# PhishDestroy domain threat record: guideng-dpocd376z687.edgeone.dev Content language: English Canonical HTML report: https://phishdestroy.io/domain/guideng-dpocd376z687.edgeone.dev/ Machine-readable companion: https://phishdestroy.io/domain/guideng-dpocd376z687.edgeone.dev/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-28 02:11:42 UTC - Last availability or vendor check: 2026-10-28 02:41:35 UTC - Stored record updated: 2026-10-28 02:41:35 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 43.174.247.29 - Registrar in stored WHOIS data: Tencent Cloud - Last stored HTTP status: 200 - Registration date (registry RDAP, edgeone.dev): 2025-06-09 07:01:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a18061-09c1-76b9-b71a-ab858cc8f421/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/guideng-dpocd376z687.edgeone.dev - Certificate Transparency search: https://crt.sh/?q=%25.guideng-dpocd376z687.edgeone.dev - Web Archive lookup: https://web.archive.org/web/*/https://guideng-dpocd376z687.edgeone.dev/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy classifies guideng-dpocd376z687.edgeone.dev as a suspicious domain based on multiple vendor detections. The domain was first seen by PhishDestroy on 2026-10-28 and returned HTTP 200 with the recorded title “UnoMap·壹图”. How the scam works PhishDestroy’s suspicious label is applied to sites that receive phishing or malicious detections from several security engines. Such sites often try to trick visitors into entering credentials or personal data, but no specific malicious behavior was observed on this page. Evidence VirusTotal scanned the domain on 2026-10-19 (analysis) and recorded five malicious detections from LevelBlue, SOCRadar, VIPRE, Webroot and Yandex Safebrowsing out of 92 engines. Google Safe Browsing checked on 2026-10-28 and did not flag the URL. urlscan.io captured the page on 2026-10-19, gave an overall clean verdict but its engine flagged the site as malicious with a score of 71. Cloudflare Radar scanned on 2026-10-28 and labeled the domain as phishing, marking it malicious. PhishDestroy’s internal blocklist recorded the domain as malicious on 2026-10-28, while external blocklists showed no matches and OTX reported zero pulses. Infrastructure The recorded IP address is 43.174.247.29, belonging to the Aceville Pte.ltd. network in Singapore. TLS was provided by Let’s Encrypt (issuer YR1) for *.edgeone.dev, valid from 2026-09-17 to 2026-12-16. DNS records include A entries for 43.174.247.29 and 43.174.246.29 and a CNAME to 2354db541df20c20.edgeone.dev.pages.dnsoe6.com, with authoritative nameservers ns3.dnsv2.com and ns4.dnsv2.com. What to do Visitors should avoid entering any credentials, private keys or personal data on this site and consider changing passwords if they may have been submitted. Organizations can block the domain at the network perimeter and review access logs for any connections to the recorded IP. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15361-0c7e-73ad-8d4a-567f1584980b/ Cloudflare Radar report: https://radar.cloudflare.com/scan/927597ea-257c-4370-a797-f7a068c5d28b Stored capture screenshot: https://urlscan.io/screenshots/01a15361-0c7e-73ad-8d4a-567f1584980b.png Cloudflare Radar screenshot (2026-10-28T02:13:07Z): https://screenshots.phishdestroy.io/cf/927597ea-257c-4370-a797-f7a068c5d28b.png VirusTotal report: https://www.virustotal.com/gui/domain/guideng-dpocd376z687.edgeone.dev Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=guideng-dpocd376z687.edgeone.dev Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 02:15:51 UTC ## Stored page captures - Primary capture: https://i.ibb.co/S4CrR0hL/63a7b3add1f1.png Captured: 2026-10-28 02:41:35 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a18061-09c1-76b9-b71a-ab858cc8f421.png Captured: 2026-10-28 02:41:35 UTC Source report: https://urlscan.io/result/01a18061-09c1-76b9-b71a-ab858cc8f421/ - URLScan capture 2: https://urlscan.io/screenshots/01a15361-0c7e-73ad-8d4a-567f1584980b.png Captured: 2026-10-28 02:11:42 UTC Source report: