kita-quote-wt6k5i5yoz[.]edgeone[.]dev

The domain kita-quote-wt6k5i5yoz.edgeone.dev is identified as a high-risk phishing site targeting users of Tencent EdgeOne, a content delivery network service. Analysis indicates the domain was designed to mimic legitimate Tencent infrastructure, likely to harvest credentials or distribute malicious payloads under the guise of a trusted platform. Current status confirms the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals the domain was flagged by 19 of 95 security vendors on VirusTotal, a notable indicator of malicious intent. It resolves to the IP address 43.174.247.29 and was registered through MarkMonitor Inc., a registrar commonly used for both legitimate and fraudulent domains. The SSL certificate is issued by DigiCert, Inc., a detail often exploited by threat actors to lend false credibility. The domain was created on March 31, 2026, an unusual future date that may suggest domain spoofing or misconfiguration. It appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD, and employs HTTP Strict Transport Security (HSTS) to enforce encrypted connections, a technique frequently abused in phishing campaigns. At present, the domain is offline, reducing immediate risk to users. However, organizations should treat this as a confirmed threat indicator. Recommended actions include blocking the domain and its associated IP (43.174.247.29) at the network perimeter, updating endpoint protection rules to flag related artifacts, and monitoring for any resurgence or similar domains under the edgeone.dev namespace. Users who may have interacted with the domain should be advised to reset credentials and review systems for unauthorized access.