wefiletransfer0562026[.]edgeone[.]dev

Analysis of wefiletransfer0562026.edgeone.dev as of August 06, 2026 indicates that the domain is actively used in a generic phishing campaign and is classified with an elevated risk level. DNS resolution points to the IPv4 address 43.174.247.29, which is the sole host observed for this indicator. The domain has been added to at least one security blocklist and is currently listed by the PhishDestroy mitigation service, confirming that external defenses are already recognizing the threat. VirusTotal scans show that eight of ninety‑one AV engines have flagged the domain, providing independent corroboration of malicious intent.

No additional intelligence such as registrar details, SSL certificate information, or HTTP response codes is available in the supplied data, leaving the underlying infrastructure and hosting provider uncharacterized. Consequently, defenders should treat any network traffic to or from 43.174.247.29 with heightened scrutiny. Immediate actions include adding the domain to local blocklists, configuring DNS sinkhole rules, and ensuring that outbound filtering solutions reference the PhishDestroy blocklist.

Monitoring for DNS queries to the domain and for connections to the associated IP address will help detect compromised hosts attempting to reach the phishing infrastructure. Because the domain’s registration and hosting attributes are not disclosed, threat hunters should also query WHOIS and passive DNS sources for potential sibling domains or related infrastructure that may share the same IP range. Continuous re‑evaluation is advised, as additional detections or changes in blocklist status could alter the threat posture.