https://urlscan.io/result/01a18061-09c1-76b9-b71a-ab858cc8f421/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/927597ea-257c-4370-a797-f7a068c5d28b.png Captured: 2026-10-28 02:13:07 UTC Source report: https://radar.cloudflare.com/scan/927597ea-257c-4370-a797-f7a068c5d28b SHA-256: 356229b74bc6ad0e07aea030e6152b9d1f686a85f37e28781bfa815556befee2 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "cf": { "v": 1, "fetched_at": "2026-10-28T02:14:59Z", "uuid": "927597ea-257c-4370-a797-f7a068c5d28b", "scanned_at": "2026-10-28T02:13:07Z", "final_url": "https://guideng-dpocd376z687.edgeone.dev/", "status": 200, "history": [ { "url": "https://guideng-dpocd376z687.edgeone.dev/", "status": 200 } ], "dom_hash": "fdde362f2fae88abf8e47b849e4fefda5e2381434004b2807c45cef57c9536aa", "doc_hash": "b39d334d5ed4b7cee90069626d7b6d432acbf3e5508b835c931e7157f27cc045", "phishing_v2": [ "phishing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "guideng-dpocd376z687.edgeone.dev", "type": "CNAME", "value": "2354db541df20c20.edgeone.dev.pages.dnsoe6.com" }, { "name": "guideng-dpocd376z687.edgeone.dev", "type": "CNAME", "value": "2354db541df20c20.edgeone.dev.pages.dnsoe6.com" } ], "dnssec_valid": false, "ip": "127.0.1.4", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }, "whois": { "registrar": "MarkMonitor Inc.", "created": "2025-06-09T07:01:06Z", "updated": "2025-10-08T23:26:13Z", "expires": "2027-06-09T07:01:06Z", "nameservers": [ "ns3.dnsv2.com", "ns4.dnsv2.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T02:12:40Z", "analysis_at": "2026-10-19T10:10:45Z", "stats": { "timeout": 0, "harmless": 51, "malicious": 5, "suspicious": 0, "undetected": 36 }, "detections": { "VIPRE": "phishing", "Webroot": "malicious", "SOCRadar": "phishing", "LevelBlue": "phishing", "Yandex Safebrowsing": "phishing" }, "reputation": 0, "created": "2025-06-09T00:00:00Z", "updated": "2025-06-09T00:00:00Z", "first_seen": "2026-10-19T10:13:42Z", "dns": [ { "ttl": 600, "type": "A", "value": "43.174.246.29" }, { "ttl": 599, "type": "CNAME", "value": "2354db541df20c20.edgeone.dev.pages.dnsoe6.com" }, { "ttl": 600, "type": "A", "value": "43.174.247.29" }, { "ttl": 600, "type": "CNAME", "value": "2354db541df20c20.edgeone.dev.pages.dnsoe6.com" } ], "dns_at": "2026-10-19T10:16:04Z", "jarm": "2ad2ad0002ad2ad22c42d42d0000008a5941c13f67e0c0a2c8a36bfeef6920", "cert": { "san": [ "*.edgeone.dev", "edgeone.dev" ], "issuer": "Let's Encrypt / YR1", "serial": "5fb70cbb59204334541800ff2e61c87889d", "sha256": "6d538285ba8e76e272733030941a0f13d96a5ad70d8ff34789947928afe7b1fa", "subject": "edgeone.dev", "valid_to": "2026-12-16T02:52:53Z", "valid_from": "2026-09-17T02:52:54Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-28T02:15:21Z", "caa_records": { "domain": "guideng-dpocd376z687.edgeone.dev" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-28T02:12:18Z", "first": "2026-10-28T02:12:18Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 1258 }, "social_tags": { "title": "UnoMap·壹图", "themeColor": "#f1f5f9", "description": "UnoMap·壹图，WebGPU驱动的高性能3D地图引擎" }, "trackers": { "requests": 6 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 25, "tls": 23, "wait": 34, "connect": 17, "download": 0 }, "response_ms": 99 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 778, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "1.12.0.29", "host": "ns3.dnsv2.com" }, { "ip": "101.227.168.55", "host": "ns4.dnsv2.com" } ], "zone": "edgeone.dev" }, "location": { "ip": "43.174.247.29", "asn": "139341", "org": "Aceville Pte.ltd.", "city": "Singapore", "country": "SG" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "edgeone.dev" }, "dns": { "A": [ "43.174.247.29", "43.174.246.29" ], "CNAME": [ "2354db541df20c20.edgeone.dev.pages.dnsoe6.com" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "43.174.246.29", "family": 4 }, "redirects": { "chain": [ "https://guideng-dpocd376z687.edgeone.dev" ] }, "subdomains": { "count": 1, "subdomains": [ "trippytheog.edgeone.dev" ] }, "headers": { "headers": { "server": "edgeone makers", "content-type": "text/html" } } } } ```