homeless-silver-k5fkbwrxpy-slwksmj7y7[.]edgeone[.]app

This domain, homeless-silver-k5fkbwrxpy-slwksmj7y7.edgeone.app, is confirmed to host a credential harvesting phishing campaign targeting users through deceptive login interfaces. Analysis indicates the site masquerades as a gaming-related portal, specifically titled 'Simple Dungeon Crawl,' to lure victims into submitting sensitive authentication details. The infrastructure is designed to capture credentials, which are likely exfiltrated to attacker-controlled servers for subsequent unauthorized access or financial fraud. Infrastructure analysis reveals the domain was registered on February 21, 2026, through MarkMonitor, Inc., a registrar commonly associated with both legitimate and malicious domains. The site resolves to the IP address 43.152.26.58 and holds an SSL certificate issued by DigiCert, Inc., which may lend a false sense of legitimacy. Detection metrics show that 3 out of 95 security vendors on VirusTotal have flagged this domain as malicious, while it also appears on one security blocklist. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. Users who have visited homeless-silver-k5fkbwrxpy-slwksmj7y7.edgeone.app or interacted with its content are advised to take immediate remedial action. All credentials entered on the site should be considered compromised and must be changed across any platforms where they were reused. Affected individuals should monitor their accounts for unauthorized activity and enable multi-factor authentication where available. System scans using updated security tools are recommended to detect potential secondary infections or data exfiltration artifacts.