2afak-xyaaa-aaaap-qbl3a-cai[.]icp0[.]io

Analysis of the domain 2afak-xyaaa-aaaap-qbl3a-cai.icp0.io, observed on July 24, 2026, shows a web presence that returns HTTP 200 and presents the page title "Edge Matrix Dashboard." The site is hosted on IP 23.236.116.77, which belongs to AS21859 Zenlayer Inc in the United States. The domain is registered through GoDaddy.com, LLC and uses a Let's Encrypt certificate (E7) that enforces HSTS. Front‑end technologies identified include Vue.js, and the authoritative nameservers are karina.ns.cloudflare.com and clay.ns.cloudflare.com, indicating Cloudflare DNS services.

Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one external blocklist, where it is listed as blocked by PhishDestroy. VirusTotal has processed the domain with 93 scanning engines, none of which reported a detection at the time of the scan; however, the lack of detections is not evidence of legitimacy. The combination of a low trust score, presence on a phishing blocklist, and the use of a generic dashboard title strongly suggests malicious intent, likely a generic phishing operation.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms because the page content has not been publicly dissected. Defenders should treat the domain as hostile, block network resolution to 23.236.116.77, add the domain to URL filtering policies, and monitor for any outbound connections from internal hosts. Continuous re‑scanning with multi‑engine services is advised to capture any future changes in the payload or detection status.