL certificate is presented, meaning any HTTP connection would be unencrypted.

The only visible page title, "Caishen Edges - Dedicated to innovating, simplifying, and humanizing digital banking," attempts to mimic a legitimate financial‑services brand and aligns with the listed impersonated target "across." Trust metrics are extremely low: Scamadviser assigns a 1 / 100 score, Gridinsoft a 0 / 100 score, and Google Safe Browsing flags the domain for social‑engineering content. VirusTotal analysis shows 14 of 95 scanned security vendors flag the domain as malicious, and the domain appears on at least one public blocklist. AlienVault OTX references the domain in a single threat‑intel pulse, and the anti‑phishing service PhishDestroy has already blocked it. These converging signals confirm a coordinated attempt to deceive users by leveraging brand‑impersonation techniques.

Because the site is offline, dynamic content cannot be inspected further, and the exact payload or credential‑capture mechanisms remain unknown. Defenders should immediately add caishenedges.com and its resolving IP 107.172.61.186 to outbound and inbound deny lists, monitor for any future DNS re‑registration, and enforce strict TLS verification to prevent accidental connections to non‑SSL endpoints.