querulous-peach-4dtaevfs[.]edgeone[.]dev

The domain querulous-peach-4dtaevfs.edgeone.dev is currently active and has been classified as a generic phishing infrastructure. It resolves to the IPv4 address 43.174.247.29, which is the sole network endpoint associated with the observed activity. Registration data indicates the domain was provisioned through Tencent Cloud, a cloud service provider that often hosts short‑lived malicious sites. DNS resolution details are limited; the nameserver information is not available, suggesting either a rapid deployment strategy or deliberate obfuscation of the authoritative servers.

The domain has been added to two independent security blocklists and is explicitly listed by PhishDestroy and OpenPhish, reinforcing the consensus that it is being used for phishing. VirusTotal analysis shows that 19 of 91 scanned security vendors have flagged the domain as malicious, providing independent corroboration of the blocklist entries. While the available intelligence confirms the domain’s malicious intent, several aspects remain uncertain: the specific payload or credential‑harvesting page has not been publicly documented, the hosting ASN and geographic location of the IP are not disclosed, and no SSL certificate or HTTP response details have been observed.

Defenders should immediately block both the domain and its resolved IP at perimeter filters, DNS resolvers, and endpoint security solutions. Continuous monitoring for newly resolved IPs or similar sub‑domain patterns issued by the same registrar is advised, as the operators may rotate infrastructure rapidly. Inclusion of the domain in internal threat intelligence feeds will aid correlation with potential phishing attempts targeting users.