axium[.]icu

The domain axium.icu is currently active and was registered on April 30, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.97.3, which is associated with Cloudflare, Inc., and is served via Cloudflare's infrastructure using HTTP/3. The site presents an HTTP 526 response, indicating an invalid SSL certificate, and the page title is "axium.icu | 526: Invalid SSL certificate". The SSL certificate in use is issued by Let’s Encrypt (identifier E8). Security analysis shows that seven of ninety-one VirusTotal scanners flagged the domain, and it appears on three external blocklists, including PhishDestroy, MetaMask, and SEAL. The domain is classified as a high‑risk brand impersonation targeting the MetaMask brand. While the exact content of the site has not been examined, the combination of a recent registration date, Cloudflare hosting, an invalid SSL response, and multiple detections suggests a deliberate attempt to deceive users. Defenders should block axium.icu at the network perimeter, update intrusion detection signatures, and monitor for any related traffic. Further investigation of the payload delivered by the site, if any, is recommended to determine the full scope of the threat